{"id":3625,"date":"2024-04-16T13:46:59","date_gmt":"2024-04-16T13:46:59","guid":{"rendered":"https:\/\/poiseddevelopers.com\/reality-tech\/?p=3625"},"modified":"2024-05-10T13:36:29","modified_gmt":"2024-05-10T13:36:29","slug":"the-basics-of-data-loss-prevention","status":"publish","type":"post","link":"https:\/\/poiseddevelopers.com\/reality-tech\/the-basics-of-data-loss-prevention\/","title":{"rendered":"The Basics of Data Loss Prevention"},"content":{"rendered":"
\n
\n
\n
\n
\n
\n
\n
\n
\n

Microsoft Purview Data Loss Prevention (DLP) helps prevent that by keeping an eye on your organization\u2019s data. It can identify sensitive information like credit card numbers or patient records, and then take action to protect it. DLP policies in Microsoft Purview are a powerful tool for organizations looking to enhance their data security posture and protect sensitive information.

Microsoft offers a range of pre-defined DLP templates tailored to specific countries and regions, such as the US Patriot Act, UK Data Protection Act, or GDPR. These templates come with pre-configured sensitive information types and rules containing conditions and actions. You simply need to assign the template to one or more Microsoft 365 locations. In my experience implementing DLP for organizations, custom policies are frequently utilized.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

\n
\n
\n
\n
\n
\n
\n
\n
\n

Data Loss Prevention Apply On:<\/strong><\/p>\n

    \n
  • Microsoft 365 services:<\/strong>\u00a0Like Teams, Exchange Online, SharePoint Online, and OneDrive for Business accounts.<\/li>\n
  • Office applications:<\/strong>\u00a0such as Word, Excel, and PowerPoint.<\/li>\n
  • Endpoints:<\/strong>\u00a0Devices like Windows 10, Windows 11, and macOS computers.<\/li>\n
  • Power BI:<\/strong>\u00a0Detecting sensitive data uploaded to Power BI datasets.<\/li>\n
  • Monitoring on-premises file shares and SharePoint.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
    \n
    \n
    \n
    \n
    \n
    \n
    \n
    \n
    \n

    Benefits of using DLP policies in Microsoft Purview:<\/strong><\/p>\n

      \n
    • Minimize data breaches:<\/strong>\u00a0DLP helps prevent sensitive data from being accidentally or intentionally shared with unauthorized users.<\/li>\n
    • Meet compliance requirements:<\/strong>\u00a0DLP policies can help your organization comply with data privacy regulations like GDPR or HIPAA.<\/li>\n
    • Reduce risk of insider threats:\u00a0<\/strong>DLP can help detect and prevent malicious attempts to steal or leak sensitive data.<\/li>\n
    • Increase data security awareness:<\/strong>\u00a0DLP policies can educate users about the importance of handling sensitive data responsibly.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
      \n
      \n
      \n
      \n
      \n
      \n
      \n
      \n
      \n

      Here\u2019s a breakdown of how DLP policies work in Microsoft Purview:<\/strong><\/p>\n

        \n
      • Identify Sensitive Data: You define what constitutes sensitive data in your organization. This could include things like social security numbers, credit card information, passport numbers, or any sensitive information data classified as \u201cConfidential\u201d based on your internal policies.<\/li>\n
      • Set DLP Rules: You create rules that specify what actions to take when sensitive data is detected. These actions can include:\n
          \n
        • Blocking the transfer of the data (e.g., preventing external sharing)<\/li>\n
        • Encrypting the data<\/li>\n
        • Sending alerts to administrators or users<\/li>\n
        • Displaying policy tips to users informing them about the sensitivity of the data<\/li>\n<\/ul>\n<\/li>\n
        • Apply DLP Rules: You define where these DLP rules will be enforced. This could include locations like SharePoint sites, OneDrive accounts, emails, or even on user endpoints (laptops).<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
          \n
          \n
          \n
          \n
          \n
          \n
          \n
          \n
          \n

          Features of a DLP Policy:<\/strong><\/p>\n

          1.<\/strong>\u00a0Build Your DLP Policy with templates or custom policies:<\/strong><\/p>\n

          In the policy template, there are different templates available to protect different types of information.<\/p>\n

          \"image\"<\/p>\n

          \n
          \n
          \n
          \n
          \n
          \n
          \n
          \n
          \n

          Financial:<\/strong>\u00a0Secure financial information by preventing users from sharing details like credit card numbers, bank account numbers, debit card numbers, social security numbers, and more.
          Medical and Health:\u00a0<\/strong>Stop users from sharing confidential and important information.
          Privacy:\u00a0<\/strong>Safeguard information such as license numbers, passport numbers, tax file numbers, national IDs, insurance numbers, and other sensitive details.
          Custom:\u00a0<\/strong>You can create a custom policy from scratch in which you choose the type of content to protect and how you want to protect it.
          For more details visit the (https:\/\/learn.microsoft.com\/en-us\/purview\/dlp-policy-templates-include?redirectSourcePath=%252farticle%252fc2e588d3-8f4f-4937-a286-8c399f28953a)<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

          \n
          \n
          \n
          \n
          \n
          \n
          \n
          \n
          \n

          2. Define Policy Scope:
          <\/strong>A Data Loss Prevention (DLP) policy can identify and safeguard items containing confidential data across various locations. When establishing such a policy, you have the option to designate the specific location(s) where you wish to implement your conditions.<\/p>\n

          \"image\"<\/p>\n

          3. Define DLP Protection settings
          <\/strong>Data loss prevention (DLP) rules act like shields for your sensitive information. You choose what kind of information needs protection by creating these rules.
          First, you define the conditions that trigger the rule. This could be finding a Sensitive information in a document.<\/p>\n

          \"image\"<\/p>\n

          Then, you set the instructions actions that follow. If the rule detects sensitive information, users won\u2019t be able to share the document with anyone outside the company.<\/p>\n

          \"image\"<\/p>\n

          4. User Notifications
          <\/strong>Sharing sensitive information with unauthorized individuals can be a mistake. To help everyone stay informed and protect your organization\u2019s data, you can enable user notifications. When someone tries to share sensitive information externally, they\u2019ll receive a friendly reminder. This includes an email and a clear policy tip explaining why sharing isn\u2019t allowed. You can also customize these notifications! Choose who gets notified (admins or specific teams?), craft a clear email subject and message, and tailor the policy tip text for maximum impact.<\/p>\n

          \"image\"<\/p>\n

          5. User Overrides
          <\/strong>DLP policies offer flexibility In some cases, users might need to share information that triggers a DLP rule. To handle these situations, you can allow users to override the policy.
          There are two options for overrides:
          Quick Share:<\/strong>\u00a0Users can proceed without providing a reason.
          Explain It Out:<\/strong>\u00a0Users can provide a business justification for sharing the information.<\/p>\n

          \"image\"<\/p>\n

          6. Activity Explorer (Reporting Features)<\/strong><\/p>\n

          The Activity Explorer tab within DLP lets you monitor all user actions related to sensitive data. You can also filter this activity based on specific criteria, such as policies or sensitivity labels, to focus on what matters most. (Shown below)<\/p>\n

          \"image\"<\/p>\n

          View Alert Details by Selecting an alert from the \u201cAlert\u201d tab.<\/p>\n<\/div>\n

          \"image\"<\/p>\n

          Click \u201cView Details\u201d to get more information about the alert.<\/p>\n

          \"image\"<\/p>\n

          This section provides an overview of the triggered alert. You can even assign the alert to a specific user and add comments for further clarification.<\/p>\n

          \"img\"<\/p>\n

          Click \u201cEvents\u201d tab to get a overview of actions taken on the content that triggered the alert.<\/p>\n

          \"image\"<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"

          Microsoft Purview Data Loss Prevention (DLP) helps prevent that by keeping an eye on your organization\u2019s data. It can identify sensitive information like credit card numbers or patient records, and then take action to protect it. DLP policies in Microsoft Purview are a powerful tool for organizations looking to enhance their data security posture and […]<\/p>\n","protected":false},"author":4,"featured_media":3626,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[43],"tags":[],"class_list":["post-3625","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft"],"acf":[],"_links":{"self":[{"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/posts\/3625","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/comments?post=3625"}],"version-history":[{"count":2,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/posts\/3625\/revisions"}],"predecessor-version":[{"id":3640,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/posts\/3625\/revisions\/3640"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/media\/3626"}],"wp:attachment":[{"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/media?parent=3625"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/categories?post=3625"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/poiseddevelopers.com\/reality-tech\/wp-json\/wp\/v2\/tags?post=3625"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}