Outbound Protection Settings

Owned by Matthew Sywulak
Aug 01, 2022
3 min read

INKY’s OMP raises awareness with respect to high-risk email messages before they leave the organization. When INKY’s OMP detects a message with sensitive content, it kicks off an approval workflow. Depending on sensitivity, organizational rules, and context, that process involves either a self or managerial review.

Workflow Approvers

Approvers can be added by the following

If the outbound scanner detects sensitive content in an outgoing message that requires another party's approval for delivery, the approver is determined from this list. If the sender's email does not match any patterns in this list, an administrator will be required to approve the message.

Outbound Protection Rules

INKY uses a combination of detection modules to identify instances of sensitive data in messages. This identification requires cross-referencing multiple data points, including keywords and variable contextual clues (e.g., the “distance” between questionable elements) in a message, pattern matching (e.g., finding the words “credit card” and looking for a plausible credit card number in the same body), and various data types (e.g., tables, pdf attachments, text, jpgs). 

By default, there are two DISABLED rules available upon registration.

INKY scans for: 

  • Financial information: credit cards​, bank account data 

  • Identification documents: drivers licenses, national ID numbers​, passports and visas​ 

  • Medical information: clinical modification (ICD-10-CM)​, procedure coding systems (ICD-10-PCS)​ 

  • Email header: subject, from, io, and X-INKY headers to trigger workflow actions 

Every rule consists of a set of conditions and actions to take when such conditions are met.

Add Rule

Adding a new rule allows you to fully customize how you want to identify emails sending specific types of content.

 

The editor provides a drop-down which allow you to choose the conditions you want to apply. The editor has an option to switch between “AND” and “OR” for granularity.

Actions can be further configured to alert approvers and have them provide feedback upon approval or denial.

 

Configure settings for OMP notifications sent to the message sender and/or approvers

Notifications can be configured to display the rule name or the matching values in the outbound emails.