USING MULTIPLE LAYERS OF POLICY MANAGEMENT TO MANAGE RISK

摘要

A system for processing a file using a file issue exclusion policy to manage risk is disclosed. If a file does not conform to a set of rules and would otherwise be quarantined, a file issue exclusion policy can be reviewed. If the file issue exclusion policy indicates that the reason why the file did not conform to the set of rules is acceptable, the file can be delivered to the recipient despite not conforming to the set of rules.

主权项

1. A system, comprising:
a receiver to receive a file at a computer system, the file including a content; a file type identifier to identify a purported file type of the file; a scanner to scan the content of the file using a set of rules corresponding to the purported file type, the scanner operative to determine that the file does not conform to the set of rules corresponding to the purported file type for a first reason with an associated first issue ID; a quarantine that can store the file; a file issue exclusion policy specifying an approved file type and a second issue ID; and a transmitter to transmit the file to the recipient instead of storing the file in the quarantine when the approved file type in the file issue exclusion policy matches the purported file type and the second issue ID in the file issue exclusion policy matches the first issue ID.