1. A method comprising: receiving a security policy from a remote server, said security policy defining at least one protected element, said at least one protected element comprising a portion of content of a file, and a disposition action for a file containing said protected element, said protected element containing sensitive information; scanning a portion of a file system that is not currently subjected to the security policy for files containing said at least one protected element, comprising at least one of a group composed of a keyword; a file name extension; a link to a protected object, a filename and a metadata element, said protected element within the file having been previously subjected to the security, policy, but due to an action performed by a user no longer subjected to the security policy; finding in the portion of the file system a first file containing both said protected element and at least one unprotected element; applying the security policy to the first file; and performing said disposition action on said first file.
1. A method comprising: receiving a security policy from a remote server, said security policy defining at least one protected element, said at least one protected element comprising a portion of content of a file, and a disposition action for a file containing said protected element, said protected element containing sensitive information; scanning a portion of a file system that is not currently subjected to the security policy for files containing said at least one protected element, comprising at least one of a group composed of a keyword; a file name extension; a link to a protected object, a filename and a metadata element, said protected element within the file having been previously subjected to the security, policy, but due to an action performed by a user no longer subjected to the security policy; finding in the portion of the file system a first file containing both said protected element and at least one unprotected element; applying the security policy to the first file; and performing said disposition action on said first file. 4. The method of claim 1 , said disposition action comprising at least one of a group composed of: encrypting said file; deleting said file; applying rights management to said file; modifying metadata for said file; and applying security descriptors to said file.