Wayne State College
Menu
Act Now

Search Technology Procedures

Contact NATS

Can't find what you're looking for in our technology procedures?

Phone: 402-375-7107

Email: servicecenter@wsc.edu

Network & Technology Services

Overview

This document outlines Data Loss Prevention (DLP) procedures for OneDrive for Business and SharePoint.

Who should read this procedure?

Any WSC Faculty, Staff, or Student who is using OneDrive for Business or SharePoint.

Background

To assist employees and students from inappropriately releasing high and medium risk data, Wayne State College has implemented Data Loss Prevention (DLP) tools in OneDrive for Business and SharePoint. High risk data includes SSN, bank account numbers, and credit card numbers. Medium risk data includes NUID. Full definitions for high and medium risk data can be found on the Data Classification Matrix.

User Notification and Action

The following notifications will happen depending on what type of data is stored and how it is shared:

  • High Risk Data in OneDrive for Business or SharePoint The document owner will receive an email notification indicating that high risk data was found and identifying what kind of data it is -- for example, 'SSN'. Document owners have the option to open the document to remove any high risk data elements, or report the detection as a “false positive.” If the document was shared with people outside of Wayne State College, the share permissions are removed for your protection. You can re-share the document that was incorrectly identified to contain high risk data after reporting it as “false positive.” DLP notifications are also presented in the OneDrive for Business web interface with a yield sign in the bottom, right corner of the app icon. To view the DLP notification click on the yield sign.
  • Medium Risk Data in OneDrive for Business or SharePoint If a document containing medium risk data is shared with people outside of Wayne State College, a notification will be sent to the document owner to notify them of this action, and provide a link to the document for review. The sharing of medium risk with people outside of Wayne State College is restricted to people with a legitimate educational interest as defined by NSCS policy 3650.

Last Updated: 2017-11-15 9:46am