PrivacyBuilt / Guided task
Plan sensitive-data discovery
Define what to find, validate coverage and turn findings into owned remediation.
01 / Prepare
Bring the right context
- Repositories, systems, environments and authorised access boundaries.
- Sensitive-data categories and business context for classification.
- Available discovery software, edition constraints and responsible system owners.
Use descriptions and evidence references; do not put personal data, credentials or confidential source material into public tools.
02 / Review
Use the tools with judgement
Privacy programme planner
4 minutesPlan ownership and follow-up actions. This tool does not scan repositories or discover sensitive data.
Open Privacy programme planner03 / Learn
Build the reasoning behind the review
Intermediate · 6 hours · Free training
Sensitive Data Discovery with Ground Labs Enterprise Recon
Build a repeatable discovery programme using Ground Labs Enterprise Recon: plan scans, validate findings, reduce exposure and retain evidence.
View courseIntermediate · 5 hours · Free training
Quantum-Safe and Quantum-Unsafe Secrets: Discovery with Ground Labs
Find cryptographic assets and exposed secrets with Ground Labs Enterprise Recon, validate quantum risk, and build an evidence-based remediation and migration plan.
View courseGround Labs software access is separate from free training. Features depend on edition, version and target. This is independent PrivacyBuilt education, not an official Ground Labs certification.
04 / Act
Take a working record into your team
A discovery scope, validated findings register and prioritised remediation plan with evidence and owners.
Download task checklist (.md)Markdown text file · No email required · Adapt to your context
Supporting templates and guidance
A ready-to-use RoPA/data inventory template with column definitions, a worked example row, risk-flagging rules, and an ownership and review cadence for keeping it accurate.
Microsoft 365 Sensitive Data ChecklistA tenant-wide checklist covering Exchange, SharePoint/OneDrive, Teams, labels, DLP, retention, sharing, eDiscovery, Purview classification and audit logs, with priority, owner and evidence per check.
Before you close the task
- Run discovery with authorised methods and validate false positives and coverage gaps.
- Prioritise exposure by sensitivity, access, sharing and retention context.
- Assign remediation, validate the outcome and schedule rediscovery. Ground Labs software access is arranged separately from free training.