Predefined

Introduction

Data-Loss Protection (DLP) policies monitor content on your cloud platform that is considered sensitive and at risk of exposure. Pre-defined policies are policies whose regular expressions are pre-written by Cisco Cloudlock engineers, some of which can be edited or customized in policy configuration. Configurations available in the policies include:

• Exceptions to the content regular expression
• Threshold
• Tolerance (some are limited to the default)
• Proximity expressions
• Platform(s) to monitor
• File Type
• Object Type
• Ownership and Exceptions
• Exposure and Exceptions

Common PII Used in Predefined Policies

Birth Date

Birth dates are often a

• (dd) day; (mm) month; (yy) year represented by 6 digits with or without delimiters: dddddd
• In some cases the century is encoded in the year of birth and the gender may be encoded in the month. These specifications vary per country and are detailed below.

Driver's License, Passport Numbers and Personal Identification Numbers (e.g. TIN, EGN, OIB, NIF etc)

d- numerical digits
l- letter
x- alphanumeric

Drug Name

Common drug names based on the FDA's (Federal Drug Administration) Approved Drug Products with Therapeutic Equivalence Evaluations book, more commonly known as the Orange Book.

Health Condition

Diseases and medical conditions based on the CDC's (Center for Disease Control and Prevention) National Notifiable Diseases Surveillance System (NNDSS). For example: Adenocarcinoma, Drug Toxicity and Accelerated Idioventricular Rhythm.

International Bank Account Number (IBAN)

Format:

• Two-digit country ISO code + two checksum digits + Basic Bank Account Number (BBAN)
• All IBANs are digits only
• BBAN is broken down into:

• b- National bank code
• c- account number
• s- branch code
• x- national check digit

Value Added Tax Number (VAT) and Tax ID Number (TIN)

d- numerical digits
l- letter
x- alphanumeric

Predefined Policies by Industry