-: Data loss prevention.
Data loss prevention, or DLP systems,
are designed to protect data
by conducting content inspection of your data
as it's being sent out of your organization's network.
While data loss prevention is the most commonly used term,
it's also referred to as ILP
for Information Leak Prevention,
or EPS, Extrusion Prevention Systems.
Usually, these systems are installed
as a network-based DLP or a Cloud-based DLP.
For example, my company happens to use a Cloud-based DLP
through Google's G Suite.
Anytime one of our employees tries
to send information outside of our own domain through email,
that email is flagged and they have to verify
that they understand the data is being sent
outside of Dion Training.
We have our DLP set to low
because we communicate with so many people
outside of our organization on a daily basis.
But if we wanted to, we could force a higher security level
and make each email being sent be checked
and verified by a third employee
before it was sent out
to ensure that no confidential data
was being left outside of our network.
Now, there's also automated ways to do this,
so you can flag particular emails
based on keywords or a no-no list
and prevent any files or emails from being transferred
with those keywords inside of them.
It all depends on how you want to configure your DLP.
DLPs are used to ensure your data stays within your network,
that it isn't leaked out to outsiders,
and that the privacy
of your confidential data remains private.
That's the whole goal here.
We want to make sure that data isn't being sent
outside of your network over and over again
and have this massive data exfiltration going on.
DLP systems can help you with that.