What is included

Data protection is a sequence: find where the data is, restrict access, close the outgoing channels, watch for violations.

Discuss the scope

Information classification

We divide data by value: public, internal use, confidential. Without this everything has to be protected identically.

Media encryption

Laptop disks and removable drives. Losing an encrypted laptop is an annoyance, losing an unencrypted one is an incident with a regulator notification.

Removable media control

Approved drives on a list, recording of actions, a ban for departments handling sensitive data.

Mail and print control

Restricting the sending of attachments outside and the printing of classified documents.

Leak prevention

Systems that control transmission channels with rules based on your classification.

Incident review

A response procedure and reporting on alerts.

How the work runs

The rollout always goes from simple to complex: organisational restrictions first, technical systems afterwards.

01

What we protect

We define the list of genuinely valuable information. Usually that is 5 to 10 percent of all the company data.

02

Quick restrictions

Laptop encryption, restricting removable drives in critical departments, putting the rights in order.

03

Channel control

We deploy the system in observation mode, gather the real picture and tune the rules.

04

Blocking

We switch the rules to prevention only once the stream of false alerts has been reduced to something reasonable.

A leak prevention system switched straight into blocking mode paralyses the work. The right order is a month of observation, a review of what is actually happening, tuning the rules to the real processes, and only then blocking.

Frequently asked questions

Monitoring corporate channels is legal when the conditions are met: staff have been notified by signature, the documents state that the means of communication are for work purposes, and the monitoring does not extend to private correspondence. We prepare that part too.

No. A substantial share of the leak channels is closed by built in tools: removable media policies, mail server rules, restricted rights. A separate system is justified when the data is highly valuable and evidence is needed for a formal process.

With disk encryption on laptops and restricting removable drives. That is almost free and closes the two most common data loss scenarios: a lost device and data carried out on a drive.

We will work out what to protect and how

Tell us which information is critical for you. We will propose measures from the simplest to the most complex with a cost estimate.