Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Viewing Incidents and Reports > Data Loss Prevention reports > User risk summary (data theft risk indicators)
User risk summary (data theft risk indicators)
This report shows which users generated the most incidents across all active Data Theft Risk Indicator policies, including suspicious user activity, indicators of compromise, and employee discontent.
Suspicious User Activity policies include:
*
Data Sent During Unusual Hours
*
Deep Web URLs
*
Email to Competitors
*
Malicious Concealment
*
Password Dissemination
*
Suspected Mail to Self
*
Unknown File Formats Over Time
*
User Traffic Over Time
Indicators of Compromise policies include:
*
Suspected Malware Communication
*
Suspected Malicious Dissemination
*
Encrypted Files
*
Password Files
*
PKCS #12 Files
Employee Discontent policies include:
*
Disgruntled Employee
*
Resume for HR
*
Resume for HR Israel
*
Resume for HR Cyrillic
*
Self CV Distribution
Users who violate these policies could pose a security risk to your organization.
This report contains the user's full name, login name, department, manager, title, and business unit according to details imported from the user directory.
It also shows incident counts by severity.
To view the report:
1.
Select Main > Reporting > Data Loss Prevention.
2.
From the report catalog, expand the Risk Assessment folder and select User Risk Summary (Data Theft Risk Indicators).
3.
Click Run to generate the report.
For details about the policies that this report includes, see Data Loss Prevention policies in the Forcepoint Technical Library.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Viewing Incidents and Reports > Data Loss Prevention reports > User risk summary (data theft risk indicators)
Copyright 2016 Forcepoint LLC. All rights reserved.