Assign labels to files

With the introduction of Prisma Cloud DSPM's new label feature, you have the flexibility to label files and establish custom classifications designed to meet your unique security requirements. This includes tasks such as setting sensitivity levels, handling specific compliance and audit prerequisites, and addressing various security considerations. It is also possible to search for files according to their label and quickly create custom risks based on the custom labels.

Use Case Examples

Assign sensitivity levels to files

Depending on the content of a file, you can now designate a file as "Very Sensitive”, “Sensitive” or “Not Sensitive”.
In essence, the labels feature provides a customizable tagging system, allowing you to categorize and manage the sensitivity of files based on the language or content used within your company.

Create custom classifications tailored to specific security needs

Creating custom classifications tailored to your specific security needs involves leveraging information from Prisma Cloud DSPM's predefined classifications (Data Types) and integrating them with additional filters related to file metadata or other configuration parameters. For example, you can create a custom filter that combines the “Is public” (open to the Internet) filter with specific metadata, such as “Privacy” within the file. By doing so, you can then label the file according to a specific policy under a compliance regulation, for example “GDPR”. The new label feature not only assists in presenting crucial security information but it also establishes a risk assessment based on the customized label, providing a comprehensive approach to file security.

Create a New Classification Rule

There are several options available for creating a new classification rule

• Create a new classification rule in Settings

• Create a new classification rule in Inventory/Findings

Create a new classification rule in Settings

Create a new classification rule in Settings and apply a label to the rule.

1. In the Prisma Cloud DSPM side menu, go to Settings > Classification Rules.
2. In the Classification Rules table, click Add New to open the New Classification Rule window.
3. In the Apply Label drop-down, select the action you want to apply the label to. The label will be automatically attached to files that match the configured filter.
4. Add an optional description about the label.
5. In the Rule configuration section, choose the specific data classes, file types, or parameters you want to exclude from the Classification Rule.
6. Click Create to create the rule.

Create a new classification rule in Inventory/Findings

Create a new classification rule in Inventory or Findings, and apply a label to the rule.

1. In the Prisma Cloud DSPM side menu, click Inventory or Findings.
2. In the Inventory table, click the name of an asset you want to add a classification rule to. The file’s details are displayed.
3. Click the Findings tab.
4. Add the required filters. For example, only show files denoted as “Is public” or “File type”.
5. Click the New Classification Rule icon.The New Classification Rule window opens and the Rule configuration section is populated with the filters selected in step 4.
6. In the Apply Label drop-down, select an existing label or create a new label. The label will be automatically attached to files that match the configured filter.
7. Add an optional description about the label.
8. In the Rule configuration section, choose the specific data classes, file types, or parameters you want to exclude from the Classification Rule.
9. Click Create to create the Classification Rule.

Assign a Label to an Existing Classification Rule

1. In the Prisma Cloud DSPM side menu, go to Settings > Classification Rules.
2. In the Classification Rules table, refer to the Actions column and locate a classification rule that displays the action Apply Label.
3. Click the rule’s Edit button to open the Edit Classification Rule window. The Apply Label option is selected by default.
4. In the Apply Label drop-down, select an appropriate preset label. The label will be automatically attached to files that match the configured filter.
5. Add an optional description about the label.
6. Click Save Changes to apply the label to the Classification Rule.

Delete a Classification Rule

1. In the Prisma Cloud DSPM side menu, go to Settings > Classification Rules.
2. In the Classification Rules table, click the Classification Rule you want to delete.
3. Click the Delete icon, and when prompted click Delete. The Classification Rule is deleted.

Search for Findings According to Their Label

Search for files according to their label and quickly create custom risks based on the custom labels.

1. In the Prisma Cloud DSPM side menu, click Findings, and go to the By File tab.
2. In the Filter field, add the Labels filter.
3. The Findings table updates and only displays Findings according to the selected filters.