Validation & Rollout

Story: A student worker accidentally tries to email a grade roster externally.

Demonstration:

1. User creates email with grades spreadsheet attached
2. Enters external recipient
3. DLP policy triggers
4. User sees policy tip: "This document contains student records"
5. Email is blocked or requires override

What to Show:

• DLP detection of FERPA data
• User notification and education
• Audit log of the event

Story: Research PI shares restricted document with external collaborator.

Demonstration:

1. Document is labeled "Restricted - Research"
2. Label enforces encryption
3. PI attempts to share with external party
4. Sharing is blocked OR external user can only open with authentication
5. Access is logged and time-limited

What to Show:

• Label persistence across sharing
• Encryption protecting content
• Rights management controls

Story: Departing employee downloads unusual volume of files before resignation.

Demonstration:

1. HR marks employee as departing (HR connector)
2. Employee downloads 500+ files in 24 hours
3. IRM detects anomaly and creates alert
4. Investigator reviews activity timeline
5. Appropriate action taken

What to Show:

• Integration with HR systems
• Behavioral analytics detection
• Pseudonymization protecting privacy
• Investigation workflow

Story: User asks Copilot about salary information.

Demonstration:

1. HR salary spreadsheet is labeled "Confidential - HR"
2. Site is in Restricted Content Discovery
3. User asks Copilot: "What are the salary ranges?"
4. Copilot does NOT surface the protected content
5. User can still navigate directly to file if authorized

What to Show:

• Copilot respects labels and RCD
• Sensitive data not surfaced inappropriately
• Authorized access still works