The challenge

Sensitive customer and financial data could leave the organisation through email, Teams chats, cloud sharing or USB with no visibility or control.

What I delivered

• Mapped sensitive information types and business processes before writing any policy
• Built DLP policies across Exchange, SharePoint, OneDrive, Teams and Endpoint DLP
• Ran every policy in simulation mode first and tuned rules to reduce false positives
• Introduced policy tips and user overrides with justification to educate rather than block
• Set up alerting and reporting for the security team

Outcome

Data protection enforced with minimal disruption to the business, and clear visibility of attempted data exfiltration.

Technologies

Microsoft Purview DLP · Endpoint DLP · Exchange Online · Teams · Activity Explorer

Planning something similar? Book a discovery call →