Superfluous incidents

Groups can include incidents that should not have been there in the first place—for example, false positives and personal communication. While 100 percent accurate automatic identification of false positives is virtually impossible, the system can assess the probability of false positives or the confidence level that an incident is a true positive. To do so, it uses:

• Statistical methods
• Deviations from baselines
• Prior information about the precision of the classifiers and rules in the various DLP sensitivity levels (“Wide”, “Default” and “Narrow”)