We partner with some of Ireland's most innovative and exciting technology providers. This is the first of our 'Partner Spotlight' series about topics that are important to us and we think you will find interesting too.
First up under the 'Partner Spotlight' is supportIT sharing with us their latest developments in data loss prevention and GDPR compliance.
Stricter guidelines around data protection pose a significant challenge to businesses and prevent them from taking full advantage of cutting-edge cloud services.
What is Data Loss Prevention?
Data loss prevention software detects potential data breaches/data ex-filtration transmissions and prevents them by monitoring, detecting and blocking sensitive data while in-use, in-motion, and at-rest. Data Loss Prevention tools now allow companies to protect sensitive information from falling into the wrong hands, a truly revolutionary solution to the question of data control.
Controlling how data is used, stored, accessed and distributed is the only way to 100% guarantee compliance in this area, a near impossible task for any organisation. In the last 24 months, however, advances in Data Loss Prevention (DLP) tools now allow companies to protect sensitive information from falling into the wrong hands, a truly revolutionary solution to the question of data control.
How do DLP products work?
DLP products work by monitoring occurrences that can lead to information leakages by using a defined set of rules and policies. Deployment strategies vary depending on the requirements of the business.
What DLP products are available?
Depending on the end point you want to protect there are three types:
Network DLP tools are integrated with data transit points on the network and scan all content passing through the ports and protocols of the company. Through reporting, organisations can see what data is being used, who is sending it and where it is going.
Suitable for Cloud Services, Storage DLP allows you to view confidential files stored and shared by your users and block and sensitive information to prevent leakage.
Endpoint DLP is recommended for endpoint devices that are used for transporting files like PC/Laptops, USB drives and mobile devices. The solution allows the organisation to monitor and prevent the output of sensitive data.
What must companies consider about DLP?
According to supportIT CEO Joe McGivern, caution is advised.
"Companies often throw themselves into compliance projects product-first and this is an ill-advised approach. Because Data Loss Prevention is policy-led; the success of the implementation rests on;
a) the knowledge of the type of data held
b) what constitutes sensitive data and
c) processes around data storage, distribution and control.
We strongly advise a consultancy process at the start to inform the technology solution you choose and guide the deployment in terms of what policies and rules need to be set up."
What DLP products does supportIT recommend?
supportIT currently recommends Endpoint Protector by CoSoSys for Endpoint Protector requirements.
"We have just finished a successful deployment of Endpoint Protector by CoSoSys with one our compliance clients and it was a great benchmark for this type of project; it deployed relatively easy and it is now integrated into their business processes. Most importantly, my client is now fully confident that the data being transferred out of the organisation does not contain confidential information."
Joe also recommends that clients review existing technology tools within the business to see if they already have DLP functionality.
"Office365 has a Data Loss Prevention module within the main console in the security settings. Rules and policies can be set up against data loss parameters and organisations just need to contact their Office365 provider to ensure they have the correct licensing requirements in place."
Data Loss Prevention is the next generation in data protection; organisations who embrace the change will reap the benefits of more control and a higher level of compliance in this area.
For more from supportIT, visit their website www.supportIT.ie
