DLP

Definition

Explore More Terms

Examples & Use Cases

## Why It Matters in Practice
Not all threats are external attackers. Data leaks often come from:
- Insider threats
- Misconfigurations
- Accidental sharing

DLP helps prevent data exfiltration, which is often the final stage of an attack.

## Types of DLP
- Endpoint DLP (USB, local actions)
- Network DLP (email, web traffic)
- Cloud DLP (SaaS apps like Google Drive, Microsoft 365)

## Key Points
- Focuses on data classification and protection
- Helps meet regulatory compliance requirements
- Can enforce policies across multiple channels
- Balances security with user productivity

## Common Usages
- Pattern matching (credit card, NRIC, SSN)
- File fingerprinting
- Blocking uploads to unauthorized cloud apps
- Encrypting sensitive data automatically

## Real-World Example
An employee tries to upload a file containing customer credit card data to personal email.  
DLP detects the pattern and blocks the transfer instantly.

## Limitations
- False positives can frustrate users
- Requires proper data classification strategy
- Hard to enforce without impacting workflows

## Further Reading
- [Learn Microsoft - Learn about data loss prevention](https://learn.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies)
- [Forcepoint - Data Loss Prevention in the AI Era: A Complete Guide](https://www.forcepoint.com/blog/insights/data-loss-prevention-guide)
- [Crowdstrike - Comprehensive Guide to Data Loss Prevention (DLP)](https://www.crowdstrike.com/en-us/cybersecurity-101/data-protection/data-loss-prevention-dlp/)