Section 7.66 Data Loss Prevention (DLP) Flashcards
Objectives 14 Explain the importance of using appropriate cryptographic solutions. Objectives 3.3 Compare and contrast strategies to protect data. Objectives 4.2 Explain the security implications of proper hardware, software, and data asset management. Objectives 4.4 Explain security alerting, monitoring concepts and tools. Objectives 5.1 Summarise elements of effective security governance.
Data Loss Prevention (DLP)
Aims to monitor data in use, in transit, or at rest to detect and prevent data theft
DLP systems are available as software or hardware solutions
4 Types of DLP Systems
1 Endpoint DLP System
● Installed as software on workstations or laptops
● Monitors data in use on individual computers
● Can prevent or alert on file transfers based on predefined rules
4 Types of DLP Systems
2 Network DLP System
● Software or hardware placed at the network perimeter
● Focuses on monitoring data entering and leaving the network
● Detects unauthorised data leaving the network
4 Types of DLP Systems
3 Storage DLP System
● Installed on a server in the data center
● Inspects data at rest, especially encrypted or watermarked data
● Monitors data access patterns and flags policy violations
4 Types of DLP Systems
4 Cloud-Based DLP System
● Offered as a software-as-a-service solution
● Protects data stored in cloud services
