Data loss prevention (DLP)
We identify your organization's sensitive data and stop it from leaving through email, cloud storage, printers, or removable media.
Channels
Where data leaves the organization
Most insider cases come down to carelessness: the employee means no harm and simply takes the easier route.
Email
A document sent to a personal account, or a mailbox rule that forwards messages to an external address.
Cloud storage
A file uploaded to personal storage, which from then on sits outside the organization's control.
Printer
A printed sensitive document. Once it is on paper, nothing tracks where it goes.
Removable media
Data copied to a USB drive. Copying in large volumes is one of the signs worth watching for.
The process
How we roll it out
The rollout starts by mapping your sensitive data and ends by setting down how events are handled.
-
Data classification
We define what counts as sensitive data and where it is stored. Without this, there is no way to monitor how the data moves.
-
Rules per channel
Based on the classification, each channel gets its own rules: which categories of data may leave, which may leave only if logged, and which may not leave at all.
-
Starting in monitor mode
In this phase the rules only log. The log shows which rule would get in the way of a legitimate workflow.
-
Gradual enforcement
Once tuned, the rules switch to blocking one at a time, so a single misconfiguration cannot halt several departments' work at once.
-
Reporting and DLP event handling
We set down who receives the reports, who investigates a flagged event, and what to do if a real leak is suspected.
Deliverables
What you get at the end
items handed over
- Data classification scheme
- DLP rules per channel
- Start in monitor mode, followed by gradual enforcement
- Reporting and DLP event handling process
Related services
What goes with DLP
Data loss prevention either builds on these areas or complements them.
GenAI data loss prevention
Builds on this service and applies it specifically to traffic going to AI services.
Microsoft 365 security hardening
Tightening the tenant's external sharing and email settings.
Email security
The inbound direction: protection against phishing emails, malicious attachments, and malicious links.
Identity and access management (IAM)
People can't take out data they can't access. This is where we sort out who has access to what.
Frequently asked questions
The questions we hear most
Does DLP monitor employees?
DLP monitors events: what data is being sent, and over which channel. Employee monitoring in Hungary is subject to strict conditions (prior notice, proportionality, and purpose limitation), and the monitoring must also be documented in the privacy notice.
Is it enough for DLP to block the risky channel?
Not on its own. Most insider incidents happen because the official route is cumbersome. Alongside the block you also need a usable alternative, because without a working solution, blocking only hides the problem.
Does encryption replace data loss prevention?
No. For anyone with authorized access, the system decrypts the data, so whatever leaks out through the application leaves in decrypted form. Encryption protects you when the key was not available at the moment the data got out, for example on the disk of a stolen laptop.
