Welcome to ONLC Training Centers

Symantec Data Loss Prevention 15.5: Policy Authoring and Incident Remediation

Microsoft Gold Partner
Class Dates
(click date for class times)
(click Enroll for locations)

Fee:  $1800
Need a price quote?

Follow the link to our self-service price quote form to generate an email with a price quote.

Need a class for a group?

We can deliver this class for your group. Follow the link to request more information.

Email Alert

Receive an email when this class is available as "Ready to Run" or "Early Notice" status.

Train from your home or office

If you have high-speed internet and a computer you can likely take this class from your home or office.

Symantec Data Loss Prevention 15.5: Policy Authoring and Incident Remediation Course Outline

The Symantec Data Loss Prevention 15.5 Policy Authoring and Incident Remediation course is intended for DLP policy authors and incident remediators who need to understand how to create, maintain, and refine DLP policies and how to create effective incident
remediation workflows to drive toward their organization’s data-loss risk reduction goals. The hands-on labs include exercises for authoring policies (detection rules and response rules) and performing incident detection, incident response, and incident
reporting. The course assumes that Symantec Data Loss Prevention (DLP) is already implemented in the organization’s environment and is configured to cover the relevant vectors for the organization: Data in Motion, Data at Rest, and Data in Use, whether
on-premises or in the cloud. For this reason, the course does not cover how to implement, maintain, or troubleshoot the servers and cloud components of the DLP product suite, or the technical configuration of individual DLP products beyond policy authoring
and incident remediation.

Two days

Course Objectives
By the end of this course, you will be able to create policies and track and remediate incidents in Symantec Data Loss Prevention 15.5.

Who Should Attend
This course is intended for anyone responsible for creating and maintaining Symantec Data Loss Prevention policies (consisting of detection and response rules) and/or for tracking and remediating incidents.

You should have a general understanding of the channels that are covered in your Symantec Data Loss Prevention implementation as well as a good idea of the types of confidential data your organization wants to protect.


Lesson 1: Setting Risk Reduction Goals for Your Data Loss Prevention Program
• Understanding data-loss risk reduction frameworks
• Understanding Symantec Data Loss Prevention coverage
• Identifying confidential data
• Setting initial risk-reduction goals
• Understanding the feedback loop between policies and incidents

Lesson 2: Identifying and Describing Confidential Data in Your Data-Loss-Prevention Policies
• Configuring Symantec Data Loss Prevention to recognize confidential data
• Described Content Matching (DCM)
• Exact Data Matching (EDM)
• Indexed Document Matching (IDM)
• Vector Machine Learning (VML)
• Sensitive Image Recognition
• Custom file type detection
• Advanced policy tips

Lesson 3: Protecting Confidential Data using your Data-Loss-Prevention Policies
• Using response rules in DLP policies to protect confidential data
• Educating Users to adopt data protection practices
• Protecting confidential data in motion
• Protecting confidential data in use
• Protecting confidential data at rest

Lesson 4: Remediating Data Loss Incidents and Tracking Risk Reduction
• Using incident reporting options to identify and assess risk
• Creating tools that support the organization’s risk reduction process
• Communicating risk to stakeholders
• Understanding advanced reporting options and analytics

Lesson 5: Course Review
• Review of Symantec DLP policy authoring
• Review of Symantec DLP incident remediation
View outline in Word


Attend hands-on, instructor-led Symantec Data Loss Prevention 15.5: Policy Authoring and Incident Remediation training classes at ONLC's more than 300 locations. Not near one of our locations? Attend these same live classes from your home/office PC via our Remote Classroom Instruction (RCI) technology.

For additional training options, check out our list of Symantec Courses and select the one that's right for you.


Class Format
Class Policies
Student Reviews

Bookmark and Share

First Name

Last Name