Create/Edit DLP Incident Remediation workflow template

Use the dialog to create a template of type Data Loss Prevention (DLP) Incident Remediation.

Table: DLP Incident Remediation template options

Option

Description

Template Type

Describes the type of workflow that can be created using the template.

Name

Enter a logical name for the template.

Description

Enter a short description for the template. The description can state the kind of DLP Incident Remediation workflow for which the template should be used.

Welcome Text

Select the check box to display a message to the portal users. Use the variables from the adjoining drop-down to create the message.

This text appears in a pop-up when the custodian first logs on to the Self-Service Portal. You can include the specific instructions for remediation in this field.

Portal Options

Click the Refresh icon to fetch the latest rules from DLP.

DLP Smart Response - Data Insight fetches the Smart Response rules that are configured in DLP using the DLP Response Rule Listing Service API. The Response Rule Listing Service provides the available response rules for a given incident. These rules define the actions that portal users are allowed to take on the paths that violate DLP polices, such as delete or quarantine.

Data Insight fetches the Response Rules applicable to CIFS and SharePoint paths, as well as the rules that apply to cloud content sources, such as Box.

Select the following:

  • From the drop-down, select the configured the applicable Smart Response Rule.

  • Select the check boxes for the file attributes that you want to display on the Self-Service Portal. The displayed attributes include information about the suggested owner (owner inferred based on the global Workspace Data Owner Policy) and the DLP policy name.

    The file owner information may not reflect the responsible party. The responsible party or data owner can be a line manager in the business unit, the head of a department, or an information security officer. Data Insight provides information to tie the most active user of a file to a manager or responsible party for remediation steps.

  • Select Allow delegation, if you want to let the custodians delegate the workflow to other users being monitored by Data Insight.

Email Reminder

Select the frequency, day, time for sending email reminders to the custodians.

Customize Email

Do the following:

  1. Click to customize the email that is sent to custodians when a workflow is submitted for remediation.

  2. Insert the variable in the To, From, CC, and Subject fields.

  3. Add the ${workflow.link} variable in the body of the email to include the link to the portal in the request.

Note that the SMTP server settings must be configured to enable Data Insight to send an email.

More Information

About workflow templates

Managing workflow templates