The rapidly increasing number of security breaches and data loss incidents is driving companies to implement data loss prevention (DLP) solutions as part of their overall endpoint security systems to prevent sensitive information from making its way out of the corporate network. Data must be accessible to mobile workers, partners, and the supply chain, but at the same time a company must prevent that data being accidentally or intentionally delivered into the wrong hands. Consequently, DLP software has become just as important as antivirus, host intrusion prevention, firewalls, and other security technologies and must be incorporated into an overall enterprise security system.

As more organizations look to incorporate this promising technology into their infrastructure, it is critical to understand what makes some DLP solutions more effective than others. The most comprehensive DLP tools enable organizations to discover data as well as monitor, protect and manage it.

Locate Sensitive Data
The proliferation of mobile computing devices as well as the use of portable media, such as USB flash drives, signal that today’s workforce is becoming more and more mobile. In such an environment, simply knowing which desktops, laptops, or other devices contain the most sensitive data is a monumental challenge. Worse yet, it is impossible to track how sensitive information is being accessed and manipulated without first knowing where that information is stored across the thousands of laptops, desktops and other endpoints in the enterprise. Indeed, unless such information is first found, it cannot be secured.

DLP addresses this challenge by providing visibility into where confidential data is stored. DLP scans for sensitive data on the endpoint, whether local or remote and regardless of whether the user is on or off the network. Armed with this information, IT can then take steps to inventory, secure or even relocate this data.

Furthermore, by pinpointing systems on which the most sensitive data is found, DLP also makes it easier to prioritize which laptops and desktops need encryption.

Track Data Use
Once sensitive data is located, its use must also be monitored to ensure that it remains private. To that end, DLP tracks how confidential data is being used at the endpoint, whether or not that endpoint is attached to the network.

DLP monitors files that are downloaded to local drives, copied to USB or other removable media, or burned to CD/DVDs as well as data transferred over email, IM, FTP or HTTP. It also monitors for sensitive information that is copied, pasted, printed, or faxed electronically.

DLP takes the guesswork out of secure data handling. With it, organizations can be sure that customer lists are not copied to USB flash drives or other removable media, source code is not copied or pasted to a new file, design documents are not being burned to CDs or DVDs, price lists are not being printed out or faxed to competitors and much more.

Stop Data Loss
Without DLP, organizations committed to protecting information are often relegated to simply preventing employees from transferring or even accessing data via their mobile phones, laptops or home computers.

• Email
• Print
• Share
  • Slashdot
  • Digg
  • Stumble
  • Reddit
  • Newsvine