Kaspersky Security 9.0 for Microsoft Exchange Servers contains a component for preventing data leaks named the DLP Module (Data Leak Prevention). The DLP Module analyzes messages for any confidential data, as well as data with specified parameters, such as bank card details and financial or personal data of company employees. On detecting such information in a message, the DLP Module saves an information security breach record (incident) in the DLP database. This record can further be used for identifying the sender and the recipient of those data. The DLP Module can either block transmission of messages with confidential data or allow transmission only logging the details in the DLP database.
The DLP Module detects data security breaches and creates incidents of them on the basis of DLP data categories (hereinafter referred to as categories) and DLP policies (hereinafter referred to as policies).
Configuring categories and policies, as well as processing incidents, are the working duties of an information security specialist. Information security specialist is a user that has been assigned the corresponding role. The tasks of an information security specialist and instructions on how to accomplish them are provided in the Kaspersky Security 9.0 for Microsoft Exchange Servers Information Security Specialist's Guide.
The application allows the joint work of several security officers. All the controls and features of the DLP Module are available to any user who has been assigned the information security specialist role. All the controls and features of the DLP Module are available for any user who has been assigned the information security specialist role.
If the law in your country requires notifying individuals that their activity on data transmission networks is being monitored, you must warn users about the operation of the DLP Module in advance.