By: Dorian Lockhart Wilston Johnston Data Loss Prevention By: Dorian Lockhart Wilston Johnston

Data Loss Prevention Data Loss Prevention (DLP) is a strategy for making sure that end users do not send sensitive or critical information outside the corporate network. The term is also used to describe software products that help a network administrator control what data end users can transfer.

10 Reasons DLP is Needed in Businesses ⇛ Not sure where the the company’s confidential data is being stored, accessed or sent. ⇛ Your company has a plan for protecting data from external intruders, but does not protect against theft and accidental disclosure of sensitive information by employees and partners. ⇛ You are concerned about the liability, negative exposure, fines and lost revenue associated with data breaches. ⇛You are concerned about your next audit and want to maintain compliance with complex regulations. ⇛You need to protect proprietary information against security threats caused by enhanced employee mobility and new communication channels. http://focus.forsythe.com/articles/19/10-Reasons-Why-Your-Organization-Needs-Data-Loss-Prevention

10 Reasons DLP is Needed in Businesses continued... ⇛ You would like to monitor your organization for inappropriate employee conduct and maintain forensic data of security events as evidence. ⇛ You are uncertain of your organization’s level of protection for confidential data in cloud applications and storage. ⇛ Your organization would like to proactively prevent the misuse of data at endpoints, both on and off the corporate network. ⇛ You would like to automate corporate governance as a means of improving compliance while saving time and resources. ⇛ You would like to gain a competitive advantage, in both brand value and reputation. http://focus.forsythe.com/articles/19/10-Reasons-Why-Your-Organization-Needs-Data-Loss-Prevention

https://www. skyhighnetworks https://www.skyhighnetworks.com/cloud-security-blog/what-are-the-top-data-loss-prevention-tools/ https://www.youtube.com/watch?v=w0mePYhPsk0

https://www.devicelock.com/products/byod-virtual-dlp.html

Review of Symantec DLP https://www.youtube.com/watch?v=KIE1phfjiic Each employee has a username (most likely synced Active Directory) Program/Agents on your company’s computer that scan for keywords Policy updates can be immediately executed. And last (month’s, year’s, quarter’s) policy can also be executed DLP reports can be filed, saved, and sent to the Security Team engineers to analysis Can be used on multiple formats (doc, docx, xlsx, pdf, ost) even in-browser application https://www.youtube.com/watch?v=KIE1phfjiic

DLP Policy Management - Human Side Enact shredding a policy to all sensitive information Create training course to educate employees on what is and not confidential Use tools like Wombat for surprise inspections https://www.wombatsecurity.com/research-and-results/case-studies-proofs-of-concept?ads_cmpid=199645754&ads_adid=12365739194&ads_matchtype=e&ads_network=g&ads_creative=178034337588&utm_term=wombat%20security&ads_targetid=kwd-27688005879&utm_campaign=&utm_source=adwords&utm_medium=ppc&ttv=2&gclid=CJyimu6HtNYCFRtWDQodbWIGyg

Legal The use of DLP system does not contradict any data protection regulations, especially when it comes to insensitive personal data. All work-related communications can also be monitored based on the statement that all employees act on behalf and as a representative of their employer. Employees will need to be aware of the DLP program. Employee who intentionally violate company DLP regulation will need to be dealt with.

Current Events & Attacks - Honda - Arby's - Intercontinental Hotels Group - Saks Fifth Avenue - U.S. Air Force - Over 60 universities and U.S. federal government organizations - Cellebrite - WannaCry Ransomware

Ways to Protect Yourself Standard Measures: Install Firewalls Antivirus, IDS’s. Client Server Architecture plans. Advanced Measures: Machine Learning Temporal Reasoning Algorithms (AI thinks) Designated Systems Exact Data Matching Structured Data Fingerprinting Statistical Methods (Published lexicons and other methods) https://www.youtube.com/watch?v=ljgt044xAM0 https://en.wikipedia.org/wiki/Data_loss_prevention_software https://digitalguardian.com/blog/what-file-fingerprinting

Questions?