Retention, classification and discovery.
WHAT RETENTION POLICIES DO
Keep content for a defined period, and optionally delete it afterwards.
WHY BOTH MATTER
Keeping what you must, and not keeping what you should not.
WHAT TO ESTABLISH
What obligations apply to your organisation and sector.
WHAT SENSITIVITY LABELS DO
Classify content, and apply protection accordingly.
WHAT PROTECTION CAN INCLUDE
Encryption Restrictions on forwarding or printing Visual markings
WHAT DATA LOSS PREVENTION DOES
Detects sensitive information and prevents it leaving.
WHAT TO CONFIGURE IT FOR
The kinds of information your organisation actually handles.
WHAT TO START WITH
Monitoring, before enforcement.
WHY
Enforcing immediately blocks legitimate work and produces resistance.
WHAT ELECTRONIC DISCOVERY PROVIDES
Searching across content for legal or investigative purposes, with preservation.
WHAT AUDIT LOGGING PROVIDES
A record of administrative and user activity.
WHAT TO VERIFY
That it is enabled, and how long it is retained.
IMPORTANT NOTE
This is general information, not legal advice.
