Forcepoint AI Security

Editing a Data Security Policy

Change what a data security policy detects, or how it responds, by opening it in the Data Security portal.

Data security policies are not edited in AI Security. AI Security displays them so that you can see which content rules apply to your AI traffic, and gives you a route to the Data Security portal where they are maintained.

You start in AI Security, make the change in the portal, then come back and refresh the list.

Before you change anything, it is worth knowing that a policy is a container and the rules inside it do the detecting. A credit card policy, for example, holds separate rules for individual card brands alongside rules for card numbers in general. If a policy is behaving unexpectedly, one rule is responsible rather than the policy as a whole, so finding the right rule first saves changing the wrong one.

Steps

  1. Go to AI Security › Policy, then click Data Security.

  2. Find the policy you want to change.

    Use Search policies if the list is long. The Action and Classifier columns tell you what the policy currently does and what kind of data it detects.

  3. Click the policy.

    A read-only panel opens showing the description of the policy and the rules it contains. Each rule has a name, a summary of what it detects and how it decides, and its own action.

    You can see what the policy does without leaving AI Security.

  4. Identify which rule is responsible for the behaviour you want to change.

    Read the summaries. They usually state the trade-off the rule was designed around, and whether the rule is active unless someone chose otherwise.

    Where a policy offers the same detection at several sensitivities, the rule names say so. A narrow rule needs supporting evidence nearby before it treats something as a match, so it produces fewer false positives and misses more. A wide rule matches on format alone, so it catches the most and produces the most false positives.

  5. Click Edit in DLP at the top right of the panel.

    The policy opens in the Data Security portal, where its name, description, tags, and rules can be changed.

  6. Make your changes in the Data Security portal, then save them.

    Each rule there has its own controls for enabling, changing, and removing it. For guidance on the fields, see the Data Security documentation. That portal is a separate application with its own help.

  7. Return to AI Security.

  8. Click the refresh icon at the foot of the Data Security tab.

    The list reloads and shows the policy as it now stands.

Result

The policy is changed, and the Data Security tab in AI Security reflects the change.

Next steps