Create Sensitive Data Models

You can create sensitive data models by discovering sensitive data in Data Discovery or by creating an empty sensitive data model and manually adding columns of interest.

Create a Sensitive Data Model Through Data Discovery

1. Under Security center, click Data discovery.
2. Click Discover sensitive data.
3. For Sensitive data model information, do the following:
   1. Enter a name for the sensitive data model or leave the default name as is.
   2. Select a compartment in which to store your sensitive data model.
   3. Optionally, enter a description for your sensitive data model.
   4. Select a target database.
   5. If you need to switch compartments, click Change compartment, and browse to and select a different compartment.
   6. Click Next.
4. For Select schemas, select the schemas that you want Data Discovery to search, and then click Next. Only non-Oracle maintained schemas are displayed and are selectable.
   • (Optional) If the schemas on the target database have been updated since the stated time and date, click Refresh database schemas.
   • To select all the schemas at once, select the check box to the left of the Schema name column title.
   • To search for a schema, enter part of all of your schema's name in the search box in the upper-right corner, and then click Search. The name is case-sensitive.
   • At the bottom right, click the left and right arrow buttons to navigate the pages.
5. Optionally, for Select tables for schema, select tables for selected schemas from the target database. If selected, discovery will be run only on selected tables of the schema. Alternatively, you can skip this step and proceed to the next if you want all tables for the selected schemas to be scanned.
6. For Select sensitive types, select the categories of sensitive types and/or the individual sensitive types that you want to use to discover sensitive data, and then click Next.

   Select from the Common sensitive types section to discover from the 21 most popular sensitive types. By limiting the selection of sensitive types that are likely to be present within your target database, you decrease the time that it will take to create a sensitive date model. You may select additional sensitive types in the All sensitive types section.

   Select from the All sensitive types section

   • To view all categories and sensitive types, toggle the Expand All slider to the right.
   • To view sensitive types within a sensitive category, expand individual check boxes.
   • To view only Oracle Predefined sensitive types and categories, toggle Show only Oracle Predefined Sensitive Types
7. For Select Discovery Options, do the following:
   1. (Optional) To collect sample data values from the target database, select Collect, display and store sample data. The collected data is automatically deleted when you delete the sensitive data model.
   2. (Optional) Select Discover application level (non-dictionary) referential relationships. This option uses column name and data patterns from the selected sensitive types. The discovered relationships can span across schemas, including those not selected on the Select Schemas page.

   Note:

   See Discovery through Non-Dictionary Referential Relationships for more information.
8. Click Create Sensitive Data Model.

   The Sensitive Data Model Details page is displayed. When the data discovery job is completed successfully, a status of ACTIVE is displayed and details about the sensitive data model are displayed.

9. On the Sensitive Data Model Information tab, review the chart to identify which sensitive types and sensitive categories have the most sensitive data.
10. Scroll down to the Sensitive Columns section, and review the sensitive columns. You can organize the data three ways by selecting one of the following options from the drop-down list:
    • Flat View (default): Lists sensitive columns, sorted alphabetically by either schema, table, or column.
    • Sensitive Type View: Organizes the results by sensitive type.
    • Schema View: Organizes the results by schema.
11. To filter the list of sensitive columns, do the following:
    1. Click + Add Filter.
    2. In the first drop-down list, select Column Name, Schema Name, Table Name, Sensitive Type, or Relation with Parent.
    3. In the second drop-down list, select an operator.
    4. In the box, enter a value. Note that this field is case-sensitive. Enter an exact match.
    5. To add another filter, click + Add Filter and repeat the steps b through d.
    6. When all your filters are created, click Apply.
    7. To remove a filter, click the X button next to the filter.
12. Examine the referential relationships.

Create a Sensitive Data Model Manually

1. Under Security center, click Data discovery.
2. Click Create sensitive data model manually.
3. For Sensitive data model information, do the following:
   1. Enter a name for the sensitive data model or leave the default name as is.
   2. Select a compartment in which to store your sensitive data model.
   3. Optionally, enter a description for your sensitive data model.
   4. Select a target database.
   5. If you need to switch compartments, click Change Compartment, and browse to and select a different compartment.
4. Click Create sensitive data model manually.

   The Sensitive Data Model Details page is displayed. When the data discovery job is completed successfully, a status of ACTIVE is displayed and details about the sensitive data model are displayed.

5. To manually add columns to the sensitive data model, do the following:
   1. Scroll down to the Sensitive Columns list and click Add Columns.
      The Add Columns window is displayed.
   2. (Optional) If the schemas on the target database have been updated since the stated time and date, click Refresh Database Schemas.
   3. Find sensitive columns by entering or selecting one or more of the following items, and then click Search:
      Schema name
      Table name
      Column name

      A list of sensitive columns that match your selection criteria are displayed.

   4. Add the sensitive type for each column by selecting a sensitive type from the drop-down list.
   5. Select the columns that you want to add to your sensitive data model, and then click Add Columns.
      To select all the columns, select the All columns radio button. To select all columns on the current page, select the check box next to the Schema column heading.