|
| 1 | +--- |
| 2 | +title: The data-aware security dashboard |
| 3 | +description: Learn about the capabilities and functions of the data-aware security view in Microsoft Defender for Cloud |
| 4 | +author: AlizaBernstein |
| 5 | +ms.author: v-bernsteina |
| 6 | +ms.topic: conceptual |
| 7 | +ms.date: 09/27/2023 |
| 8 | +--- |
| 9 | + |
| 10 | +# Data security dashboard |
| 11 | + |
| 12 | +The data security dashboard addresses the need for an interactive, data-centric security dashboard that illuminates significant risks to customers' sensitive data. This tool effectively prioritizes alerts and potential attack paths for data across multicloud data resources, making data protection management less overwhelming and more effective. |
| 13 | + |
| 14 | +## Capabilities |
| 15 | + |
| 16 | +- You can view a centralized summary of your cloud data estate that identifies the location of sensitive data, so that you can discover the most critical data resources affected. |
| 17 | +- You can identify the data resources that are at risk and that require attention, so that you can prioritize actions that explore, prevent and respond to sensitive data breaches. |
| 18 | +- Investigate active high severity threats that lead to sensitive data |
| 19 | +- Explore potential threats data by highlighting [attack paths](concept-attack-path.md) that lead to sensitive data. |
| 20 | +- Explore useful data insights by highlighting useful data queries in the [security explorer](how-to-manage-cloud-security-explorer.md). |
| 21 | + |
| 22 | +You can select any element on the page to get more detailed information. |
| 23 | + |
| 24 | +| Aspect | Details | |
| 25 | +|---------|---------| |
| 26 | +|Release state: | Public Preview | |
| 27 | +| Prerequisites: | Defender for CSPM fully enabled, including sensitive data discovery <br/> Workload protection for database and storage to explore active risks | |
| 28 | +| Required roles and permissions: | No other roles needed on top of what is required for the security explorer. | |
| 29 | +| Clouds: | :::image type="icon" source="./media/icons/yes-icon.png"::: Commercial clouds <br/> :::image type="icon" source="./media/icons/no-icon.png"::: Azure Government <br/> :::image type="icon" source="./media/icons/no-icon.png"::: Azure China 21Vianet | |
| 30 | + |
| 31 | +## Support and prerequisites |
| 32 | + |
| 33 | +Sensitive data discovery is available in the Defender CSPM and Defender for storage plans. |
| 34 | + |
| 35 | +When you enable one of the plans, the sensitive data discovery extension is turned on as part of the plan. |
| 36 | + |
| 37 | +The feature is turned on at the subscription level. |
| 38 | + |
| 39 | +## Data security overview section |
| 40 | + |
| 41 | +The data security overview section provides a general overview of your cloud data estate, per cloud, including all data resources, divided into storage assets, managed databases, and hosted databases (IaaS). |
| 42 | + |
| 43 | +:::image type="content" source="media/data-aware-security-dashboard/data-security-overview.png" alt-text="Screenshot that shows the overview section of the data security view." lightbox="media/data-aware-security-dashboard/data-security-overview.png"::: |
| 44 | + |
| 45 | +**By coverage status** - displays the limited data coverage for resources without Defender CSPM workload protection: |
| 46 | + |
| 47 | +- **Covered** – resources that have the necessary Defender CSPM, or Defender for Storage, or Defender for Databases enabled. |
| 48 | +- **Partially covered** – missing either the Defender CSPM, Defender for Storage, or Defender for Storage plan. Select the tooltip to present a detailed view of what is missing. |
| 49 | +- **Sensitive resources** – displays how many resources are sensitive. |
| 50 | +- **Sensitive resources requiring attention** - displays the number of sensitive resources that have either high severity security alerts or attack paths. |
| 51 | + |
| 52 | +## Top issues |
| 53 | + |
| 54 | +The **Top issues** section provides a highlighted view of top active and potential risks to sensitive data. |
| 55 | + |
| 56 | +- **Sensitive data resources with high severity alerts** - summarizes the active threats to sensitive data resources and which data types are at risk. |
| 57 | +- **Sensitive data resources in attack paths** - summarizes the potential threats to sensitive data resources by presenting attack paths leading to sensitive data resources and which data types are at potential risk. |
| 58 | +- **Data queries in security explorer** - presents the top data-related queries in security explorer that helps focus on multicloud risks to sensitive data. |
| 59 | + |
| 60 | + :::image type="content" source="media/data-aware-security-dashboard/top-issues.png" alt-text="Screenshot that shows the top issues section of the data security view." lightbox="media/data-aware-security-dashboard/top-issues.png"::: |
| 61 | + |
| 62 | +## Closer look |
| 63 | + |
| 64 | +The **Closer look** section provides a more detailed view into the sensitive data within the organization. |
| 65 | + |
| 66 | +- **Sensitive data discovery** - summarizes the results of the sensitive resources discovered, allowing customers to explore a specific sensitive information type and label. |
| 67 | +- **Internet-exposed data resources** - summarizes the discovery of sensitive data resources that are internet-exposed for storage and managed databases. |
| 68 | + |
| 69 | + :::image type="content" source="media/data-aware-security-dashboard/closer-look.png" alt-text="Screenshot that shows the closer look section of the data security dashboard." lightbox="media/data-aware-security-dashboard/closer-look.png"::: |
| 70 | + |
| 71 | +You can select the **Manage data sensitivity settings** to get to the **Data sensitivity** page. The **Data sensitivity** page allows you to manage the data sensitivity settings of cloud resources at the tenant level, based on selective info types and labels originating from the Purview compliance portal, and [customize sensitivity settings](data-sensitivity-settings.md) such as creating your own customized info types and labels, and setting sensitivity label thresholds. |
| 72 | + |
| 73 | +:::image type="content" source="media/data-aware-security-dashboard/manage-security-sensitivity-settings.png" alt-text="Screenshot that shows where to access managing data sensitivity settings." lightbox="media/data-aware-security-dashboard/manage-security-sensitivity-settings.png"::: |
| 74 | + |
| 75 | +### Data resources security status |
| 76 | + |
| 77 | +**Sensitive resources status over time** - displays how data security evolves over time with a graph that shows the number of sensitive resources affected by alerts, attack paths, and recommendations within a defined period (last 30, 14, or 7 days). |
| 78 | + |
| 79 | +:::image type="content" source="media/data-aware-security-dashboard/data-resources-security-status.png" alt-text="Screenshot that shows the data resources security status section of the data security view." lightbox="media/data-aware-security-dashboard/data-resources-security-status.png"::: |
| 80 | + |
| 81 | +## Next steps |
| 82 | + |
| 83 | +- Learn more about [data-aware security posture](concept-data-security-posture.md). |
| 84 | +- Learn how to [enable Defender CSPM](tutorial-enable-cspm-plan.md). |
0 commit comments