UnixTime

Research Note

DLP Scope and Rule Register

Use this register to define sensitive information in DLP scope and map DLP rules to systems, channels, and devices.

On this page

When to use this

Use this register to define sensitive information in DLP scope and map DLP rules to systems, channels, and devices.

Register

Sensitive data type System/channel/device DLP rule Action Severity Owner Review date
TBD Email/web/endpoint/cloud/removable media TBD Alert/block/quarantine/encrypt High/Medium/Low TBD TBD

Minimum checks

  • DLP scope maps to classified or sensitive information.
  • Rules are linked to approved data flows.
  • Action is defined for each rule.
  • False-positive review is assigned.
  • Rules have review dates.