{"id":331,"date":"2015-06-24T12:05:21","date_gmt":"2015-06-24T09:05:21","guid":{"rendered":"http:\/\/www.endpointprotector.com\/blog\/?p=331"},"modified":"2015-10-02T16:41:56","modified_gmt":"2015-10-02T13:41:56","slug":"how-do-you-know-your-data-loss-prevention-solution-is-efficient","status":"publish","type":"post","link":"https:\/\/www.endpointprotector.com\/blog\/how-do-you-know-your-data-loss-prevention-solution-is-efficient\/","title":{"rendered":"How do you know your Data Loss Prevention solution is efficient?"},"content":{"rendered":"<p><span style=\"font-size: medium;\"><span lang=\"en-US\">Since Data Loss Prevention technology has been developed, there are some questions that always pop-up in the mind of customers, analysts, journalists, etc.: <\/span><\/span><\/p>\n<ul>\n<li><span style=\"font-size: medium;\"><span lang=\"en-US\">How do we measure the Return of Investment? <\/span><\/span><\/li>\n<li><span style=\"font-size: medium;\"><span lang=\"en-US\">How do we know that our DLP is efficient? <\/span><\/span><\/li>\n<\/ul>\n<p><span style=\"font-size: medium;\"><span lang=\"en-US\">These are perfectly justified questions and we thought of some metrics that could help determine whether DLP is worth the investment.<\/span><\/span><\/p>\n<p><span style=\"font-size: medium;\"><span lang=\"en-US\">First of all, Data Loss Prevention purpose is to prevent breaches from happening. Depending on each vendor\u2019s solution, the IT Admin has the option to either block the transfer of confidential data through different channels and have all attempts recorded, or allow it, but have all transfers reported. So, measuring the success of a DLP solution depends also on how the company uses it. <\/span><\/span><\/p>\n<p><span style=\"font-size: medium;\"><span lang=\"en-US\">In the first situation, the <\/span><\/span><span style=\"font-size: medium;\"><span lang=\"en-US\"><b>number of attempts and their severity\u00a0<\/b><\/span><\/span><span style=\"font-size: medium;\"><span lang=\"en-US\">would be a good metric to realize if the tool is efficient or not. It\u2019s about looking at quantitative data, but more at the qualitative information. One employee trying to upload 20 documents with staff e-mail addresses on Dropbox is not the same as one employee trying to upload 20 documents with Credit Card Numbers on Dropbox, or other cloud app. To have a report on this type of incidents with their number and severity gives the interested parties a good idea on the efficiency of the DLP system.<\/span><\/span><\/p>\n<p><span style=\"font-size: medium;\"><span lang=\"en-US\">In the second situation which involves looser policies to allow the transfer of confidential data, but record all transfers, the Admin should take into consideration that situation changes because the DLP solution is not actually preventing breaches, but it gives visibility on the users\u2019 activity related to confidential documents. The efficiency in this case comes from the <\/span><\/span><span style=\"font-size: medium;\"><span lang=\"en-US\"><b>capability of capturing the events according to the established criteria and the response time<\/b><\/span><\/span><span style=\"font-size: medium;\"><span lang=\"en-US\"> for the Admin, which can rapidly change policies and block the transfer of specific data \/ files, or report incidents to the management for further measures. <\/span><\/span><\/p>\n<p><span style=\"font-size: medium;\"><span lang=\"en-US\"><b>Employees\u2019 number of complaints<\/b><\/span><\/span><span style=\"font-size: medium;\"><span lang=\"en-US\"> is also a good indicator of the DLP software efficiency. If the moment of DLP deployment coincides with the increase of users\u2019 complaints because their daily tasks are affected, there are two possible causes: the DLP is extremely intrusive and affects staff productivity, or the policies are not fine tuned to eliminate this type of situations. It is specific for Data Loss Prevention efficiency to depend also on the capability of adjusting policies according to desired objectives, not only on the provided features. So, a DLP is as efficient as the techniques used to fine tune the rules and policies are.<\/span><\/span><\/p>\n<p><span style=\"font-size: medium;\"><span lang=\"en-US\">Finally, the <\/span><\/span><span style=\"font-size: medium;\"><span lang=\"en-US\"><b>resource consumption<\/b><\/span><\/span><span style=\"font-size: medium;\"><span lang=\"en-US\"> in terms of staff involved in managing DLP policies and <\/span><\/span><span style=\"font-size: medium;\"><span lang=\"en-US\"><b>time spent <\/b><\/span><\/span><span style=\"font-size: medium;\"><span lang=\"en-US\">to get familiar with the software as well as analyzing reports is important when determining the efficiency of a DLP system. The objective of any business is to get the best outcome with minimal resources, or at least this is the ideal situation. If the entire IT department composed out of 5 people have their hands full managing and dealing with the DLP tool, it is not a good sign. The TCO can be calculated based on costs of the tool itself and the associated costs. The more intuitive the management console of the DLP is the lower the learning curve, thus lower required resources.<\/span><\/span><\/p>\n<p><span style=\"font-size: medium;\"><span lang=\"en-US\">Taking into consideration the current threat landscape and the increased number of breaches caused by insiders, demand for Data Loss Prevention is constantly rising. Businesses should properly establish the criteria to evaluate the available solutions and once chosen, to apply some of the metrics mentioned before. This will help determine the efficiency of the software. Just implementing it and thinking compliance is met does not guarantee threats are mitigated. Bottom-line, DLP is a process, not a one-time implementation.<\/span><\/span><\/p>\n<p>This article\u00a0was originally posted as a podcast on <a href=\"http:\/\/www.net-security.org\/article.php?id=2313\" target=\"_blank\">net-security.org<\/a><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Since Data Loss Prevention technology has been developed, there are some questions that always pop-up in the mind of customers, analysts, journalists, etc.: How do we measure the Return of Investment? How do we know that our DLP is efficient? These are perfectly justified questions and we thought of some metrics that could help determine &hellip; <\/p>\n<p class=\"link-more\"><a href=\"https:\/\/www.endpointprotector.com\/blog\/how-do-you-know-your-data-loss-prevention-solution-is-efficient\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;How do you know your Data Loss Prevention solution is efficient?&#8221;<\/span><\/a><\/p>\n","protected":false},"author":5,"featured_media":332,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-331","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-loss-prevention","entry"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/331","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/comments?post=331"}],"version-history":[{"count":8,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/331\/revisions"}],"predecessor-version":[{"id":338,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/posts\/331\/revisions\/338"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/media\/332"}],"wp:attachment":[{"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/media?parent=331"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/categories?post=331"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.endpointprotector.com\/blog\/wp-json\/wp\/v2\/tags?post=331"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}