5. Data consolidation and network segmentation – too often our data are sourced and stored in too many disparate places, thus dissipating the effectiveness of security controls by stretching limited security resources over too many systems. If sensitive data are stored in a more limited number of repositories, we can better target our security investments to secure them.
If you can put controls like this in place and you still can make the case that DLP makes sense for your organization, you now have the happy benefit that you have greatly eased your implementation. If you cannot justify DLP, you have made great strides to better securing those data most important to your organization’s success.
Popularity: 1%
2 Comments
Yes, there is a plethora of “customer data, legal agreements, financial reporting” and so on that needs protection. And trying to block content such as this from leaking out through any number of doors and windows is next to impossible. And not necessarily desirable – sensitive content does need to move in order to meet business requirements. Rather than barring the egress points, it makes much better sense to continuously protect the data, whereever it goes. This approach also offers a simpler, more direct path for “strong data owners” to take control of data they know is sensitive. There is no way that an expensive and complex DLP solution provides the necessary flexibility. Solutions such as those [that create a secure virtual project workspace] don’t require a company-wide deployment; they’re highly efficient for individual workgroups and departments.
Thanks for the feedback. Most companies I’ve spoken with have never completed an enterprise-wide deployment of a DLP tool, but with the new Massachusetts data leakage law, I imagine organizations will be looking for manageable solutions.