Data Loss Prevention Best Practice #2: Identify Needs
Posted on Thu, Sep 03, 2009
The vital first step toward data loss prevention is to develop a comprehensive understanding and inventory of the various types of sensitive data that are present within the organization, as well as the policies which are needed to control and enforce how that data can be distributed and shared. To accomplish this, businesses must review the extent to which their companies or agencies are impacted by
regulatory compliance, intellectual property protection and appropriate use enforcement.
It’s critical to have a thorough knowledge of precisely how regulations apply to the overall organization, as well as to the individual users, departments and remote offices. For instance, an organization may need a solution where content is scanned and automatically encrypted to protect private information. Viewing compliance requirements in more detail makes it easier to define requirements and manage solutions.
Subsequent to determining relevant areas where effective data loss prevention strategies are needed to protect sensitive data, organizations should then consider the effect of data loss prevention on workflow. This ensures that any solution implemented is designed to be dynamic and flexible as workflow and processes shift. Lastly, a critical factor in a successful data loss prevention plan is to make sure there is executive involvement. Achieve this by identifying a champion within the “C-suite” who can provide the credibility and buy-in necessary to implement an enterprise-wide program.