14.5: Utilize an Active Discovery Tool to Identify Sensitive Data

Group:

Info icon.

The next version of the control set incorporates all or part of this control into: 3.13: Deploy a Data Loss Prevention Solution.

Control Statement

Utilize an active discovery tool to identify all sensitive information stored, processed, or transmitted by the organization’s technology systems, including those located on-site or at a remote service provider, and update the organization’s sensitive information inventory.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]