Data Loss Prevention

Vlad Catrinescu

There are many variations of passages of lorem ipsum available, but the majority have suffered

alterationin some form, by injected humour

THE KEY IS ALWAYS YOU!

PLURALSIGHT AUTHOR

INTERNATIONAL SPEAKER

SHAREPOINT EXPERT

DLP? Engine

DLP Queries

Site Collections

Permissions Q&A

EmailsDLP

Policies

Policy Tips

What is Data Loss Prevention?

• Data loss prevention (DLP) is a strategy for making sure that end users do not have access or send sensitive or critical information.

• DLP software products use business rules to classify and protect confidential and critical information so that unauthorized end users cannot accidentally or maliciously share data whose disclosure could put the organization at risk.

What is DLP?

• Search for sensitive content in your existing eDiscovery Center, keeping content in place and enabling you to search in real time.

• Credit Card Numbers, SSN, Bank Account Numbers, Passports (51 total information types!)

• You can search across SharePoint 2016, One Drive for Business and SharePoint Online! (Kind Off)

Find that information before it’s too late!

Identify

How does SharePoint find this information?

Content Sources

CrawlerContent

ProcessingQueryIndex

Unified Policy Processing Tasks

Policy Definitions

• 16 digits• dddd-dddd-dddd-dddd• dddddddddddddddd

• Expiration Date

• Card Verification• CVN, CVV2, CID

• Visa, MasterCard, Amex

• Card Holder

A DLP policy is 85% confident that it's detected this type of sensitive information if, within a proximity of 300 characters:

• The function Func_credit_card finds content that matches the pattern.• One of the following is true:

• A keyword from Keyword_cc_verification is found.• A keyword from Keyword_cc_name is found.• The function Func_expiration_date finds a date in the right date format.

A DLP policy is 65% confident that it's detected this type of sensitive information if, within a proximity of 300 characters:• The function Func_credit_card finds content that matches the pattern.

https://technet.microsoft.com/en-us/library/jj150541(v=exchg.160).aspx

Setup

Requirements to make it work!

Monitor

Excel Reports

Block

Minimize the Damage

Select the template of the information you want to find!

Description of the template

Select the number of occurrences before an alert is triggered. Also select who the alert gets sent to!

Do you want to notify the user that he did something wrong?Do you want to block that document?

End User Education

Limitations

Perfection doesn't exist!

•

•

•

•

•

Q&A

@vladcatrinescu

http://ca.linkedin.com/in/vladcatrinescu

https://absolute-sharepoint.com

http://spvlad.com/VladAuthor