Data Loss Prevention- simulation mode for DLP policies

This post explores the recently introduced Simulation mode in DLP and its potential as a valuable test tool for DLP policies. The new feature provides DLP admins with the ability to run a DLP policy in isolation, assess its impact, and gain confidence in its efficacy before policy enforcement. Simulation mode is an improvement on the existing test mode behavior, which can help Admins evaluate new policies confidently.

The rollout for this feature is planned to begin in mid-February 2024 and expected to be complete by late-February 2024. During the public preview, the simulation mode experience can be enabled from the DLP settings page, and once generally available, all existing test mode policies will be available with Simulation experience, including results from the previous 30 days.

Any alerts generated by policies running in Simulation will be limited to the DLP simulation experience to prevent disruption to production alerts investigation. This allows admins to assess and fine-tune the policy without any impact on the production policy. The post emphasizes the need for DLP admins to prepare by enabling the simulation mode experience during public preview and familiarizing themselves with the new features of simulation mode.

Overall, the introduction of the simulation mode in DLP is set to revolutionize the testing of DLP policies. It will provide DLP admins with a safe space to test policies, evaluate their efficacy, and gain confidence in the policy's impact before it goes into full enforcement.

The post Data Loss Prevention- Simulation mode for DLP policies was originally published on M365 Admin.