Data Loss Prevention (DLP) Incident Response: End User Portal
[Music] hey everyone it's Justin thank you for watching and welcome to my house that's Justin's house in this video I'm back in data loss prevention incident response and the thing I had left to show you in this application is the end user portal so I'm logged in as Stella Piper and I want to spend a little bit more time on the end user portal than I did in my assessment video so I'm going to navigate to the data loss prevention end user portal I just want to highlight that this is rare for an application in service now to have a dedicated portal for end users I think I've seen it for risk I've seen it for um well risk actually is the only one I see it for risk the risk work portal where you go in and complete assessments um so for data loss prevention part of security operations your end users can be assigned incidents and they can be assigned assessments so what is going on behind the scenes is this user is being redirected to the workspace and the word DLP workspace is only showing a list view of my DLP incidents and that's that's kind of what the the magic behind the we'll use the air quotes portal is for these end users and Stella has dlp00001 assigned to her from my demo data set and if she clicks on this incident so you can see a couple of things now if you've watched the other video where I demo an assessment you saw me go in and actually complete an assessment but I skipped over everything else I didn't show anything else in this portal so we're going to hide that for this particular video and show that these are the details for Stella when she's looking at this particular incident in data loss prevention notice that everything almost everything is read only so she can't come in here and change anything about this incident other than adding additional comments whether she does that here to add additional comments or here to add comments like you normally would in a workspace so that's the extent of what she can do now she can see the details of it um all the details that we'd be able to see and of course as you've seen in my other videos if I click on this additional details nothing comes up so I still don't know the purpose of that particular tab yet if I find out I will let you know and she can collapse the details and that's about it pretty much here oh and browse you can put in an attachment my head's kind of in front of it but you can see here attachments you can actually add an attachment to the particular incident now there are two UI actions at the very top where she can say hey this is a false positive or it's the wrong owner it isn't Stella Piper so not on this one but another one actually shows the file permissions over here on this little field and there's a couple of users there's an owner there's a reader or a viewer and an editor I think and so she could in Theory come in here and say well the consumer plate complaints April file yeah I'm the owner but so-and-so manages that and if she wanted to do that she could come up here and just say hey report wrong owner and I want to suggest that Abraham Lincoln is the owner of that particular file and report that and put the comments in there and then this will be marked as responded she can also say hey this is a false positive and put in some comments and report that as a false positive so for now in data loss prevention that is the end user portal that's the extent of it that I'm aware of I hope you found this video helpful if you did please like Please Subscribe or share it with somebody who you think might be interested in taking their data loss prevention incidents and getting some end user interaction and an auditable history Trail assignments and assessments associated with those data loss prevention incidents until next time don't forget to always be learning foreign [Music]
https://www.youtube.com/watch?v=Q1UPFp8uq34