ACCESS BLOCKING FOR DATA LOSS PREVENTION IN COLLABORATIVE ENVIRONMENTS

摘要

Data loss prevention (DLP) systems may be implemented in conjunction with collaborative services that may be integrated with or work in coordination with productivity services. Administrators may be enabled to configure DLP policies in the collaborative service to mitigate their organization's information disclosure risks, along with the detection and remediation of sensitive information. Access blocking may be one feature of the DLP system, where provision of access blocking may include determining if a detected action associated with content processed by the collaborative service matches access blocking criteria defined by DLP policy rules. In response to the determination that the action matches at least one access blocking criterion defined by the DLP policy rules, a block access tag associated with the content may be activated, previously defined permissions associated with the content may be ignored or altered, and access to the content may be restricted to a number of predefined users.

主权项

1. A computing device to provide access blocking as part of data loss prevention (DLP) within a collaborative service environment, the computing device comprising:
a memory configured to store instructions; a processor coupled to the memory; wherein the processor is configured to perform actions including:
detect an action associated with content processed by a collaborative service;determine if the action matches access blocking criteria defined by one or more DLP policy rules; andin response to a determination that the action matches at least one access blocking criterion defined by the one or more DLP policy rules, activate a block access tag associated with the content, ignore previously defined permissions associated with the content, and restrict access to the content to a number of predefined users.