Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Viewing Incidents and Reports > Data Loss Prevention reports > User risk summary (data theft risk indicators)
User risk summary (data theft risk indicators)
Administrator Help | Forcepoint DLP | Version 8.4.x
This report shows which users generated the most incidents across all active Data Theft Risk Indicator policies, including suspicious user activity, indicators of compromise, and employee discontent.
*
Suspicious user activity policies include Data Sent During Unusual Hours, Deep Web URLs, and Email to Competitors, among others.
*
Indicators of compromise policies include Suspected Malware Communication, Suspected Malicious Dissemination, and Password Files, among others.
*
Employee discontent policies include Disgruntled Employee and CV and Resume in English, among others.
For details about the policies used to populate the report, see Data Loss Prevention policies.
Users who violate these policies could pose a security risk to the organization.
This report contains the user's full name, login name, department, manager, title, and business unit, if available.
It also shows incident counts by severity.
To view the report:
1.
Go to the Main > Reporting > Data Loss Prevention > Report Catalog page.
2.
Expand the Risk Assessment folder (if needed), then select User Risk Summary (Data Theft Risk Indicators).
3.
Click Run to generate the report.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Viewing Incidents and Reports > Data Loss Prevention reports > User risk summary (data theft risk indicators)
Copyright 2017 Forcepoint. All rights reserved.