Excel File Limitations for PII Policies

Unable to raise incidents with predefined PII (Personally Identifiable Information) policy

PII Policies search for a combination of person name(s) with at least two of the following: driver's license number, passport number, bank account number, social security number\tax file number, credit card number, date of birth.

If the document that you are testing with is an Excel (.CSV, .XLS, Google Sheet) file, and you have made sure that the above criteria is met, but the default predefined policy is still not raising incidents, then you are likely running into the below limitation:

• Person name is validated for the presence of both First Name and Last Name to prevent false positives. However in Excel, each cell is treated as a different data entity.
• If an excel file has the Person Name divided into First Name and Last Name similar to the screenshot below, then the Person Name validation fails resulting in your policy not raising incidents.

• Once you merge the First Name and Last Name into one column, Cisco Cloudlock should successfully raise incidents.
• Even after the above changes, if your policy is not raising incidents, then it is recommended to check the Tolerance and Threshold values for the policy. One such example is described in our article: Some common reasons why these policies do not trigger incidents.