Claims

Preventing data loss would always be a good practice approach in avoiding potential breach, damage, or loss of confidential, private, or proprietary information stored in the Hard disk. Very importantly it applies in preventing the movement of any sensitive data outside an organization’s secure boundary. 

Data loss prevention (DLP), which could also mean to be called data leak protection is a description of systems and technologies designed for detecting potential data breaches or attempts to move data outside an organization’s secure data storage systems. The prevention aspect comes into being as such preventive systems would monitor, detect, and then block access to or transmission of sensitive or proprietary data and information. Data loss prevention systems, in general, would provide three distinct types of protection:

• Protection In-use would be about sensitive data that is in use by applications or for service delivery. It would generally depend on various types of user authentication to establish the identity of those requesting access to the data along with access control systems that permit or deny such requests basis the user identity, job role, and security policy that governs such data. Such data could additionally remain encrypted at all times so that attempts by anyone to access paging files, memory snapshots, or temporary working files would not yield any plaintext data of any kind.

• Protection In-motion would apply when sensitive data would be in transit on a network of any kind. It would generally depend on sufficiently strong encryption tools and technologies available to mitigate the risk of eavesdropping and to lower significantly the probability of a successful decryption attack. When the data that is regulated would be more valuable, then encryption would be stronger.

• Protection At-rest would generally apply to data that resides on some kind of persistent storage platter. This usually would involve access controls to limit access to programs and users with a legitimate need to know, access monitoring to track and log all access to such information. Strong encryption is made available to protect against theft or attack against the physical platter where such data is stored.

The overall idea behind DLP would be to watch any unauthorized attempts to access sensitive data and information. It is all about taking all possible measures to block or prevent it from going out or exiting from the organization. There are very many technologies and systems involved, not all of which could be labeled as DLP, but all of that would be equally important.