Streamline Your Google Drive Invoice Download for Administration

Google drive invoice download for Administration

[Music] hey guys charlotte here from damson this week one of our technical team mark is going to be walking us through dlp in the admin console now if you want to know more about what dlp is and how it can help protect your organization stay tuned for more today i'm going to talk to you about data loss prevention or dlp for short including what it is how it works and finally a demo of how to set up a dlp rule specifically for google drive in the admin panel what is dlp using data loss prevention you can create and apply rules to control content that users can share in files outside your organization dlp gives you control of what users can share and prevents unintended exposure of a sensitive information such as credit card numbers or passport numbers how does dlp work dlp rules trigger scans of files for sensitive content and prevents users from sharing that content rules determine the nature of dlp incidents and incidents trigger actions such as the blocking of specified content you can allow control sharing for members of a domain organizational unit or group blows a summary of dlp flow you define dlp rules these rows define which content is sensitive and should be protected dlp rules apply to both my drive and share drives dop scans content for dlp rule violations that trigger dlp incidents dlp enforces the rules you defined and violations trigger actions such as alerts super admins and users you specify are alerted of dlp rule violations now i'm going to show you how to create a dlp rule in the google admin panel so if we go to the security section on the left hand menu go to access and data control and then data protection now if we click manage rules then at the top if you click add rule select new rule or new from template i'm going to select new rule for now now we have to give it a name um so the name could be absolutely anything that you want um so specifically i want to block iband numbers so i'm going to put in block users from sharing iband numbers in files that they share externally in the scope section choose to apply to all in the domain or choose to search for and include or exclude organizational units or groups the rule applies to the rule scans files owned by users in the selected organizations or groups if there is a conflict between organizational units and groups in terms of inclusion or exclusion the group takes precedence in this case i just want to select one arg unit and add a service account so i'm going to apply to that and click done and once that's completed i can click on continue to go to the next section so you can apply these rules to either google chat or google drive i'm going to select google drive for now now we're going to add conditions to define data that we want this row to scan for select all content the body drive labels suggested edits our title title is the document title body is the body of the document suggestions content added to the document while in suggestion mode or if it has a specific drive label um all content all of the document content including the document title body and any suggestions now i'm going to select what we're looking for so i'm going to select my our matches predefined data type which the recommended and now we're going to select the data type and in here i'm looking for global international bank account number ibn now the likelihood threshold is going to be low very low medium high or very high so how likely is it that it's an actual international bank account number just like very low it could trigger on something that even looks remotely like an iban so i'm going to select high um so the minimum match count is one so that means it has to match one iban number before it will trigger so now that's it i can click continue now we're going to select the action we're going to take on these files when the rule is triggered block starting sharing prevents sharing of the document warn on external sharing sharing shared document one of the violations to the end user you can disable download printed copy for commenters and viewers prevents downloading printing and copying this user has editor privilege or creator this features dlp information rights management and uses drive sharing settings as policies that users can't download print or copy google drive docs sheets or slides on other platforms so now we come down to alerting so when an event meets this rules criteria it's scope apps conditions the event is reported in the security dashboard and alert center choose the severity level the event is reported under so you can select low medium or high i'm going to select high in this instance then you can select the to alert all super administrators and you can add extra people in here if you want anyone in your domain can receive an alert if they're in this click continue and now you get the chance to review the rule before you set it up before you actually create it you can see what it does you can see what the name is you can see the description you can see with the condition we're looking for all your bands and we can see the action that will occur when the row is triggered so you can block and start sharing with gold drive files that will contain a noise and now it's active as soon as i create click create it's going to create that rule and it will be enforced immediately