Data detection and protection policies for electronic file systems

A computing system for creating a data loss prevention (DLP) policy instance for a set of email systems, each email system comprising an email server configured to communicate with a set of email clients, the computing system comprising:

• a processor;
• and
• memory storing instructions executable by the processor, wherein the instructions, when executed, configure the computing system to:
• receive a DLP policy template that comprises a set of template component fields and is generic to the set of email systems;
• and
• for each email system in the set of email systems,
• transform the generic DLP policy template into a DLP policy instance that is specific to the email system by parameterizing the set of template component fields based on policy data associated with the email system, wherein the DLP policy instance comprises:
• a policy rule object that defines a DLP action to be performed by the email system;
• and
• a data classification rule object defining a structure of electronic data in the email system to which the policy rule object is applied;
• and
• control operation of the email system by executing the policy rule object of the DLP policy instance.

A method performed by a computing system, the method comprising:

• identifying a first electronic file system configured to provide a first service to a set of clients that request access to data associated with the first electronic file system, the first electronic file system having a first set of file system characteristics representing operation of the first electronic file system;
• identifying a second electronic file system configured to provide a second service to a set of clients that request access to data associated with the second electronic file system, the second electronic file system having a second set of file system characteristics representing operation of the second electronic file system;
• receiving a data loss prevention (DLP) policy template that
• comprises a set of template component fields, and
• is generic to both the first and second electronic file systems;
• for the first electronic file system,
• transforming the generic DLP policy template into a first DLP policy instance that is specific to the first electronic file system by parameterizing the set of template component fields based on the first set of file system characteristics, wherein the first DLP policy instance comprises:
• a policy rule object that defines a DLP action to be performed by the first electronic file system;
• and
• a data classification rule object defining a structure of electronic data in the first electronic file system to which the policy rule object is applied;
• and
• controlling operation of the first electronic file system by executing the policy rule object of the first DLP policy instance;
• and
• for the second electronic file system,
• transforming the generic DLP policy template into a second DLP policy instance that is specific to the second electronic file system by parameterizing the set of template component fields based on the second set of file system characteristics, wherein the second DLP policy instance comprises:
• a policy rule object that defines a DLP action to be performed by the second electronic file system;
• and
• a data classification rule object defining a structure of electronic data in the second electronic file system to which the policy rule object is applied;
• and
• controlling operation of the second electronic file system by executing the policy rule object of the second DLP policy instance.