About data control events

When a data control event occurs, for example, the copying of a file containing sensitive data to a USB flash drive, the event is sent to Enterprise Console and can be viewed in the Data Control - Event Viewer. The event is also logged locally on the endpoint computer and can be viewed, with the appropriate permissions, in Sophos Endpoint Security and Control.

Note: An endpoint computer can send to Enterprise Console a maximum of 50 data control events per hour. All events are logged locally on the endpoint computer.

In the Data Control - Event Viewer dialog box, you can use filters to display only the events you are interested in. You can also export the list of data control events to a file. For details, see View data control events and Export the list of events to a file.

The number of computers with data control events over a specified threshold within the last seven days is displayed on the Dashboard. For information on how to set up the threshold, see Configure the Dashboard.

You can also set up alerts to be sent to your chosen recipients when a data control event has occurred. For details, see Set up data control alerts and messages.