SOLVED

DPL incident mgmt

%3CLINGO-SUB%20id%3D%22lingo-sub-226145%22%20slang%3D%22en-US%22%3EDPL%20incident%20mgmt%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-226145%22%20slang%3D%22en-US%22%3E%3CP%3ERegarding%20Data%20Loss%20Prevention%20(DLP)%20in%20Office%20365%2C%20what%20are%20the%20ramifications%26nbsp%3Bof%20the%20incident%20status%20options%20(Active%2C%20Investigating%2C%20Resolved%2C%20Dismissed)%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EInsight%20Dashboard%20(%3CA%20href%3D%22https%3A%2F%2Fprotection.office.com%2F%23%2Finsightdashboard%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fprotection.office.com%2F%23%2Finsightdashboard%3C%2FA%3E)%20%26gt%3B%20Unusual%20volume%20of%20DLP%20policy%20matches%20detected.%20%26gt%3B%20Edit%20status%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20reference%20material%20doesn't%20seem%20to%20go%20that%20far%20yet.%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Foverview-of-data-loss-prevention-policies-1966b2a7-d1e2-4d92-ab61-42efbb137f5e%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Foverview-of-data-loss-prevention-policies-1966b2a7-d1e2-4d92-ab61-42efbb137f5e%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-226145%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDLP%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-227342%22%20slang%3D%22en-US%22%3ERe%3A%20DPL%20incident%20mgmt%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-227342%22%20slang%3D%22en-US%22%3EThat%20is%20simply%20for%20your%20own%20organizations%20internal%20tracking%20status.%20It's%20designed%20to%20help%20you%20track%20the%20status%20of%20your%20%22investigation%22%20of%20the%20incident(s).%3C%2FLINGO-BODY%3E
Highlighted
Deleted
Not applicable

Regarding Data Loss Prevention (DLP) in Office 365, what are the ramifications of the incident status options (Active, Investigating, Resolved, Dismissed)?

 

Insight Dashboard (https://protection.office.com/#/insightdashboard) > Unusual volume of DLP policy matches detected. > Edit status

 

The reference material doesn't seem to go that far yet. 

https://support.office.com/en-us/article/overview-of-data-loss-prevention-policies-1966b2a7-d1e2-4d9...

 

1 Reply
Solution
That is simply for your own organizations internal tracking status. It's designed to help you track the status of your "investigation" of the incident(s).
Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
30 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies