Configure and Enable DLP Policies — Microsoft 365 DLP
Configure and Enable DLP Policies is a 5-day, $800 service for organizations with a Microsoft 365 subscription that includes Exchange Online, SharePoint Online, or Microsoft Teams. IT Partner works with the client to define DLP requirements, prepare a statement of work, and configure DLP policies according to that approved document. Service details: SKU ITPWW010SECOT; manager Roman Sotnik.
What this engagement is
DLP-system (Data Leak Prevention) is specialized software that helps protect an organization from data leaks. It can block the transfer of confidential information through various channels and can also be used to monitor daily employee work to help find security weaknesses before an incident. The operating principle is based on analysis of all information: outgoing, incoming, and circulating within the company. Using algorithms and defined rules, the system identifies the type of information, whether it is critical, and if it goes where it is not supposed to go, the system blocks the transmission and/or notifies the responsible employee. In this service, IT Partner works with the client to determine the data and resources to include in the policy, prepare the statement of work for DLP configuration, and configure the necessary policies according to that document.
Success criteria
What you receive
How the work unfolds
Confirm project scope, stakeholders, communication channels, timeline, Microsoft 365 tenant access approach, and the business objectives for DLP policy configuration. Review the planned workloads such as Exchange Online, SharePoint Online, and Microsoft Teams, and agree how approvals and change decisions will be handled during the 5-day engagement.
Gather information about sensitive data types, regulated or confidential information categories, target users or groups, business processes, existing sharing and mail-flow practices, and the Microsoft 365 locations to be protected. Review current DLP-related settings where available, including existing policies, alerts, audit/logging availability, and any known exceptions or business-critical workflows that must not be disrupted.
Translate the collected requirements into a configuration statement of work that defines the intended DLP policy scope, rule conditions, sensitive information types, target locations, notification and alerting behavior, enforcement actions, exclusions, and validation approach. Review the document with the client and obtain approval before making production configuration changes.
Configure the agreed Microsoft 365 DLP policies according to the approved statement of work. This may include creating policy rules, selecting locations such as Exchange Online, SharePoint Online, or Teams, defining detection thresholds, configuring user notifications and incident alerts, setting enforcement actions such as audit, notify, or block where approved, and applying policies to the agreed users, groups, or locations.
Validate that the configured DLP policies match the approved statement of work and perform practical checks using representative test scenarios where feasible. Review policy behavior, alerts, and user-facing notifications, address configuration issues found during verification, document outstanding items if any, and prepare the project closeout report.
Prerequisites
Who does what
IT Partner
- Together with the client, determine the types of data and resources that need to be included in the policy, as well as the parameters of the policy itself
- Create the statement of work describing DLP configuration requirements
- Configure the necessary policies according to the document
Your team
- Coordinate Client resources and staff schedules
- Provide a dedicated point of contact responsible for working with IT Partner
- Report requirements for DLP settings and participate in the preparation of the statement of work for DLP settings
- Coordinate any outside vendor resources and schedules
- Configure all network equipment, such as load balancers, routers, firewalls, and switches
- Review and approve engagement deliverables in a timely manner
What's not included
Frequently asked questions
What is IT Partner’s Configure and Enable DLP Policies service?
Configure and Enable DLP Policies is a 5-day, $800 IT Partner service that helps organizations configure Microsoft 365 DLP policies. IT Partner works with the client to define DLP requirements, prepare an approved statement of work, and configure the necessary DLP policies according to that document.
Who is this DLP policy configuration service for?
This service is for organizations that have a Microsoft 365 subscription including Exchange Online, SharePoint Online, or Microsoft Teams. It is intended for clients that want to define which sensitive data and resources should be covered by DLP policies and then have those policies configured in Microsoft 365.
What Microsoft 365 prerequisites are required for this service?
The prerequisite is a Microsoft 365 subscription with at least one of these services: Exchange Online, SharePoint Online, or Microsoft Teams. If your tenant does not include one of those workloads, confirm eligibility with IT Partner before purchasing the service.
What is included in the Configure and Enable DLP Policies service?
The service includes joint discovery of DLP requirements, preparation of a statement of work describing DLP configuration requirements, and configuration of DLP policies according to the approved statement of work. It also includes a project closeout report showing final project status, acceptance criteria matching, outstanding issues, and final budget.
What deliverables does IT Partner provide for this DLP engagement?
IT Partner provides a statement of work describing the DLP configuration requirements, DLP policies configured according to that statement of work, and a project closeout report. The closeout report includes final project status, acceptance criteria matching, outstanding issues, and the final budget.
What is not included in this DLP policy configuration service?
More extensive documentation than the project closeout report is not included in the standard service. If the client needs additional or more detailed documentation, it may be available for an additional fee and should be confirmed with IT Partner.
How long does the DLP policy configuration service take?
The Configure and Enable DLP Policies service is listed as a 5-day engagement. The exact schedule depends on timely client participation, including providing requirements, coordinating staff availability, and reviewing deliverables.
How much does the Configure and Enable DLP Policies service cost?
The listed price for the Configure and Enable DLP Policies service is $800. The service SKU is ITPWW010SECOT, and any additional work outside the stated scope should be confirmed with IT Partner before the engagement begins.
What happens during the DLP policy configuration engagement?
The engagement follows milestones for kickoff, preliminary data collection, statement of work preparation and approval, policy creation and application, and verification with issue fixing. The source service description lists these milestone names but does not provide detailed milestone-by-milestone procedures, so specific scheduling and activities should be confirmed with IT Partner.
How does IT Partner determine which DLP policies to configure?
IT Partner determines the DLP policy requirements together with the client by identifying the types of data, resources, and policy parameters that need to be included. Those requirements are documented in the statement of work, and the policies are configured according to that approved document.
What are the client’s responsibilities during the DLP engagement?
The client must coordinate internal resources and staff schedules, provide a dedicated point of contact, report DLP requirements, and participate in the preparation of the DLP statement of work. The client is also responsible for coordinating outside vendors, configuring network equipment such as load balancers, routers, firewalls, and switches, and reviewing and approving deliverables in a timely manner.
What are IT Partner’s responsibilities during the service?
IT Partner is responsible for working with the client to determine the types of data, resources, and policy parameters to include in the DLP policy. IT Partner also creates the statement of work describing DLP configuration requirements and configures the necessary policies according to that document.
Will this service create a statement of work before configuring DLP policies?
Yes, preparation and approval of a statement of work is a core part of the service. The statement of work describes the requirements for DLP settings, and IT Partner configures the policies according to that approved document.
Does the service include testing or verification of the configured DLP policies?
Yes, the implementation plan includes a milestone for verification and fixing issues. The service success criteria are that the DLP requirements statement of work is prepared and that DLP policies are configured according to that statement of work.
Will enabling DLP policies cause downtime for Microsoft 365 users?
The service description does not state that planned downtime is required. However, DLP policies can affect user actions such as sending, sharing, or transferring content that matches configured rules, so the expected business impact should be discussed during requirements gathering and approval of the statement of work.
Can DLP policies block confidential information from being shared?
Yes, DLP systems are designed to identify confidential or critical information and can block transmission and/or notify responsible employees when information goes where it is not supposed to go. In this service, the exact blocking and notification behavior depends on the DLP policy parameters defined with the client and documented in the statement of work.
Which communication or collaboration channels can be included in this Microsoft 365 DLP service?
The prerequisite workloads listed for this service are Exchange Online, SharePoint Online, and Microsoft Teams. The exact resources and data locations to include in the DLP policies are determined jointly by IT Partner and the client during the engagement.
What happens after IT Partner completes the DLP configuration?
After the DLP policies are configured and verified, IT Partner provides a project closeout report. The report indicates the final project status, acceptance criteria matching, outstanding issues, and the final budget.
Does IT Partner manage DLP policies after the 5-day engagement ends?
Ongoing DLP policy management is not listed as part of the stated service scope. The defined scope is to prepare the DLP requirements statement of work, configure policies according to it, verify and fix issues during the engagement, and provide the closeout report.
Who manages the Configure and Enable DLP Policies service at IT Partner?
The service information lists Roman Sotnik as the manager for Configure and Enable DLP Policies. The service SKU is ITPWW010SECOT.