Data Security Manager Help v7.8

Policies Overview

Once you have installed Websense Data Security software and configured system settings, the next step is to create a policy. Data Loss Prevention (DLP) policies enable you to monitor and control the flow of sensitive data throughout your organization. Depending on your Data Security configuration, you can set up policies to monitor information sent via email and over HTTP and HTTPS channels, and ensure all communications are in line with regulations and compliance laws as required. There are 4 kinds of DLP policies:

• Email policy. You can enable a single email policy that contains all attributes you wish to monitor in inbound and outbound messages. For each attribute (for example, the appearance of a defined key phrase), you define whether to permit or quarantine the message, and whether a notification should be sent.
• Web policy. You can enable a single Web policy that contains all attributes you wish to monitor in HTTP, HTTP, and FTP channels, and also specify Web sites to which sensitive data cannot be sent.
• Mobile policy. You can enable a single mobile DLP policy that contains all attributes you wish to monitor in email being sent to users’ mobile devices. For each attribute (for example, the appearance of a defined key phrase), you define whether to permit or quarantine the message, and whether a notification should be sent.
• Regulatory and compliance policy. Websense Data Security comes with a rich set of predefined policies that cover the data requirements for a variety of regulatory agencies (such as GLBA, HIPAA, and Sarbanes-Oxley) all over the globe. For each policy, there is a template that was composed in accordance to specific regulations or acts. The template is an XML document that defines policy content.
• Custom policy. Once you’ve had an opportunity to run your regulatory policies for a while and monitor the results, you might want to create custom policies.

Click View Complete Document for more.