Content Filters Disclaimers

Question

We have a content filter that look for the word "confidential" In email body and attachment, we keep getting hits on the contents of disclaimers we can exclude our disclaimers because we know the text the issue comes from 3rd party disclaimers where we do not know the contents of the disclaimer.
Is there a way of
stripping all disclaimers from the email body
or
Ignoring all disclaimers
Any suggestions would be appreciated we have been battling with this for some time now.
Regards
Andrew

Answer 1

You're getting false positives precisely because the word will pop up in a lot of other places. If you were able to eliminate all third party disclaimers (a nigh-impossible task because other organisations may adopt any old format or technology) then I imagine that you would find many other hits.
I would hope that the state of the art in DLP is somewhat more sophisticated, but if you want to catch confidential information by simple content checking then search for a phrase that is innocious, obscure and won't give you false positives. Salt your customer data with a bogus name or address, include the phrase white-on-white in your confidential document template, use more than one phrase so the trigger word doesn't become known to your entire senior management team.
For credit card numbers and possibly patient identity numbers (whether there's a format to suit you or not depends on your locale) speak to your reseller about DLP capabilities. See if it's worth buying a key or not, but catching that type of information depends on there being a blanket rule against passing the information by e-mail, otherwise you are again awash with false positives.