Merge pull request #280935 from ElazarK/WI275497-mdc-scan-vs-purview

WI275497 mdc vs purview

Author: v-dirichards

articles/defender-for-cloud/concept-data-security-posture.md

@@ -1,12 +1,14 @@
 ---
 title: Data security posture management
-description: Learn how Defender for Cloud helps improve data security posture in a multicloud environment.
-author: dcurwin
+description: Explore how Microsoft Defender for Cloud enhances data security posture management across multicloud environments, ensuring comprehensive protection.
 ms.author: dacurwin
+author: dcurwin
 ms.service: defender-for-cloud
-ms.topic: conceptual
-ms.date: 01/28/2024
+ms.topic: concept-article
+ms.date: 07/30/2024
+#customer intent: As a security professional, I want to understand how Defender for Cloud enhances data security in a multicloud environment so that I can effectively protect sensitive data.
 ---
+
 # About data security posture management
 
 As digital transformation accelerates, organizations move data to the cloud at an exponential rate using multiple data stores such as object stores and managed/hosted databases. The dynamic and complex nature of the cloud increases data threat surfaces and risks. This causes challenges for security teams around data visibility and protecting the cloud data estate.
@@ -69,7 +71,29 @@ When you enable data security posture management capabilities with the sensitive
 
 Changes in sensitivity settings take effect the next time that resources are discovered.
 
-## Next steps
+## Sensitive data discovery
+
+Sensitive data discovery identifies sensitive resources and their related risk and then helps to prioritize and remediate those risks.
+
+Defender for Cloud considers a resource sensitive if a Sensitive Information Type (SIT) is detected in it and the customer has configured the SIT to be considered sensitive. Defender for Cloud detects SITs that are considered sensitive by default.
+
+The sensitive data discovery process operates by taking samples of the resource’s data. The sample data is then used to identify sensitive resources with high confidence without performing a full scan of all assets in the resource.
+
+The sensitive data discovery process is powered by the Microsoft Purview classification engine that uses a common set of SITs and labels for all datastores, regardless of their type or hosting cloud vendor.
+
+Sensitive data discovery detects the existence of sensitive data at the cloud workload level. Sensitive data discovery aims to identify various types of sensitive information, but it might not detect all types.
+
+To get complete data cataloging scanning results with all SITs available in the cloud resource, we recommend you use the scanning features from Microsoft Purview. 
+
+### For cloud storage
+
+Defender for Cloud's scanning algorithm selects containers that might contain sensitive information and samples up to 20MBs for each file scanned within the container.
+
+### For cloud Databases
+
+Defender for Cloud selects certain tables and samples between 300 to 1,024 rows using nonblocking queries. 
+
+## Next step
 
-- [Prepare and review requirements](concept-data-security-posture-prepare.md) for data security posture management.
-- [Understanding data security posture management - Defender for Cloud in the Field video](episode-thirty-one.md).
+> [!div class="nextstepaction"]
+> [Prepare and review requirements for data security posture management.](concept-data-security-posture-prepare.md)