Cavelo

Interact with Cavelo Attack Surface Management API

PII → Risk Assessment

AI-generated

Summary

Assess the risk associated with personally identifiable information (PII) based on specified risk levels, data sensitivity categories, and optional risk factors to prioritize remediation efforts.

Inputs

  • Risk Level (required) — Select the risk severity level of the PII to assess: Critical (e.g., SSN, credit cards, passwords), High (e.g., emails, phones), Medium (e.g., names, addresses), or Low (general identifiers). Defaults to High.
  • Data Sensitivity (required) — Choose one or more data sensitivity categories to further refine the assessment: Financial Data, Health Information, Identity Data, and/or Contact Information. Defaults to Financial and Identity.
  • Include Risk Factors (required) — Optionally include additional risk factors in the assessment such as Data Exposure Risk, Compliance Risk, and Data Retention Risk. Defaults to Data Exposure and Compliance Risk.
  • Limit — Optionally limit the number of returned PII risk assessment records; defaults to 100.

Output shape

a list of PII risk assessment objects

Each assessment object includes calculated risk scores, optional detailed risk factors (exposureRisk, complianceRisk, retentionRisk) based on inclusion options, and a remediation priority level indicating urgency. The results are paginated by the specified limit.

Examples

Example 1: Assess high-risk PII related to financial and identity data with exposure and compliance risk factors included.

Set Risk Level to 'High', Data Sensitivity to ['Financial Data', 'Identity Data'], Include Risk Factors to ['Data Exposure Risk', 'Compliance Risk'].

Discussion