{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":41944,"path":"platform-security/vault-tools.md","title":"Vault tools and metrics","bundle":null,"doc_type":null,"release":"australia","body":"\n# Vault tools and metrics\n\nLearn about the tools and metrics ServiceNow Vault uses to protect and discover sensitive data.\n\nServiceNow Vault integrates with several tools to provide you with a cohesive overview of your sensitive data security. You can hover over a widget to get further insight on the reported data. Select the **Go to** button on any tool to go to its respective page.\n\n## Know your data\n\nServiceNow Vault uses Data Discovery and Data Classification help you understand and know your data.\n\n\n
\n\nTool\n\n\n\nMetric\n\n\n\nDescription\n\n
\n\n[Discovery](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/data-discovery/data-discovery-landing.md)Use Data Discovery to run a discovery scan to look for data patterns that might be sensitive data. Once discovered, data can then be reviewed or classified for further protection and management.\n\n\n\nDiscovered data\n\n\n\nOccurrences of sensitive data across tables in your instance, categorized by sensitive data pattern type.\n\n
\n\nDiscovery status\n\n\n\nCurrent state of all discovered sensitive data patterns, including new findings pending review, classified, or marked as ignored.\n\n
\n\nDiscovered attachments\n\n\n\nTotal sensitive data occurrences in attachments across tables in your instance.\n\n
\n\n[Classification](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/data-classification/data-classification.md)Data Classification creates data classes and helps organize your data into data classes for better management. Classified data can be protected at the class level.\n\n\n\nClassifiable data\n\n\n\nTables or columns that can be classified.\n\n
\n\nClassified data\n\n\n\nDictionary entries, tables, or columns that are classified.\n\n
## Protect your data\n\nServiceNow Vault uses data anonymization, cloud encryption, field encryption, log export, and zero trust access to help secure and protect your data.\n\n\n
\n\nTool\n\n\n\nMetric\n\n\n\nDescription\n\n
\n\n[Anonymization](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/data-privacy-classic/dps-data-anonymization.md)Anonymize data by data class with different anonymization techniques to preserve data patterns but remove sensitive data. Useful for sanitizing instances for development or removing specific user data because of rights to be forgotten. Default real-time protection policies are available from this card and are applied in addition to any existing policies. For more information, see [Default policies and configurations in ServiceNow Vault](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/vault-default-policies-configs.md).\n\n\n\nExisting data\n\n\n\nAll classified data per workflow that is anonymized or not.\n\n
\n\nReal time data\n\n\n\nNumber of successful real-time calls to anonymize sensitive data as it enters the platform, by channel.\n\n
\n\nAnonymization run times\n\n\n\nHow long scheduled user- or data-based jobs ran in hours for existing data.\n\n
\n\n[Cloud Encryption with Key Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/cloud-encryption/dare-overview.md)Securely protect sensitive data in encrypted storage for your data using block encryption, along with enhanced key management.\n\n\n\nActive cloud key\n\n\n\nTotal rotations of the active cloud key.**Note:** To view this data, you need the [Key Management Framework](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/encryption.md) admin role \\(sn\\_kmf.admin or sn\\_kmf.cryptographic\\_manager\\).\n\n
\n\n \n\n\n\nKey rotation\n\n\n\nTime elapsed between each rotation of active keys on your instance. Bar height measures how long a key was used before rotation.**Note:** To view this data, you need the [Key Management Framework](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/encryption.md) admin role \\(sn\\_kmf.admin or sn\\_kmf.cryptographic\\_manager\\).\n\n
\n\n[Field Encryption](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/field-encryption.md)Securely protect sensitive data while providing access for authorized users. Useful for increasing protections from bad actors.\n\n\n\nEncrypted fields classification status\n\n\n\nClassification status of all data protected with Field Encryption.\n\n
\n\nClasses protected with Field Encryption\n\n\n\nThe proportion of classified data protected withField Encryption.\n\n
\n\nActive encryption keys\n\n\n\nNumber of active Field Encryption keys in your instance. Ideally, the number of active keys matches the number of classifications.**Note:** To view this data, you need the [Key Management Framework](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/encryption.md) admin role \\(sn\\_kmf.admin or sn\\_kmf.cryptographic\\_manager\\) and the security\\_admin role.\n\n
\n\n[Exploring Log Export Service \\(LES\\)](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/les-landing-page.md)Forward your instance's logs to external analytics tools to monitor data patterns. New users can activate default configurations from this card. For more information, see [Default policies and configurations in ServiceNow Vault](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/vault-default-policies-configs.md).\n\n\n\n \n\n\n\n \n\n
\n\n[Zero Trust Access \\(ZTA\\)](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/session-access.md)Continuous authentication while accessing classified sensitive data in real time. Default step-up authentication policies are available for Vault customers. For more information, see [Default policies and configurations in ServiceNow Vault](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/vault-default-policies-configs.md).\n\n\n\nContinuous authentication classification status\n\n\n\nNumber of classifications that are protected due to the Continuous Authentication policies.\n\n
\n\nClasses protected with continuous authentication\n\n\n\nNumber of classes protected with continuous authentication, categorized by class.\n\n
## Monitor your data\n\nThe AI Insights section within ServiceNow Vault helps you keep track of activities that may indicate potential threats or data leaks.These activities are generated from channels such as ServiceNow Otto and Virtual Agent, as well as database tables configured with real-time discovery. This insight can help you prioritize your data protection strategies more effectively. Select **View tool metrics** to see the underlying metrics.\n\n|Metric|Chart Component|Description|\n|------|---------------|-----------|\n|User entering sensitive data|In tables with real-time discovery|The number of users whose sensitive data entries were detected in database tables configured with real-time discovery.|\n|In channels|The number of users whose sensitive data entries were detected within channels such as Now Assist or Virtual Agent.|\n|Channels with sensitive data|Channel bars \\(x-axis\\)|Stacked bars representing each channel where sensitive data was detected, broken down by data patterns. The data pattern legend displays the color code for each pattern. They may include driver license numbers, financial information, and personal identifiers.|\n|Occurrences of sensitive data \\(y-axis\\)|The count of sensitive data instances detected per channel.|\n|Tables with sensitive data found through real-time discovery|Table bars \\(x-axis\\)|Stacked bars representing each database table where sensitive data was detected, broken down by data patterns.|\n|Occurrences of sensitive data|The count of sensitive data instances detected per table.|\n\n## All ServiceNow Vault tools\n\n\n
\n\n[Encryption \\[Omitted image \"bus-security.svg\"\\] Alt text:](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/encryption.md)\n\n [Key Management and Field Encryption is a suite of highly configurable encryption modules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/encryption.md)\n\n\n\n[Code Signing\\[Omitted image \"bus-contract.svg\"\\] Alt text:](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/code-signing-landing.md)\n\n [Help improve security by validating sensitive application configuration data and scripts before they are used.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/code-signing-landing.md)\n\n
\n\n[Data Privacy\\[Omitted image \"bus-password-reset.svg\"\\] Alt text:](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/data-privacy-classic/data-privacy-landing.md)\n\n [Use the Data Privacy plugin to remove personally identifiable information \\(PII\\) from user data when it is migrated from a production instance to a non-production instance.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/data-privacy-classic/data-privacy-landing.md)\n\n\n\n[Data Discovery\\[Omitted image \"bus-find-an-app.svg\"\\] Alt text:](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/data-discovery/data-discovery-landing.md)\n\n [The Data Discovery plugin enables you to find personally identifiable information \\(PII\\) from user data. The data can then be classified for further security measures.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/data-discovery/data-discovery-landing.md)\n\n
\n\n[Log Export Service\\[Omitted image \"bus-log-store.svg\"\\] Alt text:](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/les-landing-page.md)\n\n [Improve security, performance, and user experience by importing ServiceNow log data into enterprise log analytics using the log export service.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/les-landing-page.md)\n\n\n\n[Zero Trust Access\\[Omitted image \"bus-block.svg\"\\] Alt text:](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/session-access.md)\n\n [ServiceNow Session Access enables organizations to dynamically reduce user privilege in a web session](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/session-access.md)\n\n
**Parent Topic:**[ServiceNow Vault console dashboard](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/vault-dashboard.md)\n\n"}}