Configuring a Data Collection Policy

Notes and Constraints

• Deselected built-in measures will not be displayed in the baseline policy table.
• If you deselect a built-in data protection type, it will not be displayed in the baseline policy list, and its default policy requirements will be cleared. The next time you select the type, you will need to configure its policy requirements.

Configuring Data Collection Security Measures

1. Log in to the DSC console.
2. Click in the upper left corner and select a region or project.
3. In the navigation pane on the left, choose Risk Assessment > Security Baseline Configuration.
4. Click the Collection tab page.
5. Click Configure Measures. The Configure Measure page is displayed.
   • Built-in Measures: DSC provides built-in measures for different data phases based on Huawei Cloud data security governance experience. For details about the built-in measures, see Built-in Measures.
   • Custom Measures: The added custom measures are displayed in the baseline policy list.

6. You can uncheck the box to deselect unnecessary measures. The deselected measures will not be displayed in the policy baseline list.
7. Click Add. The Add Custom Protection Measure page is displayed.
   1. Enter the measure name and measure description. Click OK to return to the Configure Measure page, where you can see the added measure.
   2. Click Edit in the Operation column to modify a measure, or click Delete to delete an unnecessary measure.

8. Click OK to view the configured measures in the policy baseline list.

Configuring Data Protection Types

1. Click Configure Data Protection Type.
2. Configure Built-in Data Protection Type. If a protection type is deselected, the type will not be displayed in the baseline policy list, and the default policy requirements of this type will be cleared. The next time you select the type, you will need to configure its policy requirements.
   • General Data Protection: This type of protection is applied to data that has not been classified based on sensitive data identification.
   • Leveled Data Protection Type: Leveled data protection is applicable to data that has been classified and graded. DSC includes built-in sensitive data levels from L1 to L4. If this option is deselected, it will not be displayed in the policy baseline list.

3. Configure Custom Data Protection Type. The added custom data protection types are displayed in the policy baseline list.

   Select a custom level from the drop-down list box. If no custom level is available, create one by referring to Adding a Sensitivity Level.

4. Click OK. In the policy baseline table, view the data protection type.

Modifying Data Collection Protection Requirements

1. Click Modify Protection Requirements.
   For example, select Not required, Suggestion, or Required from the drop-down list in the Data Categorization and Leveling column of the General Data Protection row.

   Figure 1 Modifying protection requirements
   

2. Click Save Changes. You can also click Cancel Changes in the upper left corner to cancel the modification and return to the previous protection requirements.

Follow-up Operations

After configuring the data collection policy, you are advised to configure data transmission, storage, usage, sharing, and destruction policies to improve the security baseline of the entire data lifecycle.

References

• For details about how to identify and classify sensitive data, see Classification and Grading.
• Security baseline policies are preset by DSC for each phase of the data lifecycle. They are used to evaluate data security and compliance. For details, see Policy Baseline Overview.