Built-in vs Custom SITs
Understanding the Concept
Built-in SITs are pre-configured by Microsoft and cover common sensitive data types globally. They're maintained and updated by Microsoft, requiring no configuration to use.
Custom SITs allow organizations to define patterns specific to their business - employee IDs, project codes, proprietary data formats, or regional identifiers not covered by built-in types.
You can also clone and modify built-in SITs to adjust confidence levels, add keywords, or fine-tune detection for your environment.
Key Points
- Built-in: Ready to use, Microsoft maintained, global coverage
- Custom: Organization-specific patterns and keywords
- Clone option: Modify built-in SITs for fine-tuning
- EDM (Exact Data Match): Match against actual data tables
- Trainable Classifiers: ML-based classification for complex content
SIT Types Comparison
Built-in SITs
300+ ready-to-use patterns (SSN, Credit Cards, IBANs)
Custom SITs
Organization-specific patterns (Employee ID, Project codes)
Exact Data Match
Match against actual sensitive data tables
Trainable Classifiers
ML models for content types (contracts, resumes)
Why This Matters in Real Organizations
Every organization has unique data that built-in SITs won't cover. Custom SITs ensure your proprietary information is protected. Conversely, over-relying on custom SITs when built-in ones exist wastes effort and may be less accurate.
Common Mistakes to Avoid
Interview Tips
- Explain when you would use each type
- Describe the process of creating a custom SIT
- Discuss EDM for exact matching scenarios
Exam Tips (SC-401)
- Know the process to create custom SITs
- Understand EDM requirements and setup
- Know when trainable classifiers are appropriate
Course Complete!
You've finished all lessons