Question

A financial services company ingests unstructured customer support transcripts into a Cloud Storage bucket. The security team must automatically detect US Social Security Numbers and passport numbers, but their initial scans return too many false positives on internal account reference numbers that happen to match the SSN pattern. They want to reduce false positives without stopping detection of genuine SSNs. Which Sensitive Data Protection configuration change should they make?

Accepted Answer

Add the internal account reference number format to a custom exclusion rule (exclusion detection rule) in the inspection template so matching values are removed from findings

Answer

Lower the minimum likelihood threshold from LIKELY to POSSIBLE so more context is captured for each finding

Answer

Replace the built-in US_SOCIAL_SECURITY_NUMBER infoType with a regular-expression custom infoType that matches any nine-digit number

Answer

Disable the SSN infoType and rely only on manual review of transcripts flagged by the passport infoType