Microsoft 365 DLP: 6-week Pilot Implementation

Data Loss Prevention (DLP) helps organisations prevent unintentional or accidental sensitive information leaks. Microsoft 365 DLP policies detect when content is being shared inappropriately and apply a range of measures in response - ranging from notifying someone to blocking the sharing altogether – to provide an effective safety net. Our Microsoft 365 DLP pilot focuses on the DLP capabilities in Microsoft 365 E3 & E5, which covers sending emails and sharing file-based content from OneDrive, SharePoint, and Teams. This pilot runs over 6 weeks so that the DLP policies can be rolled out, monitored, and refined in test mode for maximum accuracy with minimum false positives so that full enforcement causes minimal disruption.

Project Phases

Pre-Requisites – We go through the technical pre-requisites, such as Microsoft 365 E3 licences. Discovery workshop – We organise a discovery workshop to gather and discuss project requirements and to review your current setup. This is a collaborative session so that we can better understand the project goals to tailor activity to your requirements. DLP policy and report set-up – We document and agree the defined DLP policies to run in test mode and closely monitor over the following six weeks. This involves creating a combination of templated and custom policies and creating reports to assess the impact. We can also enable policy tips to start user awareness training. Monitor – During the six weeks, we actively monitor policy reports and alerts and can gather user feedback on false positives. Refine – We will tune the policies based on feedback and output from the monitoring phase to continually refine the policies. Enforce and Handover – Once refined and approved, we can enforce the policies to apply the actions and rules and begin protecting content. At the end of the project, we will send any project documentation and ensure a project handover.