What is DLP?
Data loss prevention (DLP) is the set of technologies and processes that stop sensitive data leaving an organization without permission. It recognizes data such as customer records, source code and contracts, watches the ways it can leave, and applies a policy: monitor, warn, record or block. Modern DLP also covers cloud and AI apps.
How does DLP work?
-
Recognize
Labels and content checks say what the data really is.
-
Watch
Endpoint, email, web, cloud and AI apps are the ways out.
-
Decide
A policy chooses to monitor, warn, record or block.
-
Keep evidence
Each decision is recorded with what matched and why.
What does a DLP decision look like?
- Data
- Customer list, Confidential
- User
- Account manager
- Destination
- Personal webmail
- Policy
- Customer data: company recipients only
- Decision
- Block stopped, reason shown
Where is DLP in GuardStance?
One policy covers endpoint, email, web, cloud and AI apps, from one agent.