🧯
Data Loss Prevention (DLP)
Data Management
Controls that detect, monitor, and prevent unauthorized data exfiltration across endpoints, email, and cloud services.
Definition
DLP uses classification and content inspection to enforce policies on email, endpoints, and cloud apps. Tuning is needed to reduce false positives while catching real leaks.
In plain English
Controls that detect, monitor, and prevent unauthorized data exfiltration across endpoints, email, and cloud services.
Why this matters
Why it matters: Helps protect personal data from accidental sharing and insider risks.
Example
Example: Block uploads of PII to unapproved storage and require encryption for sensitive exports.