How-to... Create the CUI/Sensitive Data Inventory

The Sensitive Data Inventory in FutureFeed was designed to simplify the process of managing and identifying sensitive data within your organization. Here's how the feature works and the strategy behind it:

Step 1: Initial Broad Inventory

On your first pass through the Sensitive Data Inventory, you can start by checking the boxes that correspond to the types of information present in your system. This helps your team kick-start the process by being thoughtful and considering the entire system broadly. However, this is a high-level approach, indicating that “we have this type of information somewhere,” without specifying exact locations.

Step 2: Focusing the Auditor

The real goal of the feature is to direct the auditor's attention to the right places. By reducing their scope to where the critical information resides, you minimize unnecessary exploration and reduce the risk of unintentional findings or extended conversations during assessments, which can be costly.

For example, when you flag an item in Electronic Data Locations or Tools and Services as a CUI Asset, the CUI/Sensitive button is triggered. This tells the auditor, “Look here.” As a result, their focus will remain on these flagged areas, reducing scrutiny on other parts of your system.

Step 3: Inventory Detail

When you check a box in the Sensitive Data Inventory, the system goes beyond just flagging it—it turns that checkbox into a counter. By clicking on the counter, both you and the auditor can access a detailed list of tools and services that store, process, or transmit CUI. This makes it easy to see where exactly the sensitive information is located.

Step 4: Handling Missed Items

It’s common for teams to miss or overlook things during that initial broad pass. As you begin to build out the list of tools and services, you might remember additional types of CUI or sensitive data you hadn’t accounted for initially. The system is designed to help in this case as well. When you check the boxes for new items, the count in the Sensitive Data Inventory updates automatically without requiring you to navigate away. This streamlines the process and helps you maintain momentum.

Alternative Approach: Skip the Sensitive Data Inventory in the Big Picture Subway Stop

Some users choose to skip the broad inventory step altogether. They prefer to build their list of tools and services first, knowing that this will automatically update the Sensitive Data Inventory as they go along. Both approaches are valid, depending on your workflow preferences.

We're Here to Help

We hope this helps clarify how the Sensitive Data Inventory feature works. If you have suggestions or ideas on how we can improve this feature, now that you understand our intention, feel free to let us know! Your feedback is always appreciated.