Data Leakage
What is Data Leakage?
The unauthorized transmission of data from within an organization to an external destination, whether intentional or accidental.
Terms that appear alongside data leakage
Each of these is named in at least one of the same controls as data leakage. The number is how many controls name both.
- encryption 2 shared controls
- vulnerability 2 shared controls
- sensitive information 2 shared controls
- nist 2 shared controls
- incident response 2 shared controls
- isolation 2 shared controls
Frameworks that govern data leakage
What the standards actually require on data leakage
Requirements naming data leakage across 6 standards, quoted from the control text.
Equivalent data leakage prevention arrangements are ensured at vendor-managed facilities.
rbi-cybersecurity-framework-for-banks::52 · Para 52: similar data leakage arrangements at vendor-managed facilities →Every system, network and other device that handles, holds or sends sensitive information is to be covered by measures that stop data leaking.
iso-27001-2022::8.12 · Data leakage prevention →Every system, network and other device that handles, holds or sends sensitive information is to be covered by measures that stop data leaking. Purpose: spot and stop people or systems disclosing or taking out information without authorization.
iso-27002-2022::8.12 · Data leakage prevention →The FSP must ensure that endpoint devices including laptops and PCs used to process personal data are secured with disk encryption and data leakage prevention tools.
rbf-guideline-4-protection-of-consumer-data-and-privacy-2024::6e.vii · Paragraph 6e.vii Endpoint disk encryption and leakage prevention →Highly restrict use of USB ports on computer equipment to minimise data leakage or introduction of unauthorised software.
ASIC-CR-PR-5 · Restricted removable media / USB access →The entity must document and implement policies, procedures, protocols and tools, based on the data classification and risk assessment, that keep data available, authentic, intact and confidential during network transmission with a way to check compliance;
dora-rts-on-ict-risk-management-framework-commission-delegated-regulation-eu-2024-1774::14 · Article 14: Securing information in transit →Questions people ask about data leakage
What is Data Leakage?
Why is Data Leakage important for compliance?
Which compliance frameworks address Data Leakage?
Where can I learn more about Data Leakage?
See how Data Leakage applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.