Using Information Object to find PII in Applications

[rvandolson]

So, we can define Information Objects, relate them to Business Applications and from there assess which Business Applications might be relevant for compliance or audit activities that center around PII (as an example).

What I am not quite grasping is the right way to specify which Information Objects are considered PII.  Obviously, you can eyeball them, but it seems there must be a more elegant way.

[CMDB Whisperer]

The best way to do this is in the APM application.  With APM installed, you will have a new attribute on the Information Object class to specify the Data Domain, e.g. "PII" or "PCI".  Without APM installed there is no OOB solution for this, so you would need to customize the CI class to store this information or find some other solution.