Data Loss Prevention
What is Data Loss Prevention?
Technologies and processes that detect and prevent unauthorized transmission, sharing, or leakage of sensitive information outside the organization.
Terms that appear alongside data loss prevention
Each of these is named in at least one of the same controls as data loss prevention. The number is how many controls name both.
- encryption 8 shared controls
- data protection 7 shared controls
- data classification 4 shared controls
- compliance 4 shared controls
- iso 27001 3 shared controls
- nist 3 shared controls
- audit 3 shared controls
- encryption at rest 3 shared controls
Frameworks that govern data loss prevention
What the standards actually require on data loss prevention
Requirements naming data loss prevention across 6 standards, quoted from the control text.
A data loss prevention strategy and approach are formally established to spot and stop sensitive data leaving the organization's network and controls, whether on purpose or by mistake, using directive, preventive and detective controls over data in use, in mot...
edm-council-cdmc-cloud-data-management-capability-framework::4.1.4 · 4.1.4 A Data Loss Prevention program is established →Agencies should consider putting Data Loss Prevention (DLP) technologies in place.
new-zealand-information-security-manual-nzism::21.4.14.C.02 · 21.4.14.C.02 Consider Data Loss Prevention for BYOD →Outbound web and email data loss prevention to detect and block large or unusual volumes of data or sensitive data being transferred.
ASD37-27 · Outbound data loss prevention (Very Good) →Deploying a data loss prevention tool on outgoing email must be fully justified to balance the employer's interest with employees' rights, because false positives expose legitimate and personal messages.
article-29-working-party-opinion-2-2017-on-data-processing-at-work-wp249::5.3(f) · 5.3(f) Data loss prevention: transparent rules and a warning before an email is blocked →Put in place an automated tool, for example host-based DLP, that finds all sensitive data stored on, processed by or sent through enterprise assets, whether on site or with a remote service provider, and that updates the enterprise inventory of sensitive data.
CIS-3.13 · Deploy a Data Loss Prevention Solution →Deploy an automated tool, for example host-based data loss prevention, to find sensitive data stored, processed or sent through enterprise assets, whether held in house or with an outside provider, and use what it finds to update the data inventory.
cis-controls-v8-1::3.13 · Deploy a Data Loss Prevention Solution →Questions people ask about data loss prevention
What is Data Loss Prevention?
Why is Data Loss Prevention important for compliance?
Which compliance frameworks address Data Loss Prevention?
Where can I learn more about Data Loss Prevention?
See how Data Loss Prevention applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.