Classification Persistence

Overview

• Persistent classification is vital for consistent data management
• Data at rest and data at motion both require classification persistence
• archTIS Spirion persistently classifies data at rest using privacy-grade accuracy to label files with metadata which then informs in-motion data loss prevention (DLP) controls.
• Whether applied manually or automatically via Scan Playbooks, classification labels are critical components to protecting sensitive information.
• Using persistent archTIS Spirion-applied labels, DLP solutions focus on performing actions rather than inspecting content, acclerating accuracy and performance

For a high-level video overview of file Classification, Persistence and how it dovetails with data loss prevention tools (DLPs) watch this archTIS Spirion Classification Demo.

What is File Classification Persistence?

File classification persistence refers to the ability of a file's security classification (for example, "Confidential," "PII," "Internal") to remain with the file, regardless of how or where it is moved, copied, renamed, or attached to an email.

This ensures that the classification travels with the data.

What are the Different Types of Classification Persistence?

There are three different types of sensitive data classification persistence:

• Persistent
• Semi-persistent
• Non-persistent

Persistent

In persistent classification, classifications are embedded within the file metadata ensuring the classification persists even when the file is moved, emailed, or copied.

• In Spirion Sensitive Data Platform, the following file types support persistent classification:
• • Office 2007+ files that utilize the XML schema (those with a trailing 'x,' that is, ".DOCX")
  • XMP
  • GIF
  • BMP
  • PDF

Semi-persistent

In semi-persistent classification, classifications are added to the alternative data stream (ADS) “side car” that accompanies the file as it moves around an NTFS file system.

• In Spirion Sensitive Data Platform the following file types support semi-persistent classification:
• 1. There are 4 pieces of metadata written into the ADS, most importantly:
  2. 1. IFClassification_name
     2. 1. Holds the classification name(s)
     2. IFClassification
     3. 1. Holds the classification GUID(s)
  2. Any file on an NTFS file system supports this type of classification
  3. If the file leaves the file system, the classification does not leave with it

Non-persistent

In non-persistent classification, classification is retained only within the Spirion application.

• In Spirion Sensitive Data Platform the following file types support non-persistent classification:
• • Called “In database” for Spirion Sensitive Data Manager (SDM).
  • Any file or “location” (file or email, including file path) retained by the application can be classified