The general workflow for Data Discovery involves these main steps:
- Register the target database on which you want to discover sensitive data.
- Create a data discovery job using the Data Discovery wizard to discover the sensitive data on the target database and generate a sensitive data model (SDM). In the wizard, you follow these general steps:
- Specify the target database and schemas that you want Data Discovery to search.
- Specify the sensitive types to be used for data discovery. You can select individual sensitive types and/or categories of sensitive types. Optionally, you can instruct Data Discovery to find non-dictionary referential relationships.
If you choose the non-dictionary referential relationships option, gather schema statistics on your target database before running the data discovery job to ensure accurate results. To gather schema statistics, you can run the
dbms_stats.gather_schema_statsprocedure. See GATHER_SCHEMA_STATS Procedures for information about the parameters that you can include. The following example gathers statistics on the
exec dbms_stats.gather_schema_stats(ownname => 'HCM1');
- Run the data discovery job. Data Discovery identifies sensitive columns by examining column names, comments, data samples, object relations, and so on, and generates an SDM.
- Review the sensitive columns in the SDM. If needed, you can add and remove sensitive columns.
- (Optional) Before exiting the wizard, click Back, modify the selection of sensitive types, and rerun the data discovery job. Review the generated SDM again. Repeat this step until you feel the SDM is accurate and complete.
- Analyze your sensitive data in the target database by viewing the Data Discovery report.
- Manage the SDM:
- Verify the SDM against the target databases with which you plan to use the SDM. Verification ensures that the target databases have the schemas and sensitive columns listed in the SDM.
- Update the SDM when needed. You can use the Data Discovery wizard to perform incremental updates. You can also manually add and remove sensitive columns.
- To use the SDM with other target databases, download and upload the SDM into a different Oracle Data Safe Library.