Re: Data Loss Prevention

[Velislav K Pavlov <VelislavPavlov () FERRIS EDU>]

Thank you for the responses! One of the challenges was whether or not MS provides DLP currently. We can't see DLP 
option inside the compliance manager. It can may very well be tied to the type of license we have applied.

Vel Pavlov | Sr. IT Security Analyst
M.Sc., CISSP, C|EH, C)PTE, Security+,
CNA, MPCS, ITIL, A+

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Pfaff, 
Anthony W
Sent: Friday, December 18, 2015 10:46 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Data Loss Prevention

Hi all,

Microsoft includes DLP as part of the Rights Management Suite you get when you license someone with an "Enterprise" 
O365 license.  It used to be you had to pay for these particular types of licenses, and our institution did pay for a 
handful in cases where litigation holds were needed, but Microsoft now appears to be providing these at no cost to 
higher ed.  Testing O365's DLP is still on our to-do list however, so I don't have much to say on the tool itself.

Thanks,

Anthony Pfaff | Lead IdM Software Engineer
Middleware and Identity Management
303-315-0057 | anthony.pfaff () ucdenver edu<mailto:anthony.pfaff () ucdenver edu>
[oit_h_clr]

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Jeff Choo
Sent: Friday, December 18, 2015 7:56 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Data Loss Prevention

Hi Vel,

We are currently testing O365 DLP by setup a test policy to capture any potential positives but haven't enforced the 
policy in O365 Exchange.  My understanding is DLP feature is free with your faculty/staff O365 licenses but I don't 
know and haven't heard anything if this will change in the long run.

I have talked with several 3rd party vendors about integration with O365 - all of them said they will launch new 
integrations with O365 in this area sometime next year when Microsoft officially published their API to developers 
(right now they said it's in beta).

I am not familiar with Digital Guardian.  We are currently looking into Varonis for enterprise DLP.  However Varonis 
doesn't do endpoints.

Hope this helps.  Happy Holidays.


Jeff Choo - Director, Information Technology | Information Security Officer
William James College
T - 617-327-6777 Ext. 1202
F - 617-477-2002
W - www.williamjames.edu<http://www.williamjames.edu>
Jeff_Choo () williamjames edu<mailto:Jeff_Choo () williamjames edu>




From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Velislav 
K Pavlov
Sent: Thursday, December 17, 2015 1:40 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Data Loss Prevention

Good afternoon,

Anyone using Office365 DLP for email, sharepoint, OneDrive? We are getting mixed messages about the availability of 
this service for education. What about Digital Guardian for enterprise and endpoint DLP and advanced threat protection?

Vel Pavlov | Sr. IT Security Analyst
M.Sc., CISSP, C|EH, C)PTE, Security+,
CNA, MPCS, ITIL, A+