How to Set Up the miniOrange Data – PII Scanner (DLP) for Jira

Video Setup Guide

Installation

• Get started with Data - PII Scanner (DLP) for Jira by installing it from the Atlassian Marketplace.
• Click “Try it free” to begin a new trial and install the app to your Jira instance.
• Now, log in to your Jira Admin Console.
• Locate the “Data - PII Scanner for Jira” app in your Jira menu and open it.

Key Configuration Concepts

• Detection Rule: A Detection Rule tells the system what to look for when scanning for sensitive data. For example, a rule could be a regular expression that matches a Social Security Number.
• Template: A Template is a reusable group of detection rules. For example, you can create a “PII Compliance” template that contains the rules for SSNs, credit cards, and phone numbers. It makes it easier to manage multiple Detection Rules as a single configuration.
• Policy: A Policy groups one or more Templates. Scans are run based on policies. For example, an “HR Policy” that bundles all your HR-related templates. You can turn policies on and off; only active policies are enforced during a scan.

1. Create a Detection Rule

To create a Detection Rule:

• Navigate to Detection Engine > Detection Rules.
• The Detection Rules page displays the default Detection Rules available with the app.
• Click New Rule to create a custom Detection Rule.
• For this guide, we will create a Detection Rule to identify IPV4 addresses.
• Enter a name for the Detection Rule.
• Enter the required Regex Pattern. Eg: \b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b
• Use the Test Regex option to verify the pattern.
• Enter sample data to test whether the regex correctly identifies the required data.
• Once the regex is verified, click Create.

Once created, the IPV4 address Detection Rule will be available in the Detection Rules list and can be added to a Template.

2. Create a Template

To create a Template:

• Navigate to Detection Engine > Templates.
• The Templates page displays the default Templates available with the app.
• Click New Template.
• Enter a name for the Template. For this guide, we will use the DevOps Template.
• Enter an appropriate description for the Template.
• Select the Detection Rules that you want to include in the Template.
• For this guide, we will select the IPV4 Address Detection Rule created in the previous step.
• Click Create.

The DevOps Template is now created with the IPV4 Address Detection Rule and is now available to be assigned to any Policy.

3. Create a Policy

To create a Policy:

• Navigate to Detection Engine > Policies.
• The Policies page displays the default Policies available with the app.
• Click New Policy.
• Enter a name for the Policy.
• Select the Templates you want to include in the Policy.
• For this guide, we will add the DevOps Template created in the previous step.
• Click Create.

The Policy is now configured with the IPV4 address Detection Rule through the DevOps Template. It will be toggled on by default. You can choose to toggle other policies from the ones built in.

4. Run a Scan

Once the Policy is configured, you can use it to scan your Jira instance for sensitive data.

To run a scan:

• Navigate to Scan & Redact > Issues.
• Select the Policy configured in the previous step and the spaces you want to scan.
• Start the scan to analyze your Jira instance based on the selected Policy.

That’s it! You have successfully completed your first scan and can now review your scan results from the Scan Results section of the same tab.

5. Review Results

After the scan is completed, review the scan results to identify the data detected based on the selected Policy.

Additional Resources

• What is Data loss prevention software ?
• What is PII ?