5.1

Defining a Data Security Policy
To detect sensitive data in your environment, you must create a data security policy. You must be a Security
Administrator to create policies.
To define a policy, you must specify the following:
1 Regulations
A regulation is a data privacy law for protecting PCI (Payment Card Industry), PHI (Protected Health
Information) and PII (Personally Identifiable Information) information. You can select the regulations that
your company needs to comply to. When you run a scan, vShield Data Security identifies data that violates
the regulations in your policy and is sensitive for your organization.
2 Participating Areas
By default, your entire vSphere infrastructure is scanned by vShield Data Security. To scan a subset of the
inventory, you can exclude or include security groups. If a resource (cluster, datacenter or host) is part of
both an excluded and included security group, the exclude list takes precedence and the resource is not
scanned.
3 File filters
You can create filters to limit the data being scanned and exclude file types unlikely to contain sensitive
data from the scan.
Select Regulations
Once you select the regulations that you want your company data to comply with, vShield can identify files
that contain information which violates these particular regulations.
Prerequisites
You must have been assigned the Security Administrator role.
Procedure
1 In the vSphere Client, go to Inventory > Hosts and Clusters.
2 Select a datacenter.
NOTE Even though you are selecting a datacenter, the policy that you configure will be applied to the
entire vSphere inventory.
3 Click the vShield tab and click Data Security.
4 Click the Policy tab and expand Regulations and standards to detect.
5 Click Edit and click All to display all available regulations.
6 Select the regulations for which you want to detect compliance.
NOTE For information on available regulations, see “Available Regulations,” on page 182.
7 Click Next.
vShield Administration Guide
178 VMware, Inc.