Confidential information can leave an organization through email, cloud applications, shared documents, removable storage or poorly controlled access.
Data Loss Prevention, commonly called DLP, combines information identification, policy enforcement, monitoring and user guidance to reduce inappropriate sharing or transfer of sensitive data.
Information that may require protection
- Customer and employee records
- Financial and banking information
- Contracts and legal documents
- Government or regulatory information
- Intellectual property and business plans
- Authentication details and other restricted data
A practical DLP programme should include
- Identification and classification of sensitive information
- Clear rules for permitted and prohibited sharing
- Controls across relevant email, endpoint and cloud channels
- User awareness and appropriate policy notifications
- Monitoring, incident review and escalation responsibilities
- Testing that reduces disruption to legitimate business processes
Junubia Host can help review your information types, Microsoft environment and operational requirements before recommending a DLP approach.
