Data Loss Prevention detects and blocks sensitive information leaving approved systems, reducing breach impact when paired with access controls and monitoring.
Search across headline titles and summaries.
Background for this topic.
Data Loss Prevention (DLP) encompasses technologies and policies designed to detect and prevent unauthorized transmission or exposure of sensitive data outside an organization’s controlled environment. It monitors data in use, in motion, and at rest to block or alert on actions like copying, emailing, or uploading confidential information. DLP aims to reduce risks from insider threats, accidental leaks, or external attackers exploiting compromised accounts.
Effective DLP requires accurate data classification, contextual analysis of user behavior, and integration with access controls to minimize false positives and operational disruption. It is most relevant for protecting intellectual property, personal data subject to privacy regulations, and critical business information. While DLP cannot stop all data exfiltration attempts, it strengthens defense-in-depth by enforcing data handling policies and supporting forensic investigation of suspicious activities.
A cyberespionage actor known as Tick has been attributed with high confidence to a compromise of an East Asian data-loss prevention (DLP) company that caters to government and military entities