Phase II - Automated Incident Repository & Analytics

Phase II expanded the EXO Lab by automating the collection, storage, and reporting of Data Loss Prevention incidents. Power Automate workflows process security events, store incident data in SharePoint Online, and provide executive reporting through Power BI.

SharePoint Online Incident Repository

A centralized SharePoint Online list was implemented to store and track DLP incident data.

SharePoint Incident Repository

Power Automate Workflow

Power Automate workflows collect incident information and automatically update the SharePoint repository.

Flow Execution

Flow Run History

Flow Parameters

Power BI Security Dashboard

Power BI visualizes DLP activity, workflow processing, incident trends, and operational metrics.

Power BI Executive Dashboard

Phase II Outcomes