Often, companies pay more attention to external threats: spam and phishing attacks, viruses (Trojan software, worms), website spoofing, spyware and adware, and social engineering. But in fact, internal threats can cause a company much more serious damage than intruders from the outside.

In principle, any employee of the company can be a potential insider and put information security at risk. No one is safe from malicious intent or simple mistakes: from the lowest-level employee to top managers.

The operating principle of the DLP system is simple, and consists of analysis of all information: outgoing, incoming, and circulating within the company. Using algorithms, the system identifies the type of information, whether it is critical, and if it goes where it is not supposed to go, the system blocks the transmission and/or notifies the responsible employee about it.

The basis of DLP is a set of rules. They can be of any complexity and relate to various aspects of the work. If someone violates them, the responsible person(s) receive a notification.

IT Partner responsibilities #

1. Together with the client, determine the types of data and resources that need to be included in the policy, as well as the parameters of the policy itself
2. Create the statement of work describing DLP configuration requirements
3. Configure the necessary policies according to the document

Client responsibilities #

1. Coordinate Client resources and staff schedules
2. Provide a dedicated point of contact responsible for working with IT Partner
3. Report requirements for DLP settings and participate in the preparation of the statement of work for DLP settings
4. Coordinate any outside vendor resources and schedules
5. Configure all network equipment, such as load balancers, routers, firewalls, and switches
6. Review and approve engagement deliverables in a timely manner

Additional cost items not provided by the project #

Upon completion of the project, we will provide a project closeout report. This document will indicate the final project status including acceptance criteria matching, outstanding issues, and the final budget. If you require more extensive documentation, it can be provided for an additional fee. 

Prerequisites #

Microsoft 365 subscription with one of the following services:
-Exchange Online
-Sharepoint Online
-Microsoft Teams

Plan #

The plan may vary depending on your needs.

1. Kickoff meeting
2. Preliminary data collection
3. Statement of work preparation and approval
4. Creation of policies and their application
5. Verification and fixing issues

Success Criteria #

1. The statement of work describing the requirements for DLP settings is prepared
2. DLP policies are configured according to the statement of work