question

LakshmiNarayanan-5070 avatar image
0 Votes"
LakshmiNarayanan-5070 asked OuryBa-MSFT commented

Sensitive data in your SQL databases should be classified

Hi,

I have one production SQL DB server which have 4 databases. The Advisor services recommends us to clear - Sensitive data in your SQL databases should be classified. If i check on SQL databases, then there are no recommendations under Data discovery and classification. Why this advisor thrown issues? Can any one assist me to workaround ?

azure-sql-databaseazure-cloud-services
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

AlbertoMorillo avatar image
0 Votes"
AlbertoMorillo answered OuryBa-MSFT commented

Hi Lakshmi,

It is always a good idea as part of the Data Governance strategy on your company to classify data on databases and other places to know where sensitive data resides and later think how we can better protect that data and comply with standards and regulations that exist around the industry.

As you mentioned it seems your database is not receiving recommendations from Azure but I see that as a blessing as Azure recommendations are not always correct and we human beings tend to approve them without examining data on the tables. In that sense, you can start to classify your data manually by making a click on the place I show you in red on below image, and classify it consciously using the regulations on the best interest of your organization, like GDPR, HIPPA, etc.

120219-image.png

Alternatively, you can use Transact-SQL (visit [here)][2] and SQL Server Management Studio to classify data on tables.


[2]: https://docs.microsoft.com/en-us/sql/t-sql/statements/add-sensitivity-classification-transact-sql?view=sql-server-ver15#examples



image.png (18.8 KiB)
· 6
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @LakshmiNarayanan-5070 Thank you for posting your question. What version of SQL Server are you running and if running on-prem, what version of SSMS are you using?


Regards,
Oury

0 Votes 0 ·

Thanks for your reply Alberto.
I dont see any recommendation on there.

!120402-dataclassification.png


0 Votes 0 ·

If that database does not hold sensitive data you won't see recommendations. Personal information of customers or employees, financial data are examples of sensitive data. If you consider you have sensitive data use SSMS to classify that data https://dataedo.com/kb/tools/ssms/gdpr-in-sql-server-and-azure-sql-database

0 Votes 0 ·

okay sure. Thanks for your reply

0 Votes 0 ·

120385-dataclassification.png



I dont see any recommendation there

0 Votes 0 ·
OuryBa-MSFT avatar image OuryBa-MSFT LakshmiNarayanan-5070 ·

Hi @LakshmiNarayanan-5070 Could you please provide what version of SQL Server you are running and if running on-prem, what version of SSMS you are using? That will help us with investigation.

Regards,
'Oury
·

0 Votes 0 ·