Data Loss Prevention (DLP) means many things to many people and there are many methods to achieve it. A DLP system is designed to detect potential data breaches and prevent them by monitoring data while in use, in-motion and at rest, ensuring that your corporate data is unable to leave the secured and controlled environment. Before you even start to look at a DLP you must define what data you consider to be most valued, for example customer databases, CAD drawings, financial results, credit card data, personal information, corporate branding and also understand where this data is stored and who has access to it.
There are many methods which data can be leaked; it might be a disgruntled employee posting information on Twitter or Facebook, or an employee trying to be more productive by uploading a sensitive document to their webmail account to work on it from home, or even an advanced persistent threat that uploads a portion of the customer database or a group of documents to an external FTP server.
DLP has been around for a long time but it’s only recently started becoming prominent with industry legislation and fines being imposed. With a lot more data being made more available to more people and with the explosion of devices, businesses have now seen a need to protect their assets and information.
DLP can range from locking down and encrypting endpoint clients such as laptops through to total solutions which manage the endpoint and monitor data in motion and scan the data on the network which might be deemed sensitive.
DLP solutions should offer you greater control and protection of your corporate information and help you meet certain levels of compliance, whether this is HIPPA, PCI or simply by stopping the company credit card information from being leaked.
Key Benefits of a DLP solution are:
Industry regulation compliance
Protection against fines.
Automated systems which allow quick remediation of breaches.
Ability to scan databases, documents, endpoints, files and network locations and automatically identify whether the type of content and protect if necessary or relevant.
Ability to control and lock down endpoints.
Ability to monitor and stop data leaving the business over multiple channels.
Learn more about our range of AFFINITY managed service offerings SecureData s AFFINITYMANAGED service is based upon security awareness intelligence and proactiveness that helps ensure that an organisations infrastructure and [ ... ]