Andrew B,
Thanks for your input. There is still some confusion though as I compare the two relevant sections from the DCS & CA guides about tags/policies.
It sounds like I want to configure a response rule to tag items that match the policy I created with "Exclude from review", so that when searches are run, tagged items won't show up. But when I look at DA search options, as an example, and create a new search - the options under policy are not clearly explained (the attached image shows the Policies option in a new search). Does ignore exclusions, the default selection, mean search results will INCLUDE items that are tagged as "prioritized" in DLP/DCS or that it will EXCLUDE them? The varying language between guides is not very helpful...
If it makes any difference to my explanation, I think we would want the default option to be where tagged items are automatically excluded from the review set during searches in CA/DA unless we specifically wanted to include them or conducted a separate search for items tagged as excluded.
I would sure appreciate clarification or guidance on this. I think I'm getting the picture but I gotta get this right. Thanks!
From the DCS Implementation Guide:
If you configure the response rule to archive the message, you can also select Prioritize messages for compliance review to prioritize the message for review. The Discovery Accelerator and Compliance Accelerator products can use this classification tag to filter messages during searches or audits. When you select this option, two additional choices are presented:
■ Include in review—Includes the message in subsequent searches and
audits.
■ Excludefromreview—Excludes the message from subsequent searches
and audits.
See the Discovery Accelerator and Compliance Accelerator documentation
for more information about searching and auditing messages in Enterprise Vault.
From the CA Administrators Guide:
Policies section
The Policies section lets you search for items according to the tags with which
any additional policy management software has classified them.
Lets you search for the items that match certain
classification policies. There are several types of policies:
■ Inclusion. Any item that your policy management
software has classified for inclusion in the review set
may be guilty of the most serious offenses, such as
swearing, racism, or insider trading.
■ Exclusion. Spam items and newsletters are typical
examples of the items that your policy management
software may classify for exclusion from the review set.
■ Category. Your policy management software may
categorize the items that exhibit certain characteristics,
such as containing Spanish text. This type of policy
provides no information on whether an item should be
included in or excluded from the review set.
These policy types are not mutually exclusive. Your policy
management software may apply multiple policies of
different types to the same item.
Select the required policy type and then check the names
of the policies for which you want to search. Alternatively,
you can select Custom as the policy type and then type the
names of one or more policies. Separate multiple policy
names with commas, like this:
CustomPolicy1,CustomPolicy2
If you choose to search for multiple policies, the search
results will contain items that match any one of the policies.
