Study PII classification

1. 01

   Concepts & system design

   60 min· read · map the mechanismtimer

   R16 — Microsoft Presidio analyzer & anonymizer

   R17 — NIST Privacy Framework control functions

   Read the assigned sections; map the mechanism, threat model and trade-offs.

2. 02

   Project implementation

   120 min· build · integrate · debugtimer

   Build the reusable privacy-gateway (D4) using Microsoft Presidio + custom validators. Replace detected PII with tenant/session-scoped opaque UUID tokens, store mappings in an access-controlled vault, and restore only for authorized callers and permitted output fields.

   Build, integrate, debug and improve the increment in the active project.

3. 03

   Security lab

   60 min· attack your own systemtimer

   Test partial PII matches, token collisions, cross-session restoration attempts, and log leakage using synthetic SSNs/credit cards.

   Test the abuse case, failure path, authorization bypass or resource limit.

4. 04

   Verification & evidence

   30 min· test · record evidencetimer

   D4 gateway test suite proving zero raw PII reaches the model or logs, and cross-tenant token restoration fails closed.

   Add or run regression tests; record the 9-point evidence record.

5. 05

   Deliberate practice & Socratic review

   30 min· explain aloud · update gapstimer

   Answer the 8 Socratic questions without notes: What? Why? How? What if? Why not? How can I prove it? Where can it break? What have I learned?

   Re-explain the hardest concept aloud, inspect one edge case, update the gap log.

6. total5 h

• R16Microsoft Presidio↗ microsoft.github.io

  Analyzer, anonymizer, custom PII recognizers, and probabilistic detection false-positive/negative limits.

• R17NIST Privacy Framework↗ nist.gov

  Identify-P, Govern-P, Control-P, Communicate-P, and Protect-P lifecycle controls.

Read only the named sections needed for today's task. Reading sits inside the 60-minute concepts block; it is not extra time.

• docsMicrosoft Presidio Documentation · docs home
  Home - Presidio

  Maps the analyzer, anonymizer and custom recognizer interfaces you compose into the privacy gateway, including the operator set used for token substitution.

  R16checked 2026-11-11
• articleNIST · framework overview
  Privacy Framework | NIST

  Provides the Identify-P through Protect-P control families that justify which PII categories are detected, where mappings live, and who may restore them.

  R17checked 2026-11-11
• videoM&M Tech · 7 min
  Data Anonymization With Microsoft Presidio - Full Step By Step Tutorial

  Shows analyzer results feeding the anonymizer with operator configs, the exact call shape for swapping detected entities for opaque tokens.

  R16checked 2026-11-11
• videoTAUVOD · 25 min
  Presidio - Automated identification and anonymization of PII data at scale

  The Presidio project lead explains recognizer composition, confidence scores and context words, which is how you reason about false-positive and false-negative limits.

  R16checked 2026-11-11
• repoPresidio (GitHub) · source + samples
  data-privacy-stack/presidio

  Includes custom recognizer and operator samples plus the deanonymizer path, giving you working code for the tenant-scoped vault and restore-on-authorized-call flow.

  R16checked 2026-11-11

A lab is complete only when it produces evidence. Installing PyRIT, Garak, Presidio or TransformerLens is not completion. Saved on this device only.