Data Loss Prevention Comes to Northeastern

Data Loss Prevention (DLP) is a program designed to help those who work with sensitive information protect it when storing or sharing Microsoft365 documents.  There are two components to DLP.  First, when a user attempts to save or share a document, Microsoft’s Purview software will scan it for potentially sensitive information.  For example, a number that appears in the xxx-xx-xxxx format will be flagged as Personally Identifiable Information and the document will be labeled as 4 Locks (Critical Risk).  This will affect how the document can be shared and where it can be stored.  Users can change the risk category of the document but will be required to provide an explanation for making the change. 

In a later release of the DLP solution, users will also be able to select a risk level when creating, storing, or sharing a document.  In addition to the standard risk categories ( 4 Locks—Critical Risk, 3 Locks—High Risk, 2 Locks—Limited Risk, and 1 Lock—No Risk), users categorizing a document as 3 or 4 Locks can select a sub-label (External Access Allowed, Northeastern Access Only, and FacStaff Access Only) that determines the group with which the document can be shared.  

After extensive testing by ITS, DLP will be rolled out to Faculty and Staff during the week of April 28th.  Look for KnowledgeBase articles published by the Office of Information Security for Frequently Asked Questions and other updates on DLP.