Any suggestions as to how to configure DLP to create a workaround for the following item? My DLP team seems to be taking an awfully long time to try to figure it out...
We have the word “confidential” as a keyword/policy. We are getting at ton of false positives on this because the word confidential is present in the standard language of our email footers that are generated when we send an email. Any thoughts as to how to put some rules around this in the tool so that it doesn’t generate events as a result of the footer? The footer is below. Is there a way to put an exclusion that says return the events that have the word "confidential," but don't return the events if they are present in the phrase below?
This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information.