|Data Loss Prevention (DLP) helps you to determine what actions are allowed or prohibited to stop data loss by guarding against human fallibility, the accidental over-sharing of sensitive information. The risk of unauthorized use and exposure is reduced by protecting your confidential information with DLP.|
To access DLP page, in the upper-right corner, select Admin > repository name > Security Center > Data Loss Prevention.
The page appears with 2 tabs:
- Classifiers – Create Classifications that can be manually applied to your documents. When a classifier is applied, the document is protected according to the policy associated with that classifier.
- Policies – Define and enforce rules on what users can or can’t do with documents. Policies may be linked to a classifier or applied to documents independently.
By default, you have 3 classifiers:
- Highly Confidential – Applied to extremely sensitive data, 1st
- Confidential – Applied to sensitive data, 2nd
- Restricted – Applied to data that should not be accessible to users, 3rd
Select any of the existing classifiers to view full information. You can delete a classifier or edit the name, description and/or priority using it as a template and modifying it to meet your needs.
To create a new classifier:
- Select Create Classifier.
- Enter a classifier name, a description of your DLP classifier (optional), and set a priority.
- Select Create.
Note: Available priorities depend on how many classifiers you have. For example, if you have 4 classifiers, and create a new one, then you can set priority 1 through 5, with 1 being the most important and 5 the least important.
To access Classifier Settings, in the upper-right corner, select the icon.
There are four options, the indentation shows which settings rely on the one above:
- Enable Document Classification (turn on to enable two following options)
- Allow Cabinet Administrators to downgrade classification at profile attribute level
- Allow Users with Admin (“A”) rights to set document-level Classification (turn on to enable the following option)
- Allow Documents to be downgraded from Default(s)
If you disable document classification, the indicator appears.
To learn more about using Classifier Settings, see How to setup DLP?
To create a new policy:
- Select Create Policy.
- Enter a policy name, a description of your DLP policy (optional), and enable or disable it.
- In Rule summary, select one or more rules that will regulate a new policy, and select Add.
- Attach Document - Prohibit attaching the document from NetDocuments to an email
- CollabSpaces - Prohibit adding the document to a CollabSpace
- Copy Document – Prohibit copying the document in NetDocuments
- Deliver Secure Link – Prohibit generating and sending Secure Links to the document
- Download Document - Prohibit using the Download option in NetDocuments
- Echoing - Prohibit echoing the document
- Modify Access - Prohibit user-initiated ACL changes to the document
- Move Document from Container - Prohibit moving the document from the container
Note: A container is a Workspace, folder, subfolder or filter. If this rule is applied to a document, you will not be able to move the document out of its parent container into another container. If you move the parent container, then the document will move with it.
- ndSync - Prohibit syncing the document using ndSync
- Office Online - Prohibit opening the document in Office Online
- Print Document - Prohibit printing the document from NetDocuments
- Select Create.
Select any of the existing policies to view full information. You can delete a policy or edit the name, description, status or selected rules.
To access Policy Settings, in the upper-right corner, select the icon.
You have three dependent options:
- Use Direct Policy Assignment(s) (turn on to enable two following options)
- Enforce Rules from Default Policies
- Allow Users with Admin ("A") rights to a document to add document-level Policy
If you disable document policy, the indicator appears.
To learn more about using Policy Settings, see How to setup DLP?
DLP works with ndOffice 2.7 and higher versions.
ShareSpaces are not supported by DLP so we recommend using CollabSpaces instead.