Policy in Data Security is simple and aims to create an awareness of content and user actions and minimize the risks associated with the use of sanctioned SaaS and IaaS applications. Data Security policy enables you to monitor and enforce responsible use of assets (files or other data) and protect against malware, malware propagation, regulatory noncompliance, and data leaks that are caused by human errors, such as promiscuous or inadvertent sharing, and sharing content using links without establishing an expiration date. When Data Security detects a policy violation, it generates an alert to notify you of an active incident related to malware, a security breach, or a compliance violation and, if configured, takes automatic action to remediate the incident.

Data Security offers policy types that give you the controls to manage assets, user activity, third-party apps, and security controls across all supported SaaS and IaaS applications. A log is generated for events that match a policy rule when logging is enabled for the rule.

Data Security scans supported file types for supported SaaS apps. As Data Security starts scanning your cloud apps, monitor the assets, content types, incidents, users, policy violations, collaborators, and domains that the service discovers during the scan.