Region-based pre-filled policy

Note: This option is available only if no DLP policies currently exist in your WorkDrive account.

1. Sign in to your WorkDrive account as an admin or super admin.
   
   
2. Click Admin Console in the bottom-left corner.
   This will open the Admin Console window, and the Dashboard tab will be selected by default.
   
   
3. Select Data Loss Prevention from the left pane.
   
   
4. Click Create a new policy and select your region.
   
   
   
   
5. Once done, click Region-based policy option. This will automatically create a DLP policy based on your selected region.
   
1. Policy Rules: Based on the selected region, all the supported region-specific sensitive content identifiers will be pre-selected.
2. Policy Restriction: External sharing will be enabled in warning mode.
   
   
6. Review and modify the policy as needed. Below are the steps to modify the policy as needed.
   
   
7. Once finalized, click Create Policy to enable it.
   
   

Configure a custom DLP policy

1. Sign in to your WorkDrive account as an admin or super admin.
   
   
2. Click Admin Console in the bottom-left corner.
   This will open the Admin Console window, and the Dashboard tab will be selected by default.
   
   
3. Select Data Loss Prevention from the left pane.
   
   
4. Click + New policy in the top-right corner of your screen and choose the Build a custom policy option if prompted.
   The Create Policy window will appear.
   
   
5. Create a policy by entering a policy name and a short description about the policy.
   
   
6. Under the Policy Scope field, you can define where and when this policy applies:
   
1. Where to apply the policy:
1. Apply to all of WorkDrive
2. Exclude specific folders
3. Selected folders only
   
   
2. When to apply the policy:
1. Policies are automatically enforced during actions such as upload, modify, or create. (This option is currently not customizable)
   
   
7. Configure the appropriate Policy Rule by clicking the + Add Rule button. You can choose from three types of identifiers:
   
   
   
   
1. Single Keyword identifier: This identifier scans the actual content of files for configured keywords or phrases.
   To configure specific keywords or phrases:
1. Select Single Keyword Identifier.
2. Provide a rule name for your reference.
3. Specify the keywords or phrases to scan for.
   Notes:
1. A keyword must have at least three characters.
2. You can use a keyword containing multiple words (E.g., Security Certificates).
3. Select Multi-Keyword Identifier as Identifier Type to add more than one keyword.
4. Select Case sensitive to match the keyword exactly as typed. For example, if you search for "Zylker Tech" with Case sensitive enabled, only "Zylker Tech" will match, not "zylker tech" or "ZYLKER TECH".
5. Click Add to finalize the rule.
   
   
2. Sensitive content identifier: This identifier detects and classifies files based on country-specific personally identifiable information (PII), such as Social Security Numbers (SSN) or National ID numbers.
   
   Note: Currently, the country-specific PII data category is only supported for a few countries (149 PIIs for 47 countries/regions). Please check the list of supported country-specific PII
   
   
1. Select Sensitive Content Identifier.
2. Provide a rule name for your future reference.
   
3. Select a country-specific sensitive content identifier from the available list.
   
   
   
4. Click Add to finalize the rule.
   
   
3. Regex Identifier: This identifier detects and classifies files based on a custom regular expression (regex) pattern. You can use it to identify any text format unique to your organization. For example, sequences that follow a structured number format, such as a credit card number "\b(?:\d[ -]*?){13,16}\b".
   
   Note: Only files containing text that matches the exact regex pattern you provide will be flagged.
   
   
1. Select Regex Identifier.
2. Provide a rule name for your reference.
3. Enter the exact regex pattern you want the system to match (for example, a pattern representing a credit card number).
4. (Optional) Enable Case sensitive if your pattern requires case-specific matching. For example, if you search for "Zylker Tech" with Case sensitive enabled, only "Zylker Tech" will match, not "zylker tech" or "ZYLKER TECH".
5. Click Add to finalize the rule.
   
   
4. File identifier: This identifier examines the file name or extension to identify sensitive files.
   
1. Select File Identifier.
2. Provide a rule name for your reference.
3. Specify the keywords in the filename to scan for.
   Notes:
1. A file name must have at least three characters.
2. You can use a file name containing multiple words.
3. You cannot add multiple keywords separated by commas.
4. Specify the file extensions to match. You can add multiple file extensions, and each one should be separated by a comma.
5. (Optional) Define the file size range in bytes (if required).
6. Click Add to finalize the rule.
   
   
5. Multi-Keyword Identifier: This identifier scans the content of files for multiple configured keywords or phrases. Use this option when you need to monitor several terms together under a single rule.
   Note: All configured keywords operate using an OR condition. If any one of the specified keywords is found in a file, the entire rule is considered a match.
   
   To configure multiple keywords or phrases:
1. Select Multi-Keyword Identifier.
2. Provide a rule name for your reference.
3. Enter the exact keywords or phrases you want to scan for, separated by commas.
   Notes:
1. Separate each keyword with a comma.
2. Each keyword must contain at least three characters.
3. You can include multi-word phrases (for example, Security Certificates).
6. Select Case sensitive to match the keyword exactly as typed. For example, if you search for "Zylker Tech" with Case sensitive enabled, only "Zylker Tech" will match, not "zylker tech" or "ZYLKER TECH".
7. Click Add to finalize the rule.
   
   
8. Assign a classification label to easily identify sensitive files and enforce restrictions such as blocking external sharing, downloading, copying, printing, or displaying warnings when shared externally. You can either select an existing label or create a new one to suit your specific requirements.
   
   
   
   
1. To create a new classification label:
1. Click + Create Classification Label under the Classification Label field to open the Create Classification Label window.
2. Provide a name, description, and select a color for the badge.
3. Select the action(s) you want to restrict:
1. Block external sharing options for files
2. Block download, copy, and print actions for files
3. Display a warning before users share externally
4. Click Create to finalize the new classification label and link it to your policy.
   
   
9. Ensure all required fields are filled and click Create Policy. This will create and apply the new policy to all files that match the configured criteria.
   
   Important: In automatic classification, newly created DLP policies will not be applied to existing files. Only new, modified, or uploaded files after the policy is created will be scanned and enforced if they meet the policy criteria.
   
   

Managing DLP policies

As an admin or super admin of a WorkDrive team, you can manage your team's DLP policies as follows:

Enable or disable a DLP policy

1. Sign in to your WorkDrive account as an admin or super admin.
2. Click Admin Console in the bottom-left corner. This will open the Admin Console window, and the Dashboard tab will be selected by default.
3. Select Data Loss Prevention from the left pane. The Policies tab will open, displaying a list of all your created DLP policies.
4. Locate the policy you wish to modify and use the toggle in the Status column:
1. Toggle ON to enable the policy
2. Toggle OFF to disable the policy

Edit a policy

1. Sign in to your WorkDrive account as an admin or super admin.
2. Click Admin Console in the bottom-left corner. This will open the Admin Console window, and the Dashboard tab will be selected by default.
3. Select Data Loss Prevention from the left pane. This will open the Policy tab by default.
4. Hover over the desired policy and click the More actions (...) icon.
5. Choose Edit and update the policy as needed.
6. Click Save to apply the changes to the current policy.

Delete a policy

1. Sign in to your WorkDrive account as an admin or super admin.
2. Click Admin Console in the bottom-left corner. This will open the Admin Console window, and the Dashboard tab will be selected by default.
3. Select Data Loss Prevention from the left pane. This will open the Policy tab by default.
4. Hover over the desired policy and click the More actions (...) icon.
5. Choose Delete and confirm it in the confirmation dialog box.
   
   Note: You need to confirm your identity by entering your account password in order to delete a DLP policy.