Download eBook (PDF) - Red Gate Software

2 – Data Classification and Rolesdocumentation of database schemas, such as SQL Doc which is a tooldeveloped by Red-Gate Software.In addition, the INFORMATION_SCHEMA.COLUMNS catalog view will returnmany properties regarding all of the columns in the database. For our purpose,we are interested only in the schema name, the table name, the column nameand the data type of the column, which we can retrieve using the query inListing 2-7.USE HomeLending;GOSELECTTABLE_SCHEMA,TABLE_NAME,COLUMN_NAME,DATA_TYPEFROMINFORMATION_SCHEMA.COLUMNS;GOListing 2-7: Retrieving column information from the catalog view.For databases that are in the process of being created, the column informationcan be gathered from the schema design documentation that is prepared by theDatabase Architect or Administrator.As you begin reviewing each of the columns in the database to determine theirsensitivity class, consider the following:• Your default class: Earlier in this chapter we discussed the process ofdefining our sensitivity classes. As a part of the class definition processwe defined the class that would be assigned if the sensitivity could notbe identified. This is our default class. In the descriptions of oursimplified scale of sensitivity classes, used in our sample database, wedefined our default class as "Medium". Throughout this process,consider this the assigned class unless otherwise justified anddetermined.• Laws, regulations, standards and policies: Are there any laws,regulations, industry standards or corporate policies that specificallydefine the data that is stored in a column as sensitive? If so, considerelevating its sensitivity class. Are there any that specifically define thedata stored within the column as public? If so, consider lowering itssensitivity class.51