{"id":3600,"date":"2024-04-19T13:34:30","date_gmt":"2024-04-19T13:34:30","guid":{"rendered":"https:\/\/poiseddevelopers.com\/reality-tech\/?p=3600"},"modified":"2024-05-10T13:36:07","modified_gmt":"2024-05-10T13:36:07","slug":"implementing-dlp-for-secure-data-sharing-in-sharepoint-and-onedrive","status":"publish","type":"post","link":"https:\/\/poiseddevelopers.com\/reality-tech\/implementing-dlp-for-secure-data-sharing-in-sharepoint-and-onedrive\/","title":{"rendered":"Implementing DLP for secure data sharing in SharePoint and OneDrive"},"content":{"rendered":"

With cyber threats evolving constantly, IT teams face immense pressure to safeguard data from malware, phishing, and insider threats. Microsoft\u2019s Purview platform, equipped with a powerful DLP module, provides a proactive defence. Data Loss Prevention (DLP) is a security solution that helps prevent unsafe sharing and inappropriate transfer of sensitive data. DLP is utilized to protect and monitor sensitive data across both on-premises systems and cloud-based locations within our organizations.<\/p>\n

This blog post tackles the critical issue of data security in Microsoft 365. With the ever-growing threat of cyberattacks, protecting sensitive information like social security numbers, credit card data, and \u201cConfidential\u201d documents is paramount.<\/p>\n

Microsoft Purview\u2019s DLP module offers a powerful solution to address this challenge. We\u2019ll delve into its importance and provide a step-by-step guide to configure a DLP policy that meets your specific needs.<\/p>\n

Scenario:<\/strong><\/p>\n

Block all external sharing of SharePoint and OneDrive items containing sensitive information like Social Security Numbers Credit Card Data etc. and Sensitivity labelled item.<\/p>\n

Alerting the Email notification to the security team for every blocked file sharing attempt. User notifications within the interface (if available).
By following our guide, you can gain control over sensitive data sharing and confidently navigate today\u2019s complex cybersecurity landscape.<\/p>\n

Step-by-Step Guide to Creating a DLP Policy in Microsoft Purview<\/strong><\/p>\n

This guide walks you through creating a Data Loss Prevention (DLP) policy in Microsoft Purview to prevent accidental or unauthorized sharing of sensitive data in SharePoint and OneDrive.<\/p>\n

Step 1:\u00a0<\/strong>Access the Compliance Portal:
<\/strong>Go to the Microsoft 365 Admin Center and navigate to \u201cCompliance.\u201dIn the left-hand pane, find \u201cData loss prevention\u201d and then \u201cPolicies.\u201d<\/p>\n

\"img\"<\/p>\n

Step 2:<\/strong>\u00a0Create a New Policy:
<\/strong>Click the \u201cCreate policy\u201d button.<\/p>\n

\"img\"<\/p>\n

Step 3: Define Policy Details:
<\/strong>Under \u201cCategories,\u201d choose \u201cCustom.\u201d Under \u201cRegulations,\u201d select \u201cCustom policy.\u201d<\/p>\n

Click \u201cNext\u201d to proceed. Give a proper policy name and description.<\/p>\n

\"img\"<\/p>\n

\"img\"<\/p>\n

Step 4:<\/strong>\u00a0Assign admin units for users or groups:
<\/strong>Similar to the default template approach, assign admin units from Microsoft Entra ID to limit the policy to specific users or groups.<\/p>\n

\"img\"<\/p>\n

Step 5: Enable DLP for SharePoint and OneDrive:
<\/strong>Turn on DLP for \u201cSharePoint sites\u201d and \u201cOneDrive accounts.\u201d Leave other locations disabled. Click \u201cNext.\u201d<\/p>\n

\"img\"<\/p>\n

Step 6: Create and Define DLP Rule:
<\/strong>In \u201cDefine policy settings,\u201d ensure \u201cCreate or customize advanced DLP rules\u201d is selected. Click \u201cNext\u201d and then \u201cCreate rule.\u201d<\/p>\n

Give your rule a clear name (e.g., \u201cBlock External Sharing of Sensitive Data\u201d). Briefly describe the rule\u2019s purpose.<\/p>\n

\"img\"img\"<\/p>\n

Step 7: Set Rule Trigger Conditions:
<\/strong>Click \u201c+ Add condition\u201d. Choose \u201cContent is shared from Microsoft 365.\u201d Select \u201cwith people outside my organization.\u201d Choose \u201cContent contains\u201d and choose appropriate data types based on your needs. In this case, we\u2019ve selected for sensitive Australian information such as credit card numbers, passport numbers, etc.<\/p>\n

\"img<\/p>\n

Step 8: Identify Sensitive Data:
<\/strong>Click \u201c+ Add condition\u201d and set the logic to identify content matching both conditions (AND). Create a new condition group with OR logic (matches at least one condition. Create a new condition group with AND logic (matches at least one condition). Choose \u201cSensitivity labels\u201d and select the labels based on your needs.<\/p>\n

\"img\"<\/p>\n

Step 9: Block Unauthorized Sharing:
<\/strong>Under \u201cActions,\u201d choose \u201cRestrict access or encrypt the content.\u201d Select \u201cBlock only people outside your organization\u201d to prevent external sharing.<\/p>\n

\"img\"<\/p>\n

Step 10: Notify Users:
<\/strong>Enable \u201cUser notifications\u201d to inform users attempting to share sensitive data through a policy tip in Office 365 services. This will notify the user who shared the data.<\/p>\n

\"img\"<\/p>\n

Step 11: Prevent Sharing Overrides:
<\/strong>Ensure \u201cAllow override from M365 services\u201d is not selected to prevent users from bypassing the policy.<\/p>\n

<\/section>\n
\n
\n
\n
\n
\n
\n
\n
\n

Step 12: Set Up Reporting:
<\/strong>Set \u201cUse this severity level in admin alerts and reports\u201d for informational purposes.<\/p>\n

Enable \u201cSend an alert to admins when a rule match occurs\u201d to notify admins of potential incidents. Optionally, add email addresses for receiving alerts (e.g., security team). Choose to send alerts for every rule match. You can also enable and add the user to receive incident reports via email when a policy match occurs.<\/p>\n

\"img\"<\/p>\n

Choose the necessary details for incident reports, including the matched information, the location of the match, and the activated rules and policies.<\/p>\n

\"img\"<\/p>\n

Review the DLP Rule After Creation:<\/p>\n

\"img\"<\/p>\n

Step 13: Set Policy mode:<\/strong>
The \u201cState\u201d setting determines when your DLP policy becomes active. It\u2019s recommended to keep the policy off while you\u2019re configuring it and getting approvals. Click Next and then Submit. Click Done.<\/p>\n

Here are the available state options:
Run the policy in test mode:<\/strong>\u00a0You\u2019ll be able to review alerts to assess the policy\u2019s impact. Any restrictions you configured won\u2019t be enforced. Users also receive informative messages to raise awareness about the policy.
Turn the policy on immediately:<\/strong>\u00a0This enables full enforcement of the policy. After the policy is created, it\u2019ll take up to an hour before any changes are enforced.
Leave the policy turned off:<\/strong>\u00a0Decide to test or activate the policy later.
Remember: You can change the policy state at any time to adjust your rollout strategy.<\/p>\n

\"img\"<\/p>\n

Step 14: Publish the Policy:
<\/strong>Click \u201cSubmit\u201d to finalize and publish the DLP policy.<\/p>\n

\"img\"<\/p>\n

\"img\"<\/p>\n

Conclusion
<\/strong>By following the outlined steps, organizations can create and implement Data Loss Prevention (DLP) policies in Microsoft SharePoint and OneDrive. These proactive measures significantly enhance data security by preventing accidental or unauthorized sharing of sensitive information. Remember, minimizing the risk of data breaches and ensuring compliance with data privacy regulations require continuous efforts. Regularly monitor policy effectiveness, gather user feedback, and optimize your DLP strategy for a robust security posture in today\u2019s dynamic digital landscape<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

With cyber threats evolving constantly, IT teams face immense pressure to safeguard data from malware, phishing, and insider threats. Microsoft\u2019s Purview platform, equipped with a powerful DLP module, provides a proactive defence. Data Loss Prevention (DLP) is a security solution that helps prevent unsafe sharing and inappropriate transfer of sensitive data. DLP is utilized to […]<\/p>\n","protected":false},"author":4,"featured_media":3601,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[43],"tags":[],"class_list":["post-3600","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft"],"acf":[],"_links":{"self":[{"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/posts\/3600","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/comments?post=3600"}],"version-history":[{"count":5,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/posts\/3600\/revisions"}],"predecessor-version":[{"id":3624,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/posts\/3600\/revisions\/3624"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/media\/3601"}],"wp:attachment":[{"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/media?parent=3600"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/categories?post=3600"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/tags?post=3600"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}