Information classification
We divide data by value: public, internal use, confidential. Without this everything has to be protected identically.
Data protection is a sequence: find where the data is, restrict access, close the outgoing channels, watch for violations.
We divide data by value: public, internal use, confidential. Without this everything has to be protected identically.
Laptop disks and removable drives. Losing an encrypted laptop is an annoyance, losing an unencrypted one is an incident with a regulator notification.
Approved drives on a list, recording of actions, a ban for departments handling sensitive data.
Restricting the sending of attachments outside and the printing of classified documents.
Systems that control transmission channels with rules based on your classification.
A response procedure and reporting on alerts.
The rollout always goes from simple to complex: organisational restrictions first, technical systems afterwards.
We define the list of genuinely valuable information. Usually that is 5 to 10 percent of all the company data.
Laptop encryption, restricting removable drives in critical departments, putting the rights in order.
We deploy the system in observation mode, gather the real picture and tune the rules.
We switch the rules to prevention only once the stream of false alerts has been reduced to something reasonable.
A leak prevention system switched straight into blocking mode paralyses the work. The right order is a month of observation, a review of what is actually happening, tuning the rules to the real processes, and only then blocking.
Monitoring corporate channels is legal when the conditions are met: staff have been notified by signature, the documents state that the means of communication are for work purposes, and the monitoring does not extend to private correspondence. We prepare that part too.
No. A substantial share of the leak channels is closed by built in tools: removable media policies, mail server rules, restricted rights. A separate system is justified when the data is highly valuable and evidence is needed for a formal process.
With disk encryption on laptops and restricting removable drives. That is almost free and closes the two most common data loss scenarios: a lost device and data carried out on a drive.
Tell us which information is critical for you. We will propose measures from the simplest to the most complex with a cost estimate.
Request received
We can already see it. We will reply within one business day, and for urgent matters we will bring in the on-duty engineer right away.
City not found. Please check the spelling.