Overview

This article details the functionality of Netskope One DSPM's Classification Management page. We recommend reading more about Netskope One DSPM's approach to Classification Management.

Reviewing Classifications

To review how Netskope One DSPM has classified your data , click Classification > Classification Management in the left navigation. Arrive at the Classification Management Page. On this page, you can see how all fields and files across your data stores have been classified.  

The dashboard at the top of the page displays a summarized view of sensitive fields/files and their sensitivity levels, provides a trend graph of the growth of sensitive fields and files in your data stores, and shows a donut chart of all the highly-sensitive fields and files. 

Using Filters

• Click on each of the numbers of the Dashboard displays to filter and narrow down the list view at the bottom. 
• Clicking on the Filter button to build your own list view using a combination of column names and their associated values/ranges.
• Click on the dustbin icon to click each filter condition or press the Clear Filters button to clear all filters and restore the full list.

Using Saved Views

The Classification Management screen within the Netskope One DSPM application supports defining saved views. Each saved view is a saved configuration of displayed columns & applied filters, which you can switch between as you operate within different contexts. For example, one saved view might allow you to research classification fields with certain severity levels, while another saved view lets you focus on field classifications requiring review. Saved views can also support your team outside of the Netskope One DSPM application by letting you repeatedly create CSV exports of specific columns and rows.

There are two view types:

As you add saved views, their names are displayed as individual boxes within a view ribbon. Click any of these boxes to change the view currently displayed, which will be highlighted in light purple.  Longer view names are truncated, but their full name is displayed when hovering over its box:

There is always a single view designated as the preferred view, identifiable by its star icon, which is displayed each time you visit the Classification Management screen. In the absence of any custom ones, the first view is automatically designated as the preferred view:

Create a Saved View

1. Configure your desired filters, sorting, and column display.  The “Unsaved Changes” label displays.
2. In the view ribbon, click the Add button (plus sign).
3. The Add View modal is displayed.
4. Enter the following values:

4. Click the Save button.

Rename a Saved View

1. In the view ribbon, select the view by clicking its name.
2. Click the view’s context menu icon.
3. In the context menu, select the Rename option.
4. The Edit View modal is displayed.
5. Enter the following values:

6. Click the Save button.

Update Filters and Columns for a Saved View

Besides renaming a saved view, you can also add or remove its applied filters & displayed columns.  Whenever you have outstanding edits, the label “Unsaved Changes” will be displayed alongside the current view’s name:

1. In the view ribbon, select the view by clicking its name.
2. Configure your desired filters, sorting, and column display.  The “Unsaved Changes” label displays.
3. Click the view’s context menu icon.
4. In the context menu, select the Save option.

Designating a View as Preferred

1. In the view ribbon, select the view by clicking its name.
2. Click the view’s context menu icon.
3. In the context menu, select the Set as Preferred option.

Delete a Saved view

1. In the view ribbon, select the view by clicking its name.
2. Click the view’s context menu icon.
3. In the context menu, select the Delete option.

After you delete the last saved view, the first view is automatically designated as the preferred view.

Reviewing Individual Fields

You can review and verify sensitive classifications completed by Netskope One DSPM.  

If Netskope One DSPM has correctly classified a field, you can click the Mark as Reviewed icon in the Action column to indicate to other Netskope One DSPM users that someone has reviewed the classification, and alerts based on this field are likely to be accurate. Once the Reviewed button is clicked, it will turn green, and then any user can see who and when the field was reviewed: 

If Netskope One DSPM has incorrectly classified a field, click the check box next to the field you want to review and use the drop-down options to adjust type, tags, sensitivity level, and review status. Once you've updated the field, check the box for Reclassify on Next Scan and press the Save button. Netskope One DSPM will update the classification with your input on the next scan.

If you select one or more rows, you can also “Bulk Edit” multiple rows simultaneously. (Bulk Edit allows you to tag, review, and reclassify multiple rows simultaneously.) 

In some cases, Netskope One DSPM will provide feedback if there are no data samples for classification. The field will be marked as "Not Sensitive," and a supplementary tooltip will provide more information. 

If Netskope One DSPM has incorrectly classified a field, but the type of sensitive field doesn’t exist in Netskope One DSPM’s built-in classifier list, you can create a Custom Sensitive Data type (see our Creating a Custom Sensitive Data Type article for more information).

Reviewing Individual Files

On the Files tab, you can see all Sensitive Data Types Netskope One DSPM has detected within files across connected data stores, including their respective data store names, sensitivity levels, data tags, and occurrence count. Use the filters to review Sensitive Data Types based on these column headers to glean more insight.  

If you have RBAC permission view data samples & snippets, an “Actions” column will be displayed with a “Get Snippets Icon”.  Clicking this icon will display a drawer that shows the file data grouped by Sensitive Data Type.  Any file data that was classified under the Sensitive Data Type is displayed, with any available context before / after the actual matching data that is highlighted in purple.

If the file being inspected is an archive file, an additional control is be displayed that lists the archive's individual file contents.  Select this to limit the display of classifications to those just for the selected file.

Using External Tags

Netskope One DSPM supports ingesting tags from GCP Policy Taxonomies and Snowflake tags.  If you have any GCP Projects or Snowflake Data Stores configured to ingest tags, any object-to-tag associations we discover will be regularly synced to their equivalent Netskope One DSPM Classification Fields. Such associations cannot be changed within Netskope One DSPM. Please update your configurations within the appropriate cloud platform console if you need to add, edit, or delete these associations.  To learn more, please visit our Data Tags article.

Viewing User Access Information

Netskope One DSPM displays the number of users accessing specific fields on the Classification Management page. Clicking on this count will display additional user information to help analyze access control.