Data Loss Prevention in SharePoint 2016

• Protecting sensitive information• Data Loss Prevention (DLP)• DLP in SharePoint 2016

Agenda

What to protect?• Financial data• Personally identifiable information• Credit card numbers• Social security numbers• National ID numbers

Protecting sensitive informationSensitive information is data that must be protected from unauthorized access to safeguard the privacy or security of an individual or organization

Why do we need to protect?• Business standards• Industry regulations

Protecting sensitive information

Strategy for making sure that end users do not access sensitive or critical information• Within the organization• Outside the organization

Data Loss Prevention

Set of industry templates to classify and discover sensitive information within stored content

• Compliance features in SharePoint• eDiscovery and Holds• Information Rights Management (IRM)• Record center and In-Place holds• Auditing• Retention and deletion policies

DLP in SharePoint 2016

• NEW Compliance features in SharePoint• Data Loss Prevention• Compliance Policy Center site collection

DLP in SharePoint 2016

• DLP ProcessDLP in SharePoint 2016

Specify Template

Discover Monitor

Monitor and report

information

Identify matching

information

Specify appropriate

template and target site collections

Protect

Protect information

where end users are prohibited to

access

Educate

Notify and alert users

• Specify Template• Sensitive information types

DLP in SharePoint 2016

e.g: Credit Card• Credit card number• cvn,cid,cvc2,cvv2 number• Expiry date

Reference : https://technet.microsoft.com/library/jj150541(v=exchg.150).aspx#Anchor_0

If above content is within 300 characters DLP policy is 85% confident that it’ll match credit card

• Discover• DLP uses SharePoint Search to discover matching content

DLP in SharePoint 2016

Crawl Content Processing

Crawl

IndexContent Sources

Policy Processing

Policy Creation

Policy Assignment

• Monitor• eDiscovery center site collection to search and identify

matching content according to template• Create DLP queries

DLP in SharePoint 2016

• Monitor• Do not block access• Export results and Share

DLP in SharePoint 2016

• MonitorDLP in SharePoint 2016

• Protect• Using Compliance Policy Center• Specify DLP policies to protect sensitive content

DLP in SharePoint 2016

• Protect• Create policies

DLP in SharePoint 2016

• Educate• Policy tips• Email messages to end user/ compliance team

DLP in SharePoint 2016

• EducateDLP in SharePoint 2016

Questions?

Thank You!http://dinushaonline.blogspot.com@kumarasiri048