<\/p>\n
Are you managing multiple Office 365 tenants? If yes, read our guide, 15 Tricks to Succeed in Managing Multiple Office 365 Tenants<\/em> to help you save time. Click here to learn how.<\/a><\/h3>\n <\/p>\n
Data Loss Prevention helps businesses follow industry regulations and protect sensitive information. It also prevents inadvertent disclosure. Sensitive information that you need to prevent leaking outside your organization includes financial data, such as credit card numbers, social security numbers, or health records. With a DLP policy, you can identify, track, and protect sensitive information across Office and Microsoft 365.<\/p>\n
How Do Data Loss Prevention Policies Work?<\/h2>\n
DLP detects sensitive information by using deep content analysis. It can identify sensitive data without affecting people who work with the rest of the content.<\/p>\n
Once created, DLP Policies are stored and synchronized to content sources such as:<\/p>\n
\n- Exchange Online<\/li>\n
- OneDrive for Business<\/li>\n
- SharePoint Online Sites<\/li>\n
- Office 2016 desktop programs<\/li>\n<\/ul>\n
After they’re synchronized, these policies will start to enforce the required actions.<\/p>\n
What Does a Data Loss Prevention Policy Contain?<\/h2>\n
A DLP policy contains 2 things: first, locations, such as Exchange Online, SharePoint Online, and OneDrive for Business sites, and second, conditions for execution and actions to perform.<\/p>\n
What is a Sensitive Information Type?<\/h2>\n
Office 365 includes definitions for sensitive information that are unique to different countries. This information can be credit card numbers, bank account numbers, and passport numbers.<\/p>\n
Each sensitive type can be keywords, internal functions, regular expressions, or pattern matches. This helps DLP detection achieve the highest degree of accuracy while also reducing the number of false positives that can interrupt people\u2019s work. DLP policies allow for detection of different types of content within a single policy.<\/p>\n
Learn how to sell Office365 the right way with our FREE Sales Guide<\/a><\/h3>\nHow to Create a Data Loss Prevention Policy<\/h2>\n
To create a DLP policy, first log into the Office or Microsoft 365 tenant, select Admin centers<\/strong> and then choose Security & Compliance<\/strong>.<\/p>\n![\"Security](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Security-Compliance.png\")
<\/p>\n
\n- Once the Security & Compliance<\/strong> center is loaded, expand the Data loss prevention<\/strong> menu and choose the Policy menu item.
![\"Policy\"](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Policy.png\")
<\/li>\n- Select the Create a policy<\/strong> button. A wizard interface will load from the right side, where you can set the properties needed for the policy. Choose the industry regulation category, which will display regional and country specific regulations.
![\"Financial\"](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Financial.png\")
<\/li>\n- Clicking the Financial option will display country specific policies that you can use.
![\"Canadian](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Canadian-Financial.png\")
<\/li>\n - Clicking a regulation will display a short description and the information it protects.
![\"Canadian](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Canadian-Financial-Description.png\")
<\/li>\n - Once selected, click the next<\/strong> button and type the name and description for the policy, then press next<\/strong>. Not every location warrants a policy. You either select \u201cAll locations<\/strong>\u201d or pick the locations that you want the policy to apply. You can decide between Exchange email, SharePoint sites, and OneDrive accounts. For SharePoint and OneDrive sites, you can choose sites or accounts as well as exclude some as needed.
![\"Location\"](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Location.png\")
<\/li>\n- Once you have defined the locations, press the next<\/strong> button. Now you can either choose the simple or advanced option. Simple settings<\/strong> make it easy to create the most types of DLP policies without creating rules. Advanced settings<\/strong> use the rule editor to give you control over every setting of your policy. The simple setting option covers most common scenarios.
\nEven with the simple option, you still need to choose the detection type for the policy you are creating.![\"Advanced](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Advanced-Settings.png\")
<\/li>\n- Once you choose whether to inspect external or internal content, press the next<\/strong> button. You will need to define policy tips for the end-users. Then, you can set an alert for the number of times a sensitive information type is shared with the same content. Finally, chose whether or not to block people from sharing and restrict access to the content.
![\"Notifications\"](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Notifications.png\")
<\/li>\n- You can turn the rule on right away, test it, and show or hide policy tips, or simply not enable it at all.
![\"Test](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Test-or-Run.png\")
<\/li>\n<\/ol>\n <\/p>\n
Advanced Data Loss Prevention<\/h2>\n
Sensitive information types don’t cover organizational specific data. For example, you may have specific data for customer records that you need to capture.<\/p>\n
Within Exchange Online, you can document fingerprint files. Most of these features are managed and controlled in the Security & Compliance center.<\/p>\n
![\"Documents](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Documents-fingerprint.png\")
<\/p>\n
Click the Manage document fingerprints. It will launch a wizard so that you can assign a name and then attach documents.<\/p>\n
![\"Add](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Add-fingerprint.png\")
<\/p>\n
Within Exchange, the new information created can be used within standard DLP policies.<\/p>\n
Sherweb makes Office 365 easy so you can focus on your business!<\/a><\/h3>\n <\/p>\n
The End-user Experience<\/h2>\n
Once you have created and enabled DLP policies, it will start to inspect content. For content within SharePoint or OneDrive for Business, any content that matches the policy is marked with both an icon and changes. It can display policy tips if you allowed them within the policy.<\/p>\n
![\"End-user](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-End-user-experience.png\")
<\/p>\n
The hover panel for the items will display the policy and indicate if it’s blocked.<\/p>\n
![\"Blocked](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Blocked-file.png\")
<\/p>\n
When a user clicks the View policy tip, he will see the policy details. He can fix the problem with the resolve button. Fixing the problem overrides the current violation and marks it as normal content.<\/p>\n
![\"Resolve\"](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Resolve.png\")
<\/p>\n
This is useful for notifying the end-user with alerts if configured within the policy itself. It also makes changes to the presentation of the content so that it is obvious that it’s in violation.<\/p>\n
After you create and turn on DLP policies, you need to verify that they\u2019re helping you stay compliant. With DLP reports, you can view the number of policies and rules that match over time, and the number of false positives and overrides. You can filter those matches by location, time frame, and even narrow it down to a specific policy, rule, or action. With DLP reports, you can get business insights and:<\/p>\n
After they’re synchronized, these policies will start to enforce the required actions.<\/p>\n
What Does a Data Loss Prevention Policy Contain?<\/h2>\n
A DLP policy contains 2 things: first, locations, such as Exchange Online, SharePoint Online, and OneDrive for Business sites, and second, conditions for execution and actions to perform.<\/p>\n
What is a Sensitive Information Type?<\/h2>\n
Office 365 includes definitions for sensitive information that are unique to different countries. This information can be credit card numbers, bank account numbers, and passport numbers.<\/p>\n
Each sensitive type can be keywords, internal functions, regular expressions, or pattern matches. This helps DLP detection achieve the highest degree of accuracy while also reducing the number of false positives that can interrupt people\u2019s work. DLP policies allow for detection of different types of content within a single policy.<\/p>\n
Learn how to sell Office365 the right way with our FREE Sales Guide<\/a><\/h3>\nHow to Create a Data Loss Prevention Policy<\/h2>\n
To create a DLP policy, first log into the Office or Microsoft 365 tenant, select Admin centers<\/strong> and then choose Security & Compliance<\/strong>.<\/p>\n<\/p>\n
\n- Once the Security & Compliance<\/strong> center is loaded, expand the Data loss prevention<\/strong> menu and choose the Policy menu item.<\/li>\n
- Select the Create a policy<\/strong> button. A wizard interface will load from the right side, where you can set the properties needed for the policy. Choose the industry regulation category, which will display regional and country specific regulations.<\/li>\n
- Clicking the Financial option will display country specific policies that you can use.<\/li>\n
- Clicking a regulation will display a short description and the information it protects.<\/li>\n
- Once selected, click the next<\/strong> button and type the name and description for the policy, then press next<\/strong>. Not every location warrants a policy. You either select \u201cAll locations<\/strong>\u201d or pick the locations that you want the policy to apply. You can decide between Exchange email, SharePoint sites, and OneDrive accounts. For SharePoint and OneDrive sites, you can choose sites or accounts as well as exclude some as needed.<\/li>\n
- Once you have defined the locations, press the next<\/strong> button. Now you can either choose the simple or advanced option. Simple settings<\/strong> make it easy to create the most types of DLP policies without creating rules. Advanced settings<\/strong> use the rule editor to give you control over every setting of your policy. The simple setting option covers most common scenarios.
\nEven with the simple option, you still need to choose the detection type for the policy you are creating.<\/li>\n- Once you choose whether to inspect external or internal content, press the next<\/strong> button. You will need to define policy tips for the end-users. Then, you can set an alert for the number of times a sensitive information type is shared with the same content. Finally, chose whether or not to block people from sharing and restrict access to the content.<\/li>\n
- You can turn the rule on right away, test it, and show or hide policy tips, or simply not enable it at all.<\/li>\n<\/ol>\n
<\/p>\n
Advanced Data Loss Prevention<\/h2>\n
Sensitive information types don’t cover organizational specific data. For example, you may have specific data for customer records that you need to capture.<\/p>\n
Within Exchange Online, you can document fingerprint files. Most of these features are managed and controlled in the Security & Compliance center.<\/p>\n
<\/p>\n
Click the Manage document fingerprints. It will launch a wizard so that you can assign a name and then attach documents.<\/p>\n
<\/p>\n
Within Exchange, the new information created can be used within standard DLP policies.<\/p>\n
Sherweb makes Office 365 easy so you can focus on your business!<\/a><\/h3>\n <\/p>\n
The End-user Experience<\/h2>\n
Once you have created and enabled DLP policies, it will start to inspect content. For content within SharePoint or OneDrive for Business, any content that matches the policy is marked with both an icon and changes. It can display policy tips if you allowed them within the policy.<\/p>\n
<\/p>\n
The hover panel for the items will display the policy and indicate if it’s blocked.<\/p>\n
<\/p>\n
When a user clicks the View policy tip, he will see the policy details. He can fix the problem with the resolve button. Fixing the problem overrides the current violation and marks it as normal content.<\/p>\n
<\/p>\n
This is useful for notifying the end-user with alerts if configured within the policy itself. It also makes changes to the presentation of the content so that it is obvious that it’s in violation.<\/p>\n
After you create and turn on DLP policies, you need to verify that they\u2019re helping you stay compliant. With DLP reports, you can view the number of policies and rules that match over time, and the number of false positives and overrides. You can filter those matches by location, time frame, and even narrow it down to a specific policy, rule, or action. With DLP reports, you can get business insights and:<\/p>\n
<\/p>\n
- \n
- Once the Security & Compliance<\/strong> center is loaded, expand the Data loss prevention<\/strong> menu and choose the Policy menu item.<\/li>\n
- Select the Create a policy<\/strong> button. A wizard interface will load from the right side, where you can set the properties needed for the policy. Choose the industry regulation category, which will display regional and country specific regulations.
<\/li>\n- Clicking the Financial option will display country specific policies that you can use.
<\/li>\n- Clicking a regulation will display a short description and the information it protects.
<\/li>\n- Once selected, click the next<\/strong> button and type the name and description for the policy, then press next<\/strong>. Not every location warrants a policy. You either select \u201cAll locations<\/strong>\u201d or pick the locations that you want the policy to apply. You can decide between Exchange email, SharePoint sites, and OneDrive accounts. For SharePoint and OneDrive sites, you can choose sites or accounts as well as exclude some as needed.
<\/li>\n- Once you have defined the locations, press the next<\/strong> button. Now you can either choose the simple or advanced option. Simple settings<\/strong> make it easy to create the most types of DLP policies without creating rules. Advanced settings<\/strong> use the rule editor to give you control over every setting of your policy. The simple setting option covers most common scenarios.
\nEven with the simple option, you still need to choose the detection type for the policy you are creating.<\/li>\n- Once you choose whether to inspect external or internal content, press the next<\/strong> button. You will need to define policy tips for the end-users. Then, you can set an alert for the number of times a sensitive information type is shared with the same content. Finally, chose whether or not to block people from sharing and restrict access to the content.
<\/li>\n- You can turn the rule on right away, test it, and show or hide policy tips, or simply not enable it at all.
<\/li>\n<\/ol>\n<\/p>\n
Advanced Data Loss Prevention<\/h2>\n
Sensitive information types don’t cover organizational specific data. For example, you may have specific data for customer records that you need to capture.<\/p>\n
Within Exchange Online, you can document fingerprint files. Most of these features are managed and controlled in the Security & Compliance center.<\/p>\n
<\/p>\nClick the Manage document fingerprints. It will launch a wizard so that you can assign a name and then attach documents.<\/p>\n
<\/p>\nWithin Exchange, the new information created can be used within standard DLP policies.<\/p>\n
Sherweb makes Office 365 easy so you can focus on your business!<\/a><\/h3>\n
<\/p>\n
The End-user Experience<\/h2>\n
Once you have created and enabled DLP policies, it will start to inspect content. For content within SharePoint or OneDrive for Business, any content that matches the policy is marked with both an icon and changes. It can display policy tips if you allowed them within the policy.<\/p>\n
<\/p>\nThe hover panel for the items will display the policy and indicate if it’s blocked.<\/p>\n
<\/p>\nWhen a user clicks the View policy tip, he will see the policy details. He can fix the problem with the resolve button. Fixing the problem overrides the current violation and marks it as normal content.<\/p>\n
<\/p>\nThis is useful for notifying the end-user with alerts if configured within the policy itself. It also makes changes to the presentation of the content so that it is obvious that it’s in violation.<\/p>\n
After you create and turn on DLP policies, you need to verify that they\u2019re helping you stay compliant. With DLP reports, you can view the number of policies and rules that match over time, and the number of false positives and overrides. You can filter those matches by location, time frame, and even narrow it down to a specific policy, rule, or action. With DLP reports, you can get business insights and:<\/p>\n
- Select the Create a policy<\/strong> button. A wizard interface will load from the right side, where you can set the properties needed for the policy. Choose the industry regulation category, which will display regional and country specific regulations.
![\"Monitor\"](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/How-to-Use-Data-Loss-Prevention-Monitor.png\")
<\/p>\n![\"Office](\"https:\/\/www.sherweb.com\/blog\/wp-content\/uploads\/office-365-admin-guide-blog-cta.jpg\")
<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"