Sensitivity

Sensitivity levels in Gigantics determine the risk associated with data fields and help prioritize data protection efforts. Proper sensitivity configuration is essential for accurate risk assessment and compliance reporting.

Sensitivity Levels

Gigantics uses a four-tier sensitivity classification system:

Sensitivity Configuration

System Default Sensitivity

Each system label has a predefined sensitivity level:

• person/name/en/first: High
• tech/email: Medium
• finance/creditcard: Very High
• identifier/ssn: Very High

Customizing Sensitivity

You can adjust sensitivity levels for:

1. Specific fields in individual discovery jobs
2. Entire labels in project settings
3. Categories of data organization-wide

Sensitivity Adjustment Process

To modify sensitivity levels:

1. During discovery review:

   • Click on a field to edit its properties
   • Select a new sensitivity level from the dropdown
   • Save changes

2. In project settings:

   • Navigate to Labels configuration
   • Edit the default sensitivity for a label
   • Apply changes to future discoveries

Risk Visualization

Heatmap Representation

Sensitivity levels are visualized in the discovery heatmap:

Legend:
┌─────────────────────┐
│ ■ Low (Green)       │
│ ■ Medium (Yellow)   │
│ ■ High (Orange)     │
│ ■ Very High (Red)   │
└─────────────────────┘

Example heatmap view:

Table: users
┌──────────────┬─────────────────────────┬──────────────┐
│ Field        │ Label                   │ Sensitivity  │
├──────────────┼─────────────────────────┼──────────────┤
│ first_name   │ person/name/en/first    │ ■ High       │
│ email        │ tech/email              │ ■ Medium     │
│ ssn          │ identifier/ssn          │ ■ Very High  │
│ gender       │ person/gender           │ ■ Low        │
└──────────────┴─────────────────────────┴──────────────┘

Risk Reports

Sensitivity levels contribute to risk reports that show:

• Distribution of sensitivity across your database
• Compliance status based on regulatory requirements
• Recommendations for data protection measures

Sensitivity Best Practices

Setting Appropriate Levels

When adjusting sensitivity levels, consider:

• Regulatory requirements (GDPR, CCPA, HIPAA, etc.)
• Business impact of data exposure
• Industry standards for your data type
• Organization's risk tolerance

Consistency Across Projects

Maintain consistent sensitivity levels:

• Use organization-wide defaults
• Document exceptions and their justifications
• Regular audit of sensitivity classifications

After configuring sensitivity levels, you can proceed to confirm your discoveries to lock in your classifications.