Intermediate
Sensitive Data Discovery with Ground Labs Enterprise Recon
Build a repeatable discovery programme using Ground Labs Enterprise Recon: plan scans, validate findings, reduce exposure and retain evidence.
Featured discovery tool
Learn by doing with Ground Labs Enterprise Recon
Use Enterprise Recon throughout the course to scope discovery, validate findings, prioritise risk and document remediation across supported environments.
Independent PrivacyBuilt training featuring Ground Labs Enterprise Recon. Software access is arranged separately; features depend on edition, version and target. This is not an official Ground Labs certification.
About this course
A practical, self-paced course for privacy, security, compliance, IT operations and Microsoft 365 teams. Ground Labs Enterprise Recon is the core discovery tool throughout: learners plan an authorised pilot, configure targets and data type profiles, validate results, prioritise exposure and document remediation.
Why this matters for global organisations
Sensitive information spreads through everyday collaboration, exports, archives, shared storage and AI preparation. Reliable discovery helps teams replace assumptions with evidence, assign accountable owners and reduce unnecessary access and retention across connected systems.
What you will build
A discovery charter, target and coverage register, synthetic test corpus, scan plan, validation scorecard, prioritised findings register, remediation decision record and an operating dashboard. Nine teaching modules contain eighteen lessons and practical exercises, followed by a ten-question final assessment. Allow approximately six hours including exercises and quizzes; optional software installation and extended pilots take additional time.
Ground Labs at the core
Enterprise Recon is the featured platform for every practical stage. Explore Ground Labs Enterprise Recon or request a Ground Labs demo to evaluate it against your own approved scope. The course explains where discovery connects with classification, access controls and wider information protection; specific features depend on edition, version, target and permissions.
Entry requirements and learning paths
No programming is required. Basic familiarity with folders, cloud services and access permissions is helpful. The hands-on path requires separately arranged licensed or vendor-approved Enterprise Recon access, an authorised sandbox and administrator help for installation and connectors. Training is free; software access is separate and no trial or licence is included. A guided worksheet path uses clearly labelled fictional scan results when software access is unavailable. Both paths teach decisions and evidence; worksheet completion does not demonstrate live product proficiency.
Assessment and attribution
Each teaching module has a four-question quiz. The final assessment uses the existing PrivacyBuilt eighty-percent pass requirement. Practical exercises include self-review criteria; they are not instructor-marked or automatically verified. Any completion certificate is issued by PrivacyBuilt and is not an official Ground Labs certification. This is independent PrivacyBuilt training featuring Ground Labs Enterprise Recon. Product names belong to their respective owners. Educational content does not establish legal compliance or replace specialist advice. Product documentation reviewed 10 October 2026; confirm current instructions before operating a system.
What you will be able to do
- Scope sensitive data discovery with clear authorisation, ownership and measurable coverage
- Plan an Enterprise Recon deployment and map editions, agents, targets and permissions
- Build and validate data type profiles against a synthetic ground-truth corpus
- Investigate findings across file shares, databases, cloud storage and Microsoft 365
- Prioritise exposure and choose approved, target-supported remediation
- Retain scan, validation and closure evidence and operate a recurring discovery programme
Course content
- 1
Discovery foundations and a measurable charter
Distinguish discovery from protection, define sensitive data and produce the pilot charter.
- What discovery proves—and what requires another control10 min
- Lab 1: write the discovery charter and success measures15 min
4-question quiz
- 2
Enterprise Recon architecture, access and lab preparation
Map the master server and agents, confirm edition capabilities and protect discovery evidence.
- Choose the deployment and feature set deliberately10 min
- Lab 2: create a protected sandbox and evidence workspace20 min
4-question quiz
- 3
Scope repositories and establish coverage
Turn business data flows into an owned target register and a reconciled pilot boundary.
- Build the inventory that a scanner cannot invent for you15 min
- Lab 3: connect a pilot target and document the boundary20 min
4-question quiz
- 4
Data type profiles and a synthetic ground-truth corpus
Select useful rules, build a GLASS Studio exercise and test intended matches against near misses.
- Select profiles that answer a business question10 min
- Lab 4: build a labelled test set and custom profile20 min
4-question quiz
- 5
Run scans and validate detection quality
Plan a controlled scan, distinguish coverage from accuracy and calculate meaningful validation metrics.
- A completed job is not a complete assessment15 min
- Lab 5: calculate precision, recall and coverage25 min
4-question quiz
- 6
Discovery across Microsoft 365 and hybrid repositories
Apply connector-specific scope, permissions and limitations without confusing discovery with DLP.
- Microsoft 365: content, permissions and information protection15 min
- Lab 6: compare file, database, cloud and collaboration coverage20 min
4-question quiz
- 7
Investigate findings and prioritise exposure
Separate counts from impact, validate findings and assign accountable risk decisions.
- From scan matches to decisions the business can own15 min
- Lab 7: triage four fictional findings20 min
4-question quiz
- 8
Remediate safely and prove the outcome
Select target-supported actions, preserve approvals and verify risk reduction after changes.
- An action must be supported, appropriate and approved15 min
- Lab 8: rehearse a remediation decision and closure check20 min
4-question quiz
- 9
Operate discovery and complete the capstone
Create useful reporting, maintain recurring controls and assemble a defensible discovery evidence pack.
- Reporting, ownership and a recurring discovery programme20 min
- Capstone: present Northstar's discovery and protection plan30 min
4-question quiz
- 10
Final assessmentFinal assessment
Ten scenario questions covering scope, architecture, validation, Microsoft 365, prioritisation and evidence. The PrivacyBuilt pass requirement is 80%.
10-question final assessment