DLP Policy Creation Procedure

This admin procedure will provide background information on creating a DLP rule that will apply to email or a data repository like SharePoint.

DLP Policies

Organizations have sensitive information under their control such as financial data, proprietary data, credit card numbers, health records, or social security numbers. To help protect this sensitive data and reduce risk, they need a way to prevent their users from inappropriately sharing it with people who shouldn't have it. This practice is called data loss prevention (DLP), in Purview you implement data loss prevention by defining and applying DLP policies.

Procedure Scope: Administrators

Required Group Membership: Admin.DataLossPrevention

Creating a DLP Policy

1. Navigate to DLP Policies – Purview portal, locate and select Create Policy.
   
2. Select a DLP Template or Custom Policy option under Categories to start the creation process. Select Next to continue.
   
3. Provide the policy with basic information such as name and description, select Next to proceed.
   
4. Choose the scope that this policy will apply to, subsequently you will be able to specify user groups as well as create an exclusion if necessary. Select Next to continue.
   
5. Next you will be able to create or customize policy settings to fit the scope of the content scanning process. Select Next to start outline the rule parameters.
   
6. Select Create Rule, a pop up will be displayed that will allow you to outline the configuration settings of the rule from conditions that need to be met in message context for the rule to apply, to the actions that will be enforced on the message that was flagged. Once the rule is fully configured, select Save to continue.
   
   
7. Once the rule has been created, it will be displayed. Select Next to continue.
   
8. Next you will be able to select deployment of the policy to end users. Select Next to proceed to revisions to finalize the creation process.
   
9. At the revisions page, if you detect a discrepancy select the Edit button below the section that contains the incorrect information. If everything checks out, select Submit to finalize the creation process.
   
10. A final prompt will be displayed detailing that the policy has been created. Select Done to finalize the creation process.
    

Need Assistance?