Forum Discussion

sumo83's avatar
sumo83
Iron Contributor
May 07, 2024

Best practice basics for Labels and DLPs to protect company data

Hello experts,   I've been doing some research and testing recently on Information protection and DLP as I would like to deploy it in our organization soon. I am very new into this and found lots o...
data loss prevention
sumo83's avatar
sumo83
Iron Contributor
May 17, 2024

Hi JesperRaarup 

Not sure how I missed your post 🙂 ... Thanks for your input.... All info will help me to point me the right direction.

Just one thing about the Point 1 - Enabling "Access Control" and encryption - As I can read on MS official site, it should indeed enable encryption if "Access Control" is used and "Configure access control setting" is selected - see the picture below. So I understand it that - if I use/enable this option - for example for "Confidential" label that would restrict access for groups that I select, it will also automatically encrypt the content (document, email, etc).. 

 

So as I understand - if I want to restrict access using within the Label configuration (Access control), it will restrict it to the users/groups etc that I specify, but will also encrypt it automatically?

 

 

sumo83's avatar
sumo83
Iron Contributor
May 17, 2024
would like to add one more thing - I have tried to configure a DLP that will check for CONFIDENTIAL label as condition & "is sent outside organization" ... no action configured.... and enabled user notification. I would expect that when adding an external email address to "To:" in email, the message will pop up before it is sent.... However, nothing is happening. Is that maybe an E5 license requirement?

Also, is there a way to create a user tip massage that would require to click kind of "CONFIRM" button before an email is sent? I'm looking to have a label that can be sent externally, but users must confirm it so that they are 100% aware they are sending these sensitive data outside the company....

PS: I have M365 E3 + M365 E5 Security addon
I guess I saw it in the past... but can't find any good info now....
  • terryhugill's avatar
    terryhugill
    Brass Contributor
    May 19, 2024

    sumo83 it sounds like you need the option captured in the image. Make sure you check this out to understand the requirements. https://go.microsoft.com/fwlink/?linkid=2238924. 

    • sumo83's avatar
      sumo83
      Iron Contributor
      May 19, 2024
      thanks for pointing me into this. One of the very 1st - "Oversharing popup is an E5 feature.".... So will not work for me as I'm E3 only for now....
      • terryhugill's avatar
        terryhugill
        Brass Contributor
        May 19, 2024
        Fair enough. You can use tooltips then, just nothing to confirm.

Resources