Policy: GCP > CIS v5.0 > 7 - BigQuery > 7.04 - Ensure all data in BigQuery has been classified > Attestation

By setting this policy, you attest that you have manually verified that it complies with the relevant section of the CIS Benchmark.

Verify that Sensitive Data Protection discovery is configured to profile and classify the BigQuery data in this project.

Verification Steps: 1. Go to Google Cloud Console > Sensitive Data Protection > Discovery > Scan configurations (https://console.cloud.google.com/dlp/landing/dataProfiles/configurations) 2. Verify there is a discovery scan configuration for BigQuery that covers this project, either at the organization or the project level 3. Review the data profiles to confirm that the BigQuery datasets in this project are being classified

Learn more at: https://cloud.google.com/sensitive-data-protection/docs/data-profiles

Once verified, enter the date that this attestation expires. Note that the date can not be further in the future than is specified in GCP > CIS v5.0 > 7 - BigQuery > Maximum Attestation Duration, which by default follows GCP > CIS v5.0 > Maximum Attestation Duration. Set to a blank value to clear the attestation.