Classifiers
This section describes the configuration of classifiers within Microsoft Purview associated with systems built according to guidance in ASD's Blueprint for Secure Cloud.
Estimated reading time: 9 minutes
Instruction
The below tables outline the as built configuration for ASD’s Blueprint for Secure Cloud (the Blueprint) for the Microsoft Purview portal at the following URL:
https://compliance.microsoft.com/dataclassificationclassifiers?viewid=sensitiveinfotypes
The settings described on these pages provide a baseline implementation for a system configured using the Blueprint. Any implementation implied by these pages should not be considered as prescriptive as to how an organisation must scope, build, document, or assess a system.
Implementation of the guidance provided by the Blueprint will differ depending on an organisation’s operating context and organisational culture. Organisations should implement the Blueprint in alignment with their existing change management, business processes and frameworks.
Placeholders such as <ORGANISATION.GOV.AU>, <BLUEPRINT.GOV.AU> and <TENANT-NAME> should be replaced with the relevant details as required.
Character limits
We are aware of an issue due to a 50-character limit for the Keyword groups field in the Microsoft Purview portal, which may cause issues due to the length of keyword strings listed in the guidance below (e.g. where use of the National Cabinet label is required). We are currently reviewing this configuration guidance and will provide updated advice in future versions of the Blueprint.
Sensitive info types
Note
The below tables list the most commonly used sensitive info types within the context of the Australian Government. Organisations should add or remove types as necessary to address specific requirements.
UNOFFICIAL
| Item | Value |
|---|---|
| Name | UNOFFICIAL classified information |
| Description | Information containing the UNOFFICIAL classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | UNOFFICIAL |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
OFFICIAL
| Item | Value |
|---|---|
| Name | OFFICIAL classified information |
| Description | Information containing the OFFICIAL classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | OFFICIAL |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
| Additional checks | Exclude specific values: OFFICIAL:Sensitive,OFFICIAL:Sensitive Personal-Privacy,OFFICIAL:Sensitive Legislative-Secrecy,OFFICIAL:Sensitive Legal-Privilege,OFFICIAL:Sensitive NATIONAL-CABINET |
OFFICIAL:Sensitive
| Item | Value |
|---|---|
| Name | OFFICIAL Sensitive classified information |
| Description | Information containing the OFFICIAL:Sensitive classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | OFFICIAL:Sensitive |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
OFFICIAL:Sensitive Personal-Privacy
| Item | Value |
|---|---|
| Name | OFFICIAL:Sensitive Personal-Privacy classified information |
| Description | Information containing the OFFICIAL:Sensitive Personal-Privacy classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | OFFICIAL:Sensitive Personal-Privacy |
| Keyword group #1 | Case insensitive:
|
| `String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
OFFICIAL:Sensitive Legislative-Secrecy
| Item | Value |
|---|---|
| Name | OFFICIAL:Sensitive LS classified information |
| Description | Information containing the OFFICIAL:Sensitive Legislative-Secrecy classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | OFFICIAL:Sensitive Legislative-Secrecy |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
OFFICIAL:Sensitive Legal-Privilege
| Item | Value |
|---|---|
| Name | OFFICIAL:Sensitive LP classified information |
| Description | Information containing the OFFICIAL:Sensitive Legal-Privilege classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | OFFICIAL:Sensitive Legal-Privilege |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
OFFICIAL:Sensitive NATIONAL-CABINET
| Item | Value |
|---|---|
| Name | OFFICIAL:Sensitive NATIONAL-CABINET classified information |
| Description | Information containing the OFFICIAL:Sensitive NATIONAL-CABINET classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword dictionary |
| ID | OFFICIAL:Sensitive NATIONAL-CABINET |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
OFFICIAL:Sensitive NATIONAL-CABINET Personal-Privacy
| Item | Value |
|---|---|
| Name | OFFICIAL:Sensitive NATIONAL-CABINET PP classified information |
| Description | Information containing the OFFICIAL:Sensitive NATIONAL-CABINET Personal-Privacy classified information classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword dictionary |
| ID | OFFICIAL:Sensitive NATIONAL-CABINET Personal-Privacy |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
OFFICIAL:Sensitive NATIONAL-CABINET Legislative-Secrecy
| Item | Value |
|---|---|
| Name | OFFICIAL:Sensitive NATIONAL-CABINET LS classified information |
| Description | Information containing the OFFICIAL:Sensitive NATIONAL-CABINET Legislative-Secrecy classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword dictionary |
| ID | OFFICIAL:Sensitive NATIONAL-CABINET Legislative-Secrecy |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
OFFICIAL:Sensitive NATIONAL-CABINET Legal-Privilege
| Item | Value |
|---|---|
| Name | OFFICIAL:Sensitive NATIONAL-CABINET LP classified information |
| Description | Information containing the OFFICIAL:Sensitive NATIONAL-CABINET Legal-Privilege classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword dictionary |
| ID | OFFICIAL:Sensitive NATIONAL-CABINET Legal-Privilege |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
PROTECTED
| Item | Value |
|---|---|
| Name | PROTECTED classified information |
| Description | Information containing the PROTECTED classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | PROTECTED |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
| Additional checks | Exclude specific values: PROTECTED Personal-Privacy,PROTECTED Legislative-Secrecy,PROTECTED Legal-Privilege,PROTECTED NATIONAL-CABINET |
PROTECTED Personal-Privacy
| Item | Value |
|---|---|
| Name | PROTECTED PP classified information |
| Description | Information containing the PROTECTED Personal-Privacy classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | PROTECTED Personal-Privacy |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
PROTECTED Legislative-Secrecy
| Item | Value |
|---|---|
| Name | PROTECTED LS classified information |
| Description | Information containing the PROTECTED Legislative-Secrecy classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | PROTECTED Legislative-Secrecy |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
PROTECTED Legal-Privilege
| Item | Value |
|---|---|
| Name | PROTECTED LP classified information |
| Description | Information containing the PROTECTED Legal-Privilege classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | PROTECTED Legal-Privilege |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
PROTECTED NATIONAL-CABINET
| Item | Value |
|---|---|
| Name | PROTECTED NATIONAL-CABINET classified information |
| Description | Information containing the PROTECTED NATIONAL-CABINET classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | PROTECTED NATIONAL-CABINET |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
PROTECTED NATIONAL-CABINET Personal-Privacy
| Item | Value |
|---|---|
| Name | PROTECTED NATIONAL-CABINET PP classified information |
| Description | Information containing the PROTECTED NATIONAL-CABINET Personal-Privacy classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword dictionary |
| ID | PROTECTED NATIONAL-CABINET Personal-Privacy |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
PROTECTED NATIONAL-CABINET Legislative-Secrecy
| Item | Value |
|---|---|
| Name | PROTECTED NATIONAL-CABINET LS classified information |
| Description | Information containing the PROTECTED NATIONAL-CABINET Legislative-Secrecy classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword dictionary |
| ID | PROTECTED NATIONAL-CABINET Legislative-Secrecy dictionary |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
PROTECTED NATIONAL-CABINET Legal-Privilege
| Item | Value |
|---|---|
| Name | PROTECTED NATIONAL-CABINET LP classified information |
| Description | Information containing the PROTECTED NATIONAL-CABINET Legal-Privilege classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword dictionary |
| ID | PROTECTED NATIONAL-CABINET Legal-Privilege |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
PROTECTED CABINET
| Item | Value |
|---|---|
| Name | PROTECTED CABINET classified information |
| Description | Information containing the PROTECTED CABINET classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | PROTECTED CABINET |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
PROTECTED CABINET Personal-Privacy
| Item | Value |
|---|---|
| Name | PROTECTED CABINET PP classified information |
| Description | Information containing the PROTECTED CABINET Personal-Privacy classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword dictionary |
| ID | PROTECTED CABINET Personal-Privacy |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
PROTECTED CABINET Legislative-Secrecy
| Item | Value |
|---|---|
| Name | PROTECTED CABINET LS classified information |
| Description | Information containing the PROTECTED CABINET Legislative-Secrecy classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword dictionary |
| ID | PROTECTED CABINET Legislative-Secrecy |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
PROTECTED CABINET Legal-Privilege
| Item | Value |
|---|---|
| Name | PROTECTED CABINET LP classified information |
| Description | Information containing the PROTECTED CABINET Legal-Privilege classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword dictionary |
| ID | PROTECTED CABINET Legal-Privilege |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
Note
The following sensitivity info types are for the purpose of detecting content not appropriate for processing or storage within the Microsoft 365 tenant.
SECRET
| Item | Value |
|---|---|
| Name | SECRET classified information |
| Description | Information containing the SECRET classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | SECRET |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
| Additional checks | Exclude specific values: TOP SECRET,SEC=TOP SECRET |
TOP SECRET
| Item | Value |
|---|---|
| Name | TOP SECRET classified information |
| Description | Information containing the TOP SECRET classification marker |
| Pattern #1 | |
| Confidence level | Medium confidence |
| Primary element | Keyword list |
| ID | TOP SECRET |
| Keyword group #1 | Case insensitive:
|
| String match | |
| Character proximity | Detect primary AND supporting elements within 300 characters |
Related information
Security & Governance
- None identified
Design
- None identified
Configuration
- None identified