Security Test: High number of PHI¶

Scanner(s) Support¶

Description¶

Default Severity: high

When access control is not properly implemented, some PHI can leak to the public. It may lead to data breaches, financial loss, legal penalties, and HIPAA violations.

Configuration¶

Identifier: sensitive_data/high_number_of_phi

Examples¶

All configuration available:

checks:
  sensitive_data/high_number_of_phi:
    skip: false # default
    options:
      detection_threshold: 1 # default

Increase the Detection Threshold

 checks:
   information_disclosure/high_number_of_phi:
     options:
       detection_threshold: 10

Options¶

Options can be set in the options key of the Security Test Configuration.

Compliance and Standards¶