Provision of Data Leak Prevention (DLP) and Microsoft Cloud Access Security (MCAS) Consultancy

As part of an ongoing programme of cyber resilience improvements, the Office for Nuclear Regulation requires consultancy support in the form of design, technical policy development, technical enablement and implementation/configuration of the capability to prevent leakage of sensitive information from its IT environment along with improved visibility and control over enterprise use of SaaS and other cloud hosted services. ONR processes the vast majority of its information at OFFICIAL. Within that classification Sensitive Nuclear Information (SNI) requires special handling and additional security controls. Data Leak Protection (DLP) capability is required to help us identify, monitor and apply rules to SNI, and other sensitive information as it leaves our enterprise environment. With the move to a public cloud environment come opportunities to utilise modern, SaaS-based, business applications, Cloud Access Security capability is required to enable us to monitor and control user access to cloud applications and SaaS services.