Data Loss Prevention(DLP) Implementation with Microsoft o365

Data loss prevention (DLP) is a strategy deployed by businesses to ensure that sensitive data remains securely within the corporate network. To comply with business standards and industry regulations, organizations must protect sensitive information and prevent its inappropriate disclosure. Sensitive information can include financial data or personally identifiable information (PII) such as credit card numbers, organisational insights or health records and other data.

Data Loss Prevention facility was included in Microsoft Office 365 for its Teams and Channel Messages, which is available as a standalone option in Microsoft O365 E3 and E5 licenses.

Locations of Protection:  locations such as Exchange Online, SharePoint Online, and OneDrive for Business sites, as well as Microsoft Teams chat and channel.

With DLP facilities being used in office 365 you can perform the following tasks:

To Identify sensitive information across many locations, such as Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams.

Data loss prevention facility helps us to monitor a card number that's stored in any OneDrive for Business site, or to monitor just the One Drive sites of specific people.

Prevent the accidental sharing of sensitive information

DLP enables you to identify any document or email containing records that are shared with people outside the organization, which should not be and then automatically blocks access to that document.

To Monitor and protect sensitive information in the desktop versions of Microsoft apps( word, excel & PowerPoint)

Just like in Exchange Online, SharePoint Online, and OneDrive for Business, these Office desktop programs also include the same capabilities to identify sensitive information and apply DLP policies.

To make users learn how to stay compliant without interrupting their daily workflow

You can educate users about DLP policies and help them remain compliant without interrupting their work. 

For example, if a user tries to share a document containing sensitive information, a DLP policy can do both i.e send them an email notification and show them a policy notification in the context of the document library which allows them to override the policy if they have a business justification. 

To view DLP reports showing content that matches your organization's DLP policies.

To assess how an organization is complying with a DLP policy, you can see how many matches each policy and rule has over time. If a DLP policy allows users to override a policy tip and report a false positive, you can view what users have reported.