Endpoint DLP: 6-week Pilot Implementation

Microsoft Endpoint data loss prevention (DLP) extends the capabilities of Microsoft 365 DLP to Windows 10 devices. By implementing Endpoint DLP, organisations benefit from a robust set of controls that extend monitoring and protection to end-user devices. This allows you to detect when sensitive items are used and shared from Windows 10 devices and gives you the visibility and control to enforce protective measures – for example, preventing users from uploading sensitive content to other cloud services. Endpoint DLP is a key stage in an organisation’s compliance and data protection journey and this pilot runs over 6 weeks so that the endpoint DLP policies can be rolled out, monitored, and reviewed to minimise disruption to end users.

Project Phases

Pre-Requisites – We go through the technical pre-requisites, such as Microsoft 365 E5 licences. Discovery workshop – We organise a discovery workshop to gather and discuss project requirements and to review your current setup. This is a collaborative session so that we can better understand your project goals to tailor the activity to your requirements. Brief pilot users – The pilot is run on a selected pilot group to monitor, tune and review the DLP policies, so that these can be closely monitored, controlled and tested before an organisation-wide roll out. Set up pilot – Once the pilot group is established, we set up the DLP policies and enforce these to run for six weeks. Monitor – Actively monitor for any false positives and gather feedback on user experience. Tune – During the six weeks we tune the policies based on feedback and output from the monitoring phase to refine the policies. Review – Pilot review and documentation handover. After the successful pilot, we can work with you to refine and roll-out to the rest of the organisation, or you can use this exercise to understand the process and roll-out internally.