Data loss prevention (DLP)
- Term
- Data loss prevention (DLP)
- Exam
- CISA & CISM
- Definition
Tools and processes that detect and prevent sensitive data leaving through unauthorized channels.
- Explained
DLP detects and blocks sensitive data leaving through email, web, cloud or removable media. It depends on knowing which data is sensitive, so classification comes first, and rules must be tuned to keep alerts meaningful.
- In practice
An email containing card numbers is blocked before leaving the organization.
- Often confused with
- Encryption
- Exam angle
Start with classifying the data to protect.
- Related
Data owner ยท Security information and event management (SIEM)