"We are trying to enable Company Table normalization through Content services with Share back enabled. However, there is concern that company data records which contain flags for vendor, risk assessment outcomes, etc. is considered sensitive data. GRC and Infosec need an understanding of what data is shared back for company table normalization when company records are not found in the content service, how that data is secured so that it is provided anonymously and not tied to CRWD, and how its transmitted/secured. If there is a document that explains that for security and risk teams for assessment please provide the documentation. Depending on the assessment we may need to schedule time with a SME on content services from a security perspective. Getting this question answered is holding up deployment of company table normalization which is impacting several process areas. Your help is greatly appreciated."
