2. 2

3. DLP helps to identify monitor protect sensitive data through deep content analysis

7. ExtensionFile Type Doc, DocxWord 2003 to Word 2013 XLS, XLSX, XLSBExcel 2003 to Excel 2013 PPTPowerPoint 2003 to 2013 TXT, CSVText Files What kinds of files can DLP scan? 7 Password protected files cannot be scanned by DLP Zip GZIP (GZ) RAR TAR (Tape Archive ) UU Encode (UUE) Mime S/Mime TNEF MSG MacBin Archive Files. RTFRich Text Format HTML/XML PDFPortable Document Format

8. Sarbanes-Oxley Act of 2002 (SOX) Security Exchange Commission Rule 17a-4 (SEC Rule 17 A-4) National Association of Securities Dealers 3010 & 3110 (NASD 3010 & 3110) Gramm-Leach-Bliley Act (Financial Modernization Act) Financial Institution Privacy Protection Act of 2001 Financial Institution Privacy Protection Act of 2003 Health Insurance Portability and Accountability Act of 1996 (HIPAA) Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (Patriot Act) European Union Data Protection Directive (EUDPD) Japan’s Personal Information Protection Act

9. 9

10. Content to monitor User action Mail flow actions contains Credit cards EU debit cards Defines the policy objectives to help meet regulatory requirements for identified content Contains data type definitions to help identify sensitive content 10

16. Integrated into ETR engine: Runs in categorizer during OnResolvedMessage Integrated as a new ETR Predicate Performs text extraction for body & attachments followed by classification Can be combined with any existing Predicates & Actions Transport Rule Agent Text Extraction Classification

17. How do the components work together?

18. How content analysis works in Exchange 2013 Joseph F. Foster Visa: 4485 3647 3952 7352 Expires: 2/2012 Get Content Example This content would match for Credit Cards ACME Travel, I have received updated credit card information for Joseph Joseph F. Foster Visa: 4485 3647 3952 7352 Expires: 2/2012 Please update his travel profile. This content will NOT match for Credit Cards Hi Alex, I expect to be in Hawai too. My booking code is 1234 1234 1234 1234 and I’ll be there on 3/2012 Regards, lisa 4485 3647 3952 7352  a 16 digit number is detected RegEx Analysis 1.4485 3647 3952 7352  matches checksum 2.1234 1234 1234 1234  does NOT match Function Analysis 1.Keyword Visa is near the number 2.A regular expression for date (2/2012) is near the number Additional Evidence 1.There is a regular expression that matches a check sum 2.Additional evidence increases confidence Verdict

22. Doesn’t disrupt user workflow Can work even when disconnected Contextual policy education Admin customizable text and actions

26. DLP policy configuration Outlook policy distribution Contextual policy education Backend policy evaluation Audit & incident data generation Admin Information Workers

27. 27

28. 28

29. Education experience in Outlook Available in Exchange Server and Office 365 Out-of-the-box DLP policy templates Predefined sensitive content types Support for third party–defined DLP policy templates DLP administration in Exchange Admin Center Rich reporting 29

30. Audit data Classification Rule details