ASD's Blueprint for Secure Cloud

Label incoming PROTECTED email

This section describes the configuration of auto-labeling within Microsoft Purview associated with systems built according to guidance in ASD's Blueprint for Secure Cloud.

Estimated reading time: 2 minutes

Name

ItemValue
NameLabel Incoming PROTECTED Email
DescriptionApplies the PROTECTED label to incoming emails based on either the header or subject

Admin units

ItemValue
Admin unitsFull directory

Locations

ItemValue
Exchange emailAll users and groups
SharePoint sites
OneDrive accounts

Rules for Exchange email

Check for PROTECTED x-header

ItemValue
NameCheck for PROTECTED x-header
Description
Conditions
ItemValue
Header matches patternHeader name: X-Protective-Marking
Regular expression: (?im)(SEC=PROTECTED)(?!\u002C\s*[ACCESS|CAVEAT])

Check for PROTECTED subject

ItemValue
NameCheck for PROTECTED subject
Description
Conditions
ItemValue
Subject matches patternRegular expression: (?im)(SEC=PROTECTED)(?!\u002C\s[ACCESS|CAVEAT])

Label

ItemValue
Label to auto-applyPROTECTED/PROTECTED

Additional settings for email

ItemValue
Automatically replace existing labels that have the same or lower priorityNot checked

Policy mode

ItemValue
Decide if you want to test out the policy now or laterRun policy in simulation mode
Automatically turn on policy if not modified after 7 days in simulationNot checked

Security & Governance

  • None identified

Design

  • None identified

Configuration

  • None identified

References

  • None identified

Do you have a suggestion on how the above page could be improved? Get in touch! ASD's Blueprint for Secure Cloud is an open source project, and we would love to get your input. Submit an issue on our GitHub, or send us an email at blueprint@asd.gov.au

Acknowledgement of Country icon

Acknowledgement of Country
We acknowledge the Traditional Owners and Custodians of Country throughout Australia and their continuing connections to land, sea and communities. We pay our respects to them, their cultures and their Elders; past, present and emerging. We also recognise Australia's First Peoples' enduring contribution to Australia's national security.

Authorised by the Australian Government, Canberra