An automated scanner flags hundreds of columns as possible PII and writes tags straight into enforcement without human review. What practice should the metadata program require instead?
Select an answer to reveal the explanation.
Short Explanation
Auto-discovery is a helpful smoke alarm, not the fire marshal’s final report. Let scanners suggest PII tags, then have stewards confirm before those tags drive masking or access blocks. Blind trust in every machine guess creates false locks and missed risks.
Full Explanation
Assisted discovery accelerates sensitive-data identification, but automation without stewardship review risks false positives and false negatives entering enforcement. Best practice is a human-in-the-loop step: stewards confirm or correct suggested tags before policies rely on them. Disabling discovery, auto-accepting all tags, or crowdsourcing raw findings without governance all weaken protection quality.