How to Create a Tag

In addition to the information below, to see examples of Tags as well as details about the available Conditional Tag settings and operators, see Tag Examples.

Tag Types

There are 3 types of Tags you can create (add):

• IP Range Tag
• • Captures all Agents/Targets which satisfy the IP or IP range set.
  • This Tag type is not commonly used
• Manual Tag
• • This Tag requires you add specific Targets or Agents to it from other parts of the SDP user interface after the Tag is created. See "How to Add a Manual Tag" below.
  • This Tag type is commonly used
• Conditional Tag
• • All Agents/Targets which satisfy the conditions set in the Tag are captured and displayed.
  • This is a dynamic Tag whose results change as new Agents/Targets satisfy its conditions and those Tags (retired/removed) which no longer satisfy its conditions no longer appear in its results
  • This Tag type is commonly used and the most powerful of all 3 Tag types

How to Name a Tag

Because Tag names appear across Dashboard widgets, Policy configurations, Scan assignments, and Compliance reports, adopting a structured taxonomy ensures your Tag library remains scalable and easily searchable.

Recommended Tag Naming Framework

Use a two-part or three-part structured format:

[CATEGORY] - [DESCRIPTOR] - [SUB-TYPE]

• Category Prefix: Groups related tags together alphabetically in dropdown menus and filter pickers.
• Descriptor: The specific business unit, site, OS, or regulatory scope.
• Sub-Type / Modifier (Optional): Additional context like subnet, environment, or tier.

Standard Tag Categories & Examples

1. By Department / Business Unit (DEPT)

• Groups endpoints and assets by organizational ownership for reporting and custodian alerting.

Examples:

• DEPT - Human Resources
• DEPT - Finance & Accounting
• DEPT - Legal & Compliance
• DEPT - Engineering & R&D
• DEPT - Executive Leadership (VIP endpoints)

2. By Device / Host Type (TYPE)

• Separates client workstations from shared infrastructure servers.

Examples:

• TYPE - Laptops & Workstations
• TYPE - Production Servers
• TYPE - Virtual Desktops (VDI)
• TYPE - Dedicated Discovery Workers

3. By Geography / Data Center / Network (GEO/NET)

• Used primarily for IP Range Tags and physical office boundaries.

Examples:

• GEO - US-East DataCenter
• GEO - London Office
• NET - HQ-Subnet-10.0.1.0/24
• NET - VPN-Remote-Pool

4. By Operating System (OS)

• Ideal for Conditional Tags based on Agent OS attributes.

Examples:

• OS - Windows 11 Workstations
• OS - Windows Server 2022
• OS - macOS Endpoints
• OS - Linux Servers (RHEL)

5. By Compliance & Sensitivity Tier (COMP/TIER)

• Aligns grouped endpoints directly with audit scopes and risk playbooks.

Examples:

• COMP - PCI-DSS (CDE Scope)
• COMP - HIPAA (PHI Repositories)
• COMP - GDPR (EU Resident Data)
• TIER - Crown Jewels (Tier 1)
• TIER - General Corporate (Tier 3)

6. By Lifecycle / Status (STATUS)

Useful for tracking decommissioned or maintenance machines:

• STATUS - Decommission Pending
• STATUS - Inactive > 30 Days

Best Practices for Tag Management

1. Category-First for Alphabetical Sorting: Spirion Sensitive Data Platform lists Tags alphabetically in scan pickers and dashboard filters.
2. 1. Prefixing Tags with terms such as DEPT -, GEO -, or TYPE - group related Tags naturally.
2. Consistent Separators: Standardize on a single delimiter throughout the platform
3. 1. Avoid mixing slashes, underscores, and freeform text.
   2. Use one of the following naming syntaxes:
   3. 1. CATEGORY - Descriptor
      2. CATEGORY: Descriptor
3. Avoid User-Specific Names: Never name Tags after individual employees. For example, John's Laptop
4. 1. Use departmental or role-based descriptors instead.
   2. 1. For example, DEPT - Sales Mobile, as users change over time while assets remain.
4. Distinguish Dynamic vs. Manual Tags: For complex deployments, consider noting dynamic criteria in the name
5. 1. For example, COND - Win11-Active vs. MANUAL - M&A-Audits
5. Enforce Uniqueness & Specificity: The system enforces unique Tag names
6. 1. Avoid generic names like Test, Temporary, or Group 1 which provide no context in audit reports.

How to Add an IP Range Tag

Use the following steps to create an IP Range Tag:

1. From the left-side navigation menu, navigate to the Tag Management page. Select "Data Asset Inventory > Tag Management."
2. In the top right of the screen, click the blue Add Tag button.
3. In the Add Tag pop-up window, enter the following:
4. • Tag Name: Enter the Tag name using proper naming conventions. See "How to Name a Tag, above."
   • Select IP Range from the Tag Type drop-down list.
     
     
   • IP Range: Enter the IP range.
   • Tag Placement:
   • • Set as High Level Tag: Select this option to set the new tag as high-level (parent) tag under which child tags can be nested.
     • Nest Tag: Select a high-level (parent) tag to nest this new tag under as a child tag.
       
       
4. Click Save to save the tag, Save & Create Another Tag to save this tag and create another, or Cancel to discard.

How to Add a Manual Tag

NOTE:

• You do not add the Agents or Targets to your Tag in the Create New Tag pop-up window.
• You assign a Tag to an Agent from the Agent Management page ("Agents" from the left-side navigation menu).
• • Select "Manage Tag" from the more options menu for an Agent.
    
    
• You assign a Target to an Agent from the Data Assets and Targets page (TARGETS tab).
• • Select "Manage Tag" from the more options menu for a Target.
    
    

Use the following steps to create a Manual tag:

1. From the left-side navigation menu, navigate to the Tag Management page. Select "Data Asset Inventory > Tag Management."
2. In the top right of the screen, click the blue Add Tag button.
3. In the Create New Tag pop-up window, complete the following:
4. 1. Tag Name: Enter the tag name.
   2. Select Manual from the Tag Type drop-down list.
      
      
   3. In the Tag Placement section, select an option:
   4. • Set as High Level Tag: Select this option to set the new tag as high-level (parent) tag under which child tags can be nested.
      • Nest Tag: Select a high-level (parent) tag to nest this new tag under as a child tag.
        
        
4. Click Save to create the tag, Save & Create Another Tag to save this tag and create another, or Cancel to discard.

How to Add a Conditional Tag

In addition to the information below, to see examples of Tags as well as details about the available Conditional Tag settings and operators, see Tag Examples.

Use the following steps to create a Conditional tag:

1. From the left-side navigation menu, navigate to the Tag Management page. Select "Data Asset Inventory > Tag Management."
2. In the top right of the screen, click the blue Add Tag button.
3. In the Create New Tag pop-up window, complete the following:
4. 1. Tag Name: Enter a name in the Tag Name box.
   2. Select Conditional from the Tag Type drop-down list.
      
      
4. Select an option from the Action Type (left) drop-down list. For descriptions of the various Action Types and Operators see "Available Conditional Tag Settings and Values."
   
   
5. Select an option from the Operator (center) drop-down list.
   The values available depend on the selection in the Action Type drop-down list.
   
   
6. Enter or choose a value in the Value Input (right) box.
   The values available depend on the selection in the Action Type drop-down list.
   
   
7. To add or remove conditions:
8. 1. Click the Add (plus) icon to add an additional group or value
   2. Click the Remove icon (trash can) to delete a group or value
8. In the Tag Placement section, select an option:
9. • Set as High Level Tag: Select this option to set the new Tag as high-level (parent) Tag under which child Tags can be nested.
   • Nest Tag: Select a high-level (parent) Tag to nest this new Tag under as a child Tag.
9. Click Save to save the Tag, Save & Create Another Tag to save and create another tag, Cancel to discard.
10. To see examples of Tags as well as details about the available Conditional Tag settings and operators, see Tag Examples.