Every organisation has seen cases of e-mails being sent to the wrong recipient, either intentionally, or in error. In addition, company documents are frequently uploaded to external Web sites.
So said Amnon Bar-Lev, VP of global field operations at Check Point, during his keynote address, at CXP 2010, in London, yesterday. “This has happened to all of us and the question is: what is being done about it today? Security vendors offer sophisticated systems that analyse data files, determine security levels and create reports.”
However, he says these sorts of solutions are not enough, as they are used in detect mode only, and are overly complex and take months to set up. “Data loss prevention (DLP) is not only about technology, but about people, policies and processes as well.”
With this in mind, the security giant unveiled Check Point DLP, a solution that involves users in the process. “Before sending a potentially sensitive e-mail, users are warned that it might be a violation, and are provided with a reason. They can take the decision of whether to continue sending the mail or not. This gives them the opportunity to double-check that the mail is going to the intended recipient.”
He says this gives the company far more meaningful logs, and puts the user back in the equation, making them accountable for their decisions. It will educate people, let them know they are being watched, and enforce company policy surrounding data leakage.
The network-based DLP product makes use of a classification engine that monitors any traffic flow, where the human factor is in play. The software will catch known data strings, and data that is clearly financial. It can detect over 250 data types and 600 file formats.
Check Point DLP will look at and co-ordinate sensitive unclassified data strings, and issue an alert if there are too many keywords in a predefined threshold.
In line with its “simpler” philosophy, Check Point says the formation and management of DLP policies is extremely easy and fast.
Share