McAfee Data Loss Prevention 9.2.2 Product Guide

Managing action rulesHow McAfee DLP Discover uses action rules 10How McAfee DLP Discover uses action rulesDepending on the policies and rules deployed during a Discover scan, McAfee DLP Discover can takeup to four different remedial actions when significant data is detected.McAfee DLP Discover might use action rules to perform any of the following remedial actions:• Copy a file at risk to another location.• Move a file at risk to another location.• Encrypt (password‐protect) a file at risk.• Delete a file at risk.Each of these actions includes the ability to add the following actions:• Notify users of violations found in scanned data.• Record violations found in a system log.• Assign incidents to one or more reviewers.• Set a status that indicates the state of resolution.Remediation can be pre‐programmed by attaching an action rule to rules that produce incidents, orapplied directly to incidents reported on the Data‐at‐Rest dashboard by clicking the Remediation button.McAfee Data Loss Prevention 9.2.2 Product Guide 223