Data is the backbone to any company and if that data is sensitive to their industry, that data needs to be tracked to know where it is going.  Data Leak Prevention software will audit the data movement around the office and out of the office.  The software can be used to block any data that is labeled as sensitive/secret or from a disgruntled employee from trying to save a bunch of data to a USB flash drive.

The DLP software analyzes the data for various industry compliances & regulations such, as HIPAA or PCI.

Data leak protection

• Ensure the use of only safe removable storage devices in your organization by using blocklists to restrict unvetted devices.

• Avoid data exposure by blocking high-risk file copy activities to USB devices and across local and network shares.

• Granularly control the use of various endpoint devices, including Wi-Fi, Bluetooth, CD/DVD drives, and more.

• Prevent files containing highly sensitive data—such as PII or ePHI—from being shared via email (Outlook) as attachments.

• Spot instances of abnormal user behavior and stop files from being exfiltrated via external storage devices.

• Delete or quarantine files, stop USB data transfers, or choose from other predefined active remedies to prevent data leaks.

The DLP tool can:

• Block sensitive files from being moved via USB drives or email (Outlook).

• Selectively lockdown USB ports and unlock them right from the UI with ease.

• Know who's copying what data across their local machine and to USB devices.

• Identify who's accessing your organization's most sensitive data and from where.

• Identify and investigate who has printed what type of data and from where.

• Limit the use of Wi-Fi, Bluetooth, CD/DVD drives, keyloggers, and more.

• Track, control, and restrict the execution of suspicious and high-risk applications.

• Monitor file activities across browsers to detect potential uploads and downloads.

• Instantly warn negligent users against unauthorized file actions using pop-ups.

• Set removable storage devices with read-only access criteria.

Locate all personal data

• Monitor enterprise storage environments and receive reports on the volume, type, and trends in the storage of sensitive data.

• Scan for passport numbers, email addresses, credit card numbers, and over fifty other types of personal data with preconfigured and customizable data discovery policies.

• Configure alerts to instantly detect discovered data that violates enterprise storage policies and respond by executing custom scripts.

Classify files based on sensitivity

• Automate the classification of files containing PII/ePHI to better understand which files need elevated data security measures.

• Enable incremental scanning of new and recently modified files to reduce data discovery scan times, and ensure there are no blind spots where PII can be concealed.

• Analyze the risk associated with files by viewing details on the amount and type of personal data they contain. 

Comply with IT regulations

• Avoid the risk of non-compliance and associated penalties by generating periodic reports on the location and amount of sensitive data stored in your environment.

• Identify files containing cardholder data and check if they are sufficiently protected as regulated by PCI DSS with the risk analysis tool.

• Utilize preconfigured policies to uncover GDPR-regulated personal data such as citizenship numbers, passport numbers, and more.

• Easily locate files with ePHI, ensure that accesses and modifications to them are suitably audited, and streamline HIPAA and HITECH compliance.

Analyze files and permissions

• Identify employees who can access files containing personal information, and verify whether the access rights are required for their role.

• Locate unopened, unmodified, and duplicate files containing personal data, and manage them based on their business value.

• Identify overexposed sensitive files, and automatically delete them or quarantine them in a more secure location.

Audit file and folder accesses

• Monitor and report on a wide range of file activities including create, delete, modify, overwrite, rename, move, read, etc. in real time.

• Track and record a complete audit trail of all files copied by auditing your clipboard for Ctr+C and right-click copy actions.

• Audit and analyze both successful and failed file access attempts made by your employees to prevent future security issues.

• Maintain a detailed record of all file activities, along with details on who accessed what, when, and where.

• Analyze audit data to identify your organization's most active user, most accessed file, process used to access most files, and more.

Detect and quarantine ransomware attacks

• Spot ransomware attacks quickly using telltale indicators such as sudden surges in file rename, move, and permission change activities.

• Notify admins and other stakeholders instantly via email as soon as the potential ransomware attack takes root.

• Use an automated incident response system to shut down the infected device, disable or disconnect the rogue user's session, and more.

• Use our actionable, accurate audit data to conduct a root cause analysis to identify patient zero and how the infection spread.

• Locate ransomware-corrupted files using our prebuilt, up-to-date library of known ransomware file types to protect your organization's critical data.

Monitor file integrity to detect potential threats

• Generate instant email notifications when there is a sudden spike in failed attempts to modify or delete business-critical files.

• Spot privilege abuse early on by tracking frequent permission changes, SACL changes, owner changes, and more.

• Stay aware of indicators of compromise, such as a file activity during non-business hours, and more.

• Identify the root cause of critical security events using detailed forensic data, and generate clear and concise audit records.

• Selectively monitor and scrutinize the file activities of untrustworthy users and groups for unwarranted activities.

Get instant file change notifications

• Trigger instant email alerts on observing anomalous changes, like when an unusual volume of files are deleted, overwritten, or moved.

• Spot malware intrusions by looking out for a sudden spike in file modifications in a short period, and trigger instant threat response mechanisms.

• Create and manage custom alerts to spot organization-specific issues like hoarding of media or large files.

• Categorize and analyze alert data based on its severity, i.e., attention, trouble, and critical.

• Actively monitor your file servers for signs of compromise, such as multiple permission changes, file extension modifications, etc.

Automate and simplify GLBA compliance using DataSecurity Plus

• The Gramm-Leach-Bliley Act (GLBA)—also known as the Financial Services Modernization Act—mandates the standards that financial institutions, such as commercial banks, security firms, insurance companies, and credit unions, need to follow to ensure the confidentiality and security of their customers' financial records and personal information. Failure to comply can result in dire consequence for businesses, including imprisonment of directors and officers for up to five years, penalties up to $100,000 per violation, or both.