Data Leak Prevention

This node lets you view information about the status of data protection on SharePoint sites and incident statistics.

Kaspersky Security uses the DLP Module status section to notify the user about the following events in the operation of the DLP Module:

About changes in the status of the DLP Module (Enabled, Disabled, or Enabled, running with errors)
About DLP Module licensing problems
About application errors (such as no connection to the SQL database or a SharePoint server that is unavailable)

This section lets you specify the email addresses of Security Officers. The application automatically sends event notifications to these addresses.

Configure notifications

The Opened incidents section lets you view current data leak statistics.

The following information about open incidents is displayed in the upper part of the section:

Violators. The number of unique users that violated policies.
New incidents. The number of incidents with New status.
Incidents under processing. The number of incidents with In progress status.
Opened high-priority incidents. The number of opened incidents (in percentage points) to which a high priority of data leak danger has been assigned.
Top 3 violators. The rating of users with the highest number of policy violations.

A chart of statistics on opened incidents as associated categories is displayed in the lower part of the section. You can modify the list of categories for which statistics are displayed.

Select categories

The Statistics section displays the following information about the operation of the DLP Module:

Files transferred. The number of files that users have uploaded to SharePoint.
Files scanned. The number of files that caused policy violations while being uploaded to SharePoint.
Incidents created. The number of incidents generated as a result of policy violations.
Files not scanned due to timeouts. The number of files that could not be scanned due to a SharePoint server connection time-out.
Files not scanned due to errors. The number of files that could not be scanned due to application errors.
You can change the reporting period for which statistics are displayed by clicking the 30 days and 7 days links.

The Closed incidents section displays a chart with statistics on closed incidents. This chart makes it possible to analyze the reasons why incidents belonging to different categories have been closed. You can modify the list of categories for which statistics are displayed.

Select categories