Forum Discussion
Best practice basics for Labels and DLPs to protect company data
Hello experts, I've been doing some research and testing recently on Information protection and DLP as I would like to deploy it in our organization soon. I am very new into this and found lots o...
would like to add one more thing - I have tried to configure a DLP that will check for CONFIDENTIAL label as condition & "is sent outside organization" ... no action configured.... and enabled user notification. I would expect that when adding an external email address to "To:" in email, the message will pop up before it is sent.... However, nothing is happening. Is that maybe an E5 license requirement?
Also, is there a way to create a user tip massage that would require to click kind of "CONFIRM" button before an email is sent? I'm looking to have a label that can be sent externally, but users must confirm it so that they are 100% aware they are sending these sensitive data outside the company....
PS: I have M365 E3 + M365 E5 Security addon
I guess I saw it in the past... but can't find any good info now....
Also, is there a way to create a user tip massage that would require to click kind of "CONFIRM" button before an email is sent? I'm looking to have a label that can be sent externally, but users must confirm it so that they are 100% aware they are sending these sensitive data outside the company....
PS: I have M365 E3 + M365 E5 Security addon
I guess I saw it in the past... but can't find any good info now....
sumo83 it sounds like you need the option captured in the image. Make sure you check this out to understand the requirements. https://go.microsoft.com/fwlink/?linkid=2238924.
- thanks for pointing me into this. One of the very 1st - "Oversharing popup is an E5 feature.".... So will not work for me as I'm E3 only for now....
- Fair enough. You can use tooltips then, just nothing to confirm.
- I have one more question - I've selected a group of users that will be testing the configured labels, and I have noticed that the labels are not visible at all to other users.
That means, a label is applied by a user in testing group (lets say INTERNAL label) and another user that is not part of the testing group does not have an idea about the label applied. When he sents a document labelled as "INTERNAL", it is blocked and will receive a notification email (this is done through DLP).... Wondering, is this a standard behaviour? OR do I miss something here? .... If it is standard behaviour, than it looks like I can't just test labels with group of users without informing all about the ongoing testing... I expected that users that are not part of testing group will at least see the label applied to documents/emails.... which they are not....