Term Kind Topic What it is
Data Discovery practice Data Classification Automatically scanning stores to find where sensitive data actually resides, as distinct from where the documentation says it should.
Fail-Closed Classification Default Untagged-Is-Restricted, Deny-On-Missing-Label pattern Data Classification Resolving an absent sensitivity label to the most restrictive class, so that forgetting to classify data produces a denied query rather than a silent exposure.
Tag-Bound Access Policy Classification-Driven Access Control, Tag-Based Masking pattern Data Classification An access rule attached to a classification label rather than to a table, so that tagging data is what applies the control and derived copies inherit it through lineage.