What are policies?

1. Run risk reports from Microsoft Word, PowerPoint or Excel.
2. Send emails with attachments from Outlook.

Each policy contains a condition that defines what makes a document sensitive, and one or more actions that are applied if the condition is true. The actions available depend on the policy's channel (e.g. email or active content such as Microsoft Office documents). For some policies with the active content channel, such as risk reports, the only action available is an Alert; for policies with the email channel, the actions range from cleaning the document of sensitive information to blocking the attachment from being sent. 

Examples: 

• Policy: Any Word, PowerPoint or Excel document containing white text should notify the user when he or she runs a risk report.
  • Channel: Email
  • Condition: Any file contains white text
  • Action: Alert the user
• Policy: Any Word document that contains the words "confidential" in the header or footer shouldn’t leave the organization.
  • Channel: Active content
  • Condition: The file is a Word document and it contains the word "confidential" in the header or footer
  • Action: For external emails, block the attachment
  • Action: For internal emails, do nothing

When are policies triggered? 

There are several instances where policies are triggered:

• From Microsoft Office:
  1. ​Risk reports
• From Outlook (Only one option from B-E can be selected at a time. Option F can be used on its own or in combination with B, D or E):
  2. ​No dialog
  3. Interactive protect
  4. The protect profiles dialog
  5. The email security dialog
  6. The send and protect button