So, you’ve got all these reports and red flags and alerts? What are you going to do with them? Get them analyzed by your SOC team, of course – all the data gathered by a DLP solution can provide the necessary digital forensic context to make your team understand exactly what happened during X event and how future occurrences can be prevented. This brings us to the last component – analysis. Reporting – who needs reporting when you have monitoring and filtering? Well, without this bit you would be unable to create audits, log events nor come up with an actionable incident response scenario-based plan. A DLP solution’s effectiveness is measured by its ability to police data – applies to both data-in-transit and data-at-rest.įiltering is used to ‘sift through’ the data with the purpose of identifying anomalous patterns or unauthorized access attempts. Monitoring means inspecting data sources, regardless of location, availability, and classification. Regardless of the scope or, better said, the devices it serves, a DLP solution needs to fulfill four basic functions – monitoring, filtering, reporting, and analysis. A DLP solution can operate at different levels.įor instance, even though most DLPs are deployed at the network level – which is considered the most ‘abused’ attack vector – there are DLPesque solutions that cover (un)removable storage devices and, of course, endpoints. What exactly is a DLP solution?ĭLP, which stands for Data Loss Prevention, is a system or flow or both that detects and prevents potential data leaks and data exfiltration through continuous monitoring and company-defined security policies. In the meantime, let’s have this chat about DLP solutions.

Are there any limitations to using DLP? Should you deploy DLP if you run a ‘one-man show’? Got any more questions? Great! Write them down in the comments section and I’ll be more than happy to answer them for you. In today’s article, I’m going to talk about DLP solutions. Data Loss Prevention – often confused with data leak – is that extra (mandatory) item on your business continuity plan you’ll definitely want to look into for any number of reasons, the least of which is not compliance. Whenever a company, whether a small, family business or a big corp, formulates a risk mitigation plan, DLP flares up.

Open source dtp