Classifications Tab
Content classification labels Confluence spaces and pages with a sensitivity level. Labels serve two purposes in Aegis:
- Exposure scoring: The “Sensitivity Label” factor reads the classification of the page. A Restricted page contributes more risk than an Internal page with the same access pattern.
Classifications do not change who can access a page, they are metadata labels only.
The Four Classification Levels
| Level | Lozenge | Risk Value | Score Contribution | Meaning |
|---|---|---|---|---|
| Public | Gray | 0.0 | +0 pts | Content intended for public consumption; no sensitivity |
| Internal | Green | 0.3 | +1.5 pts | For internal audiences only; not for external distribution |
| Confidential | Blue | 0.7 | +3.5 pts | Sensitive business information; restricted distribution |
| Restricted | Red | 1.0 | +5 pts | Highest sensitivity; access tightly controlled |
The score contribution above assumes the Sensitivity Label factor weight is at its default of 5%. Adjusting that weight in the Scoring & SLA tab changes the contribution proportionally.
How Classifications Affect the Exposure Score
The exposure score has six weighted factors. “Sensitivity Label” has a default weight of 5%. The classification’s risk value (0.0–1.0) is multiplied by the factor weight to produce that factor’s contribution.
Example with default weights:
- Unclassified page: Sensitivity Label contributes 0 points.
- Confidential (risk value 0.7): contributes
0.7 × 5 = 3.5points. - Restricted (risk value 1.0): contributes
1.0 × 5 = 5.0points.
Note: A Restricted page that is also publicly accessible, has broad group access, and has open findings can easily score in the Critical range (75+). Classifications amplify the risk of already-exposed pages.