This document provides an overview of the steps to configure a Data Loss Prevention (DLP) policy in Office 365: 1. Create a new DLP policy and give it a name and description. 2. Choose the locations to include or exclude such as specific sites or users' OneDrives. 3. Configure the policy settings including whether to block or allow sensitive information types and what actions to take if sensitive info is detected, such as blocking access. Advanced settings allow creating custom rules. 4. Turn the policy on or off immediately and review before closing. Custom expressions can also be created to match specific content formats not covered by the default templates.

1. Office 365 –
Data Loss Prevention (DLP)
Configuration Settings and Options available
https://support.office.com/en-us/article/Overview-of-data-loss-prevention-policies-1966b2a7-d1e2-4d92-
ab61-42efbb137f5e

2. Creating New DLP Policy – Step 1
https://support.office.com/en-us/article/What-the-DLP-policy-
templates-include-c2e588d3-8f4f-4937-a286-
8c399f28953a?ui=en-US&rs=en-US&ad=US

3. Step 2 – Give it a name and description

4. Step 3 – Choose Locations
Upon selecting the second option, you get this 
Here you can select, which sites you want to include, exclude,
Which users’ OneDrive you would like to protect and exclude

5. Step 4 – Policy Settings – Simple & Advanced

6. If Sensitive Info is detected (for instance an
ABA Routing Number)

7. Step 4 – Policy Settings - Advanced
• Advanced allows you to configure Rules

8. Turning On immediately or Off

9. Review and Close

10. Creating Custom Expressions for matching
• In your organization, if you have specific types and formats of content that
does not match the Microsoft provided Sensitive Information Types
templates, then, we can customize and create new templates, based on
Regular Expressions
• For instance, in your company, a patent format can look like: xxxx-xx-xxxx
for instance. You can build a Custom Template for this and thus the
matching content will be blocked out
• References:
• https://technet.microsoft.com/en-us/library/dn781122(v=exchg.150).aspx
• https://blogs.technet.microsoft.com/govcloud/2014/04/15/dlp-creating-custom-
rules/#.VGzf2_9OUiR
• https://justaucguy.wordpress.com/2014/11/21/adventures-in-custom-dlp-rules-part-
one/

11. Thank you…