Definitions: Data Loss Prevention

Definition

Data loss prevention (DLP) is used in reference to computer security systems that can monitor and protect electronic data as it is used, when it travels across a network, and when it sits in a storage server. DLP systems use deep content inspection to inspect the data, detect any unauthorized use, and prevent the transmission of sensitive information.

Business applications

Almost all businesses process some sort of sensitive data that should not be viewed by sources outside of the company. In the case of healthcare  companies, companies that deal with credit card transactions, and even law firms, there are many government policies and regulations that dictate how data must be secured. A company’s financial data is even subject to Sarbanes-Oxley data compliance standards.

For businesses, DLP is not just a good idea; it’s a requirement, often by law. To comply with regulations, or just to ensure that business data is secure, there are two types of DLP systems: network-based and host-based. There are many DLP vendors who offer such systems to help contain and protect confidential company data.

Concerns

Besides the actual fear of data loss itself, government regulations are probably the largest concerns when a company considers options for DLP. In addition to government-mandated requirements, many states have passed laws concerning notification of customers if their data has been  breached.

Technical details

Network-based DLP involve the use of dedicated hardware and software systems, which are usually connected directly on the network. The  systems work by analyzing all network traffic and identifying any unauthorized data transmissions.

Host-based DLP systems are used on individual workstations or servers. Such systems can control the flow of information between groups of users, and some can even help block users from sending out confidential data.