Forum Discussion
Solved
Overrides and false positives in DLP policy end user experience
Ok so a user gets a policy applied to his/her document for let's say PCI compliance. On the policy tip we give the user the option to override with a business justification or to report as a false p...
- No I'm not able to; I don't think you can.
If someone does put down it's a false positive and it's not, I usually go and speak to the individual or email them. There's no way that I know of to reclassify it.
I also have alerts turned on to me when people do it so when I get the email, it shows the override reason and false positive answers. If anyone puts anything that we don't agree with as being an acceptable answer, then we raise this with them/their line manager.
Should be in the DLP reports as detailed here: https://support.office.com/en-us/article/view-the-reports-for-data-loss-prevention-41eb4324-c513-4fa5-91c8-8fbd8aaba83b
Are you saying you don't see the events, or the DLP reports altogether?
Found it ( I think) - im missing DLP Insights. I have the DLP report but I'm not seeing the warning triangles / insight icon.
The insights are fairly new addition, I don't have them in my tenant either.
VasilMichevdo you know if there was an announcement about this new feature? I don't remember seeing one.
