How does this align with Essential Eight?
🔐 Restrict Administrative Privileges
This policy enforces access boundaries by detecting when sensitive financial data is shared externally.
This supports the principle of least privilege and help prevent unauthorised data exposure.
🧾 Policy Overview
🧭 Name: E8-IBP-Australia Financial Data
🔐 Type: Data Loss Prevention (DLP) Simulation Policy
📍 Scope: Exchange, SharePoint, OneDrive for Business, Teams, On-Premises Scanner
🧪 Mode: TestWithoutNotifications (Audit)
🛠️ Status: Distribution Pending (Sync Successful)
📦 Target Locations: All Exchange, OneDrive, SharePoint, Teams, On-Premises Scanner
🔑 Minimum Licensing Requirement: Microsoft 365 Business Premium
🧠 Detection Logic
This policy helps detect high volumes of sensitive financial data in Australia, including:
💳 Credit Card Numbers
🏦 Australia Bank Account Numbers
🧾 Australia Tax File Numbers
🌐 SWIFT Codes
Detection is based on confidence levels and minimum counts:
High volume rule triggers on ≥10 instances
Low volume rule triggers on 1–9 instance
📣 Notifications & Alerts
🔔 Alerts generated for Site Admin
📧 Notifications sent to Site Admin, Last Modifier, and Owner
📎 Email attachments included in notifications
🚫 No quarantine or access blocking (simulation mode only)