Exploring Data Classification

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Exploring Data Classification

    Data Classification is a crucial feature in the ServiceNow AI Platform that enables organizations to manage and categorize their data effectively. It helps ensure visibility into the types of data hosted, compliance with privacy laws, and adherence to industry regulations, particularly for sectors like financial services and medical device manufacturing.

    Show full answer Show less

    Key Features

    • Manual Data Classification: Users can manually apply classifications to existing dictionary entries across any tables, allowing for customized data management.
    • Pre-defined and Custom Classifications: While pre-defined data classifications are advisable for consistency, users can create their own and establish a tiered hierarchical system.
    • Overview Dashboard: This feature provides insights into how data tables are mapped to classifications, enabling tailored approaches based on user demographics.
    • API Integration: Data Classification supports scripted and REST APIs for applying classification metadata within existing workflows and applications.
    • Domain Separation: The system supports domain separation, ensuring data classification processes are distinct between different organizational domains.

    Key Outcomes

    By implementing Data Classification, organizations can effectively manage sensitive information such as Personally Identifiable Information (PII) and ensure compliance with regulations like GDPR. This capability allows for the application of appropriate security mechanisms, protecting personal data from unauthorized access. Administrators can use the Overview dashboard to verify the correct assignment of classifications to sensitive data fields, enhancing data governance and audit readiness.

    Explore about data classification.

    Data Classification enables support for:
    • Visibility into the types of data hosted on a ServiceNow AI Platform instances.
    • Compliance with privacy laws, and meeting regulation requirements for industries such as financial services and medical device manufacturing.

    Data classifications

    Data classification is a standalone process in which you manually apply data classifications to existing dictionary entries in any table. See Data dictionary tables for additional information.
    • You classify data as you find appropriate for your business and you can alter the available data classes as necessary.
    • When you classify data, you can use the pre-defined data classifications, or create your own. Although use of pre-defined data classifications is optional, it is advisable do so as a starting point. These pre-defined data classifications are included in demo data that you can install in your instance. To learn more, see Installing Data Classification plugin demo data and Components installed with Data Classification demo data.
    • If you create your own data classifications, you can also design a tiered hierarchical system with parent and child data classifications.

    Overview dashboard

    Use the Overview dashboard to understand how your current data tables map to different data classifications. You can also analyze how your global, regional, international users may require different approaches to data classification, regarding the use or access to data. You can also customize the Overview dashboard content and layout to fit your needs.

    To learn how to use the available scripted and REST APIs to apply the classification metadata within existing processes, workflows, and applications, see the following:
    Note:
    Data Classification supports domain separation, and the data_classification table itself is process separated.

    Use cases

    General Data Protection Regulation (GDPR) is a European Union regulation whose purpose is to provide individuals with control over their own personal data. You can use data classifications, such as Personally Identifiable Information, to identify where personal data is being stored in your instance. By applying the appropriate security mechanisms to protect that personal data from leaking out, your organization satisfies GDPR requirements.

    If you store customer information in the ServiceNow AI Platform, use the Personally Identifiable Information (PII) classification code where needed to track data subject to regulation by local privacy laws. When you install demo data, it automatically applies this classification code to certain security-sensitive fields in the User [sys_user] table. To learn more, see:

    You can apply a Restricted data classification to Employee table columns that store sensitive employee information such as Social Security Numbers (SSN). Administrators and auditors can then use the Overview dashboard to confirm that you have assigned data classifications to the correct columns. They can also view the classification details for restricted types of information.