DLP overrides, reports and justification
Shim Kwan
281
Reputation points
Hi,
So with DLP comes this ability to "Report an issue" and "Override" as per screenshot.
When we click the "Report an issue" option, it simply comes back with a "Thanks, your response was recorded".
- Does this actually generate an email to someone? where do you configure that?
- or does this simply land up in the 'DLP false positives and overrides' Report in the Compliance Portal (where the most recent data can take up to 24 hours to appear! Wow, that's a long time to wait when someone reports an issue)
- Is there a way to create an alert when this event happens?
When we click the 'Override' option, it allows me to write a justification for the Override.
- Is the justification in the 'DLP false positives and overrides' Report in the Compliance Portal?
- it seems intermittent though - sometimes the justification comments appear, sometimes they dont - this may require a support call.
Look forward to hearing from someone around this :)
Thanks,
SK