Sensitive Information Types: Ready for NIS2?

🧐 What are Sensitive Information Types (SITs)?

A Sensitive Information Type or Sensitive Information Type (SIT) in Microsoft Purview helps you automatically detect sensitive data, such as:

✅ Personally identifiable information (PII).
✅ Payment card information (e.g., credit card numbers)
✅ Confidential business information (such as contracts or patents)
✅ Medical or financial data

Using machine learning, pattern recognition and keywords, Microsoft Purview can find sensitive data in emails, SharePoint documents, OneDrive and more.

 

📂 What Sensitive Information Types are there?

Microsoft Purview offers standard and custom SITs.

🔹 Standard Sensitive Information Types

With more than 300 off-the-shelf SITs, Microsoft Purview helps you with compliance with AVG and NIS2, among others. Some examples:

🔹 Credit Card Number – Recognizes credit card numbers used worldwide.
🔹 U.S. Social Security Number (SSN) – Detects U.S. citizen service numbers
🔹 IBAN (International Bank Account Number) – Recognizes bank account numbers
🔹 AVG data – Recognizes passport numbers, email addresses and phone numbers

 

🔹 Custom Sensitive Information Types

Want to protect specific company information? Then create your own SIT:
🔸 Specific customer data or internal IDs
🔸 Unique keywords or patterns (such as project codes)
🔸 Regular expressions to recognize data patterns

 

🚀 How to Use Sensitive Information Types.

SITs are used in various Microsoft security solutions, such as:

🔹 Data Loss Prevention (DLP) – Prevents sensitive information from being shared
🔹 Microsoft Defender for Cloud Apps – Prevents sensitive data from ending up in unauthorized apps
🔹 Microsoft Information Protection (MIP) – Labels and encrypts documents
🔹 Insider Risk Management – Detects suspicious internal behavior

 

🎯 Why are SITs Important for NIS2?

With the introduction of NIS2 in the Netherlands, companies are required to take cybersecurity measures and protect sensitive data. Without proper data governance, you risk high fines!

✅ Automatic protection of sensitive data
✅ Compliance with NIS2, AVG and other regulations
✅ Prevention of data breaches and reputational damage
✅ Efficiency – less manual management required

 

⚠️ Is Your Organization Ready for NIS2?

As of Q3 2025, NIS2 will officially go into effect in the Netherlands. This means that companies must comply with strict cybersecurity requirements. Are you ready? 🤔

Want to make sure your organization is compliant and avoid fines? 🔐

📞 Get in touch with ALTA-ICT! We help companies with:

✔️ NIS2 compliance audits
✔️ Modern Workspaces NIS2 compliant
✔️ Microsoft Purview and DLP implementations
✔️ Security awareness trainings
✔️ Automation of data governance

👉 Avoid risk and take the first step toward compliance now! 🚀

💬 Schedule a no-obligation consultation with our experts! 🛡️

 

References:

¹https://alta-ict.nl/blog/wat-gaat-de-nis2-richtlijn-betekenen-voor-jouw-organisatie/

 

About the author

My name is Alta Martes, a specialist in Microsoft 365 and Google Workspace, with a focus on modern workplace management, cloud security and identity & access management. With years of experience, I help organizations optimize their IT infrastructure and create a secure, efficient digital workplace.

🎯 Need help with your Microsoft 365 strategy?
Click below and find out how we can support your organization: