14.5: Utilize an Active Discovery Tool to Identify Sensitive Data
Group:
The next version of the control set incorporates all or part of this control into: 3.13: Deploy a Data Loss Prevention Solution.
Control Statement
Utilize an active discovery tool to identify all sensitive information stored, processed, or transmitted by the organization’s technology systems, including those located on-site or at a remote service provider, and update the organization’s sensitive information inventory.
[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]