Data Classification Profile

[Aniak5]

Create a data classification profile which contains confidentiality/confidentiality_id, data_type/data_type_id and policy. The possible applications of this profile are:

• Data classification for an entity (such as file) as a profile
• Data classification for the entire log possibly added in metadata

Another related topic to data classification, that came up in the past (by @inthecards77), was personal identifiable information at the attribute level. PII identification is non-static and subjective but very important for many log providers so this requires careful OCSF design. This feature would allow log providers to hash sensitive information automatically prior to sharing logs with other entities.