[Yandex Cloud documentation](../../../index.md) > [Yandex Security Deck](../../index.md) > [Step-by-step guides](../index.md) > [Data Security Posture Management (DSPM)](index.md) > Managing scan results

# Managing scan results in DSPM

{% note info %}

This feature is at the [Preview](../../../overview/concepts/launch-stages.md) stage.

{% endnote %}

Once the [scan](../../concepts/dspm.md#scanning) is complete, you can do the following with the results:

* [View](#view)
* [Download](#download)
* [Export](#export)
* [View errors](#errors)
* [Delete](#delete)

## Viewing scan results {#view}

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![Database-Magnifier](../../../_assets/console-icons/database-magnifier.svg) **DSPM** and go to the **Scan history** tab.
  1. Select a scan.
  1. Sensitive data found during the scan, if any, will be displayed on the **Results** tab. The information about each detected object is presented in the following columns:

     * `Data type`: Search category of the data, e.g., `FULL-NAME-RU-ML`: Full name.
     * `Found occurrence`: Sensitive data found.
     * `Data source`: Data source name.
     * `Resource`: Name of the resource the data was found in.
     * `Object path`: Path to the file the data was found in.

     You can also view information about detected sensitive data by selecting ![alerts](../../../_assets/security-deck/alerts.svg) **Alerts** in the left-hand panel.

{% endlist %}

## Downloading scan results {#download}

As you download, a CSV file with the scan results is saved locally on your computer.

{% note info %}

The file can contain a maximum of 10,000 sensitive data records. To export a larger number of records, use [export](#export) to Object Storage.

{% endnote %}

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![Database-Magnifier](../../../_assets/console-icons/database-magnifier.svg) **DSPM** and go to the **Scan history** tab.
  1. To the right of the scan, click ![image](../../../_assets/console-icons/ellipsis.svg) and select ![image](../../../_assets/console-icons/arrow-shape-down-to-line.svg) **Download results**.

     Alternatively, go to the scan page, click **More** ![image](../../../_assets/console-icons/chevron-down.svg), and select ![image](../../../_assets/console-icons/arrow-shape-down-to-line.svg) **Download results**.

  1. In the **Display sensitive data** field, specify how to display names, contact information, and other personal data.
  1. Click **Download file**.

{% endlist %}

## Exporting scan results {#export}

When exporting, the file with scan results is saved to the bucket you select.

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![Database-Magnifier](../../../_assets/console-icons/database-magnifier.svg) **DSPM** and go to the **Scan history** tab.
  1. Click ![image](../../../_assets/console-icons/ellipsis.svg) to the right of the scan and select ![image](../../../_assets/console-icons/folder-arrow-up-in.svg) **Export results**.

     Alternatively, go to the scan page, click **More** ![image](../../../_assets/console-icons/chevron-down.svg), and select ![image](../../../_assets/console-icons/folder-arrow-up-in.svg) **Export results**.

  1. In the window that opens, set the export settings:
  
     * In the **Bucket** field, select the bucket to save the results to.
     * In the **Path to bucket** field, set the [prefix](../../../storage/concepts/object.md#folder) of the object to save the results to.
     * In the **File name** field, specify the name of the file to save the results to. The file will automatically get the `.csv` extension.
     * In the **Service account** field, select the service account with the `storage.uploader` [role](../../../iam/concepts/access-control/roles.md) for the selected bucket and `kms.keys.encrypter` for the [encryption key](../../../kms/concepts/key.md), if the bucket is [encrypted](../../../storage/concepts/encryption.md).
     * Click **Validate and export** to export the results with parameter validation.

       If the selected service account does not have enough permissions for the operation, the information about this will be displayed on the **Parameter validation** tab.

       Expand the section with information about missing roles, select the service account, and click ![list-check](../../../_assets/console-icons/list-check.svg) **Assign roles** to grant the lacking permissions to this service account. Then click **Validate and export** again.

     Alternatively, you can export the results without parameter validation by clicking the **Export without validation**. If the selected service account does not have enough permissions for the operation, you will see an error.

{% endlist %}

## Viewing scan errors {#errors}

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![Database-Magnifier](../../../_assets/console-icons/database-magnifier.svg) **DSPM** and go to the **Scan history** tab.
  1. Select the scan and navigate to the **Messages and errors** tab.

     You can also view information about scan errors by selecting ![alerts](../../../_assets/security-deck/alerts.svg) **Alerts** in the left-hand panel.

  For more information about scanning errors, see [Troubleshooting Data Security Posture Management (DSPM)](../../diagnostics/dspm-diagnostics.md).

{% endlist %}

## Deleting scan results {#delete}

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![Database-Magnifier](../../../_assets/console-icons/database-magnifier.svg) **DSPM** and go to the **Scan history** tab.
  1. To the right of the scan, click ![image](../../../_assets/console-icons/ellipsis.svg) and select ![image](../../../_assets/console-icons/trash-bin.svg) **Delete**.

     Alternatively, go to the scan page, click **More** ![image](../../../_assets/console-icons/chevron-down.svg), and select ![image](../../../_assets/console-icons/trash-bin.svg) **Delete**.

  1. In the window that opens, confirm the deletion.

{% endlist %}