Monitor and review default alerting policy alerts

task australia Updated Nov 6, 2026 1 min read monitor-alerting-policy-alerts.md

Review the alerts generated by the default alerting policy to track sensitive data entry patterns, identify training opportunities, and monitor compliance.

Before you begin

Role required: data_privacy_admin

Procedure

Go to All > Data Discovery > Scheduled Discovery.
Select Discovery Findings in the right-side navigation pane.
Filter alerts by the default alerting policy.
1. Look for a filter option to show only alerts from the default alerting policy.
2. Apply a date range filter if you want to review a specific time period.
3. If available, filter by sensitive data type (Email, SSN, Credit Card, etc.) to focus on specific patterns.
Review the alert summary statistics.
1. Note the total number of alerts generated in the selected time period.
2. Observe the breakdown of alerts by sensitive data type (Email, SSN, Credit Card, DOB).
3. Identify which fields generated the most alerts.
4. Note which users or teams triggered the most alerts.
Summary statistics give you a high-level view of sensitive data entry patterns on your instance.
Examine individual alerts in detail.
1. Click on specific alerts to view the full details, including which record triggered the alert.
2. Review the timestamp and user who entered the data.
3. Check the field where the sensitive data was entered (Work_notes or Comments).
4. Verify that detected data is actually sensitive (check for false positives).
Detailed review helps you understand which users and business processes most commonly encounter sensitive data.

62 lines · 2.3 KB Wrap lines

---
title: Monitor and review default alerting policy alerts
description: Review the alerts generated by the default alerting policy to track sensitive data entry patterns, identify training opportunities, and monitor compliance.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/data-privacy-classic/monitor-alerting-policy-alerts.html
release: australia
product: Data Privacy \(Classic\)
classification: data-privacy-classic
topic_type: task
last_updated: "2026-11-06"
reading_time_minutes: 1
breadcrumb: [Default alerting policy for sensitive data entry, Default data privacy configurations, Data Privacy, Platform Privacy]
---

# Monitor and review default alerting policy alerts

Review the alerts generated by the default alerting policy to track sensitive data entry patterns, identify training opportunities, and monitor compliance.

## Before you begin

Role required: data\_privacy\_admin

## Procedure

1. Go to **All** &gt; **Data Discovery** &gt; **Scheduled Discovery**.

2. Select **Discovery Findings** in the right-side navigation pane.

3. Filter alerts by the default alerting policy.

1. Look for a filter option to show only alerts from the default alerting policy.

2. Apply a date range filter if you want to review a specific time period.

3. If available, filter by sensitive data type \(Email, SSN, Credit Card, etc.\) to focus on specific patterns.

4. Review the alert summary statistics.

1. Note the total number of alerts generated in the selected time period.

2. Observe the breakdown of alerts by sensitive data type \(Email, SSN, Credit Card, DOB\).

3. Identify which fields generated the most alerts.

4. Note which users or teams triggered the most alerts.

Summary statistics give you a high-level view of sensitive data entry patterns on your instance.

5. Examine individual alerts in detail.

1. Click on specific alerts to view the full details, including which record triggered the alert.

2. Review the timestamp and user who entered the data.

3. Check the field where the sensitive data was entered \(Work\_notes or Comments\).

4. Verify that detected data is actually sensitive \(check for false positives\).

Detailed review helps you understand which users and business processes most commonly encounter sensitive data.