What is a Tag?

Tags are an important part of Spirion Sensitive Data Platform. Tags are used to organize Targets, Agents for reporting, policy management, Roles-Based Access Control, and other operations within the console.

A Tag is an organizational label for Spirion Agents, Targets, and Assets. It enables you to better manage these objects in your environment.

You can also think of Tags as a kind of container or logical grouping which hold a group of Targets, Assets and/or Agents.

Overview

A Tag can be either a manual (a static definition) or dynamic (defined with conditions that capture whatever objects satisfy the conditions) group (1 or more) of Targets/Assets. A Tag can also be a container for 1 or more Agents.

  • Targets are any data location Sensitive Data Platform can scan, such as Marketing laptops, cloud Assets such as SharePoint, or Amazon S3, or databases such as HR databases) for the purpose of scanning those Targets for sensitive information (credit card numbers, social security numbers, medical insurance subscriber IDs, etc.).
  • An Asset is a location, local, or remote (such as cloud-based), that contains Targets (a Target is any data location inside an Asset that Sensitive Data Platform can scan).
  • Agents are applications installed to a local machine, such as a workstation, or remote virtual machine, that scans and evaluate locations such as OneDrive, box, SharePoint, etc. for sensitive data. Agents can act as Targets (a single workstation scanning itself).
  • Tags are not hashtags! A hashtag is a metadata tag operator that is prefaced by the hash symbol, #.
  • Classifications are not Tags.

What are Tags Used for?

Tags are used to organize Targets and Agents.

In other parts of Spirion Sensitive Data Platform, you can use Tags as a category when reporting, managing policies, setting up users in Role-Based Access Control, scanning, and other operations.

For example, in the image below, all available Tags are shown in the create new scan wizard when the user is prompted to select a Target to scan. You can select a single Target, multiple Targets, or even an entire group of Targets by selecting the Tag containing the Targets.

Tag Types (Targets/Assets)

You can select the Targets for your Tag manually, or you can define the conditions that determine which Targets your Tag will contain. For more information see Tag Examples.

There are three types of Tags (two conditional and one manual):

  • IP Range: Conditional Tag which includes Agents and Targets based on a range of IP addresses you enter.
  • Manual: Manual Tag which includes Agents and Targets manually added by you to your Tag.
  • Conditional: Conditional Tag which includes Agents and Targets captured by a set of user-defined parameters.

Tag Management

Tags (which contain Targets or Assets) can be created, viewed, searched for and managed on the Tag Management screen, under Data Asset Inventory in the left side navigation menu:

Tag Management (Agents)

Tags (which contain Agents) are managed from the Agent Management page.