Be Cautious About DLP Accuracy

When evaluating and implementing data leak prevention (DLP) technology, you need to have realistic expectations about accuracy. Policy definition is crude today, and you end up with stuff not being caught that should ideally be caught, and stuff being caught that shouldn't be caught.

Vendors know about this, although only the more courageous and honest will proactively raise the issue. Let your vendor know you have realistic expectations, and use their experience to determine what policy enforcement will be accurate, and what won't; and what to do in the latter case. In short, use their experience to determine the practical trade-offs.

... David Ferris

Post a comment

You must be logged in to post a comment. To comment, first join our community.