SOLVED

DPL incident mgmt

%3CLINGO-SUB%20id%3D%22lingo-sub-226145%22%20slang%3D%22en-US%22%3EDPL%20incident%20mgmt%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-226145%22%20slang%3D%22en-US%22%3E%3CP%3ERegarding%20Data%20Loss%20Prevention%20(DLP)%20in%20Office%20365%2C%20what%20are%20the%20ramifications%26nbsp%3Bof%20the%20incident%20status%20options%20(Active%2C%20Investigating%2C%20Resolved%2C%20Dismissed)%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EInsight%20Dashboard%20(%3CA%20href%3D%22https%3A%2F%2Fprotection.office.com%2F%23%2Finsightdashboard%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fprotection.office.com%2F%23%2Finsightdashboard%3C%2FA%3E)%20%26gt%3B%20Unusual%20volume%20of%20DLP%20policy%20matches%20detected.%20%26gt%3B%20Edit%20status%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20reference%20material%20doesn't%20seem%20to%20go%20that%20far%20yet.%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Foverview-of-data-loss-prevention-policies-1966b2a7-d1e2-4d92-ab61-42efbb137f5e%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.office.com%2Fen-us%2Farticle%2Foverview-of-data-loss-prevention-policies-1966b2a7-d1e2-4d92-ab61-42efbb137f5e%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-226145%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EDLP%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-227342%22%20slang%3D%22en-US%22%3ERe%3A%20DPL%20incident%20mgmt%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-227342%22%20slang%3D%22en-US%22%3EThat%20is%20simply%20for%20your%20own%20organizations%20internal%20tracking%20status.%20It's%20designed%20to%20help%20you%20track%20the%20status%20of%20your%20%22investigation%22%20of%20the%20incident(s).%3C%2FLINGO-BODY%3E
Highlighted
Deleted
Not applicable

Regarding Data Loss Prevention (DLP) in Office 365, what are the ramifications of the incident status options (Active, Investigating, Resolved, Dismissed)?

 

Insight Dashboard (https://protection.office.com/#/insightdashboard) > Unusual volume of DLP policy matches detected. > Edit status

 

The reference material doesn't seem to go that far yet. 

https://support.office.com/en-us/article/overview-of-data-loss-prevention-policies-1966b2a7-d1e2-4d9...

 

1 Reply
Highlighted
Solution
That is simply for your own organizations internal tracking status. It's designed to help you track the status of your "investigation" of the incident(s).