Composite Rule

A composite classification rule lets you combine several rules together to form a more complex criterion. This can include content and behavioral type rules and is defined by category.

The data classification matches content or behavioral patterns to rules and assigns categories to resources according to these rules.

After running data classification, composite rules use combinations of categories to define complex combinations of simple rules.

Examples:

Combine Personal Identification Information (PII) in conjunction with health-related information (ICD) to define a rule to identify Personal Health Information (PHI).
Create a rule to list files that have at least two out of one list of categories and must contain another specific category.
Identify all resources that would be defined by rules that belong to category X.

To define a composite classification rule:

Select one or more categories, and the created rule will be triggered for any existing rules within the selected categories.

Example Rule:

If we define a rule as follows: Contain at least 2 of PII, ICD

This will add all business resources that fulfill any of the rules in the PII category and any of the rules in the ICD category.

The value column allows selecting one or more categories from the category repository.

Triggering the Composite Rules

Composite rule tasks are triggered after each data classification task and evaluate results from that application only.

The composite rule runs after all content and behavioral rules, as it is based on their results.
If you change a composite rule, this change will take effect only when a new classification task is executed and triggers the composite rule.

Note

This task cannot be scheduled.

Creating a Composite Classification Rule

To create a composite classification rule:

Open the rules page by navigating to Compliance > Data Classification > Rules*.
Select + New Rule > Composite Classification Rule.

Rule Name - Rule names are unique. It is best to create a naming convention that avoids using the same name twice.

Categories - Enter one or more categories for the rule. To add a new category to the Categories list, select Manage Categories and add a new item.
In the Rule Criteria section, add the desired combination of categories to trigger the rule.

Operator - Enter the number of concurrence of categories in the business resource tested for this criterion.
```
 Example:  
    - If you want the rule to collect BRs that fit both criteria **C1** and **C2**, set:
    - **Operator**: `Contain at least 2 of`
    - **Value**: `C1, C2`
```
Value - Enter one or more categories from the search box.
Select Save to save the criterion.
Select + Add to add another criterion. All criteria will be combined with an AND operator.
Select Save to save the new composite classification rule.

The system adds the rules to the Rules list.