Previous Topic: Intervention Option: WarnNext Topic: Detecting Key Text


Intervention Option: Warn (Personal)

Available for: Emails detected by endpoint agents.

Not available for: Application Monitor; Data At Rest; Data In Motion. Also, this warning option is not available for emails detected by email server agents, or for SMTP emails.

Choose 'Warn, user may designate as personal' to display a modified Warning dialog whenever CA Data Protection detects an email. Like the standard Warning dialog, the modified dialog lets the user choose whether to continue or not. Most importantly, the user can flag the event as 'Personal'. There are three dialog buttons:

Personal

Users can click this button to indicate that they are opening or sending a personal email. This overrides the warning, and allows the user to continue. It also generates a 'disregarded warning' event, although the event itself is identified as a personal email in the Console.

Important! If the user clicks Personal, the email content is not captured, even if the control action setting Capture Disregarded Warnings? is set to True.

Cancel

If the user clicks Cancel, this generates a heeded warning. In effect, the user accepts the warning and quits trying to send or open the email.

Continue

If the user clicks Continue, this generates a disregarded warning. The user is allowed to coninue (for example, they can send the email anyway), but CA Data Protection records the fact that the user continued despite being explicitly warned against doing so.

Note: A disregarded warning does not necessarily imply any misconduct by the user. For example, a user may want to send a non-encrypted email, in breach of corporate guidelines, because it concerns a trivial matter.

In all cases, you can capture the associated event. You can also forward emails to another address and send automatic replies to incoming emails.

More information:

Intervention Setting