data loss prevention - cisco20 rsa data loss prevention suite dlp datacenter monitor sensor enforce...
TRANSCRIPT
![Page 1: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/1.jpg)
Data Loss Prevention
Edmund Tsui
Technology Consultant
![Page 2: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/2.jpg)
2
Agenda
Overview of data loss prevention
Embarking on a data loss prevention project
RSA Data Loss Prevention Suite
Summary
![Page 3: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/3.jpg)
3
Overview of data loss prevention
![Page 4: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/4.jpg)
4
Why do we need to prevent data loss?
Protect information from accidental disclosure
Protect information from malicious intent
Meet regulatory compliance requirements
![Page 5: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/5.jpg)
5
Consequences of data loss
Company reputation
Lost of customer confidence = business lost
Legal prosecution
Costs
Employee productivity & morale
Job
![Page 6: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/6.jpg)
6
Cost of Data Loss
Study conducted by Ponemon Institute
Average cost of data loss is $197 per customer record in 2007
Lost data translates to lost business opportunity
Other costs include:– Customer support costs such as information hotlines
– Reputation management
– Productivity
– Legal
Source: The Cost of Data Loss article from InformationWeek dated 28 Nov, 2007.
![Page 7: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/7.jpg)
7
Causes of data loss
Employees
Outsourcing
Contractors
Consultants
Partners
Laptops
Thumbdrives
Mobile Devices
Security Breaches
![Page 8: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/8.jpg)
8
Embarking on a data loss prevention project
![Page 9: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/9.jpg)
9
Data loss prevention project activities
State objectives & benefits
Get executive sponsors
Define the project scope
Gather resources
Project tasks planning and allocation
Implementation
Tracking and reporting
Project closure and lessons learned
Repeat
![Page 10: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/10.jpg)
10
Best Practice 1: Prioritize Data According to Governance, Risk & Compliance
Take stock of enterprise data
Basic guidelines for evaluating data:
![Page 11: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/11.jpg)
11
Best Practice 1: Prioritize Data According to Governance, Risk & Compliance
Understand what industry or government regulations which your organization must comply
Evaluate the risk and impact of data breach for each type of data
Prioritize risks and address the most serious threats first
![Page 12: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/12.jpg)
12
Best Practice 2: Start at the Root of the Problem
Create an inventory of this data stored across the network
For a start, only scan for a set of highly sensitive data instead of all the data
![Page 13: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/13.jpg)
13
Best Practice 3: Build a Project Plan to Operationalize DLP
Includes clearly defined and achievable benchmarks
Includes steps to reach these benchmarks
Aim of project plan is to ensure DLP solution is fully integrated with day to day operations
![Page 14: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/14.jpg)
14
Best Practice 4: Leverage Cross-functional Teams
Involve key business team members from across the organization
Get their feedback on policies and remediation actions
![Page 15: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/15.jpg)
15
Best Practice 5: Promote a Culture of Data Protection and Awareness
Technology and policies alone is not sufficient
Should continuously promote the importance of protecting sensitive data
Provide security awareness training on an ongoing basis
Establish ownership of data
![Page 16: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/16.jpg)
16
Best Practice 6: Expand Coverage
After discovering and protecting highly sensitive data, what next?
Decide whether to implement additional safeguards, or
Expand the data segments covered to medium and lower business impact segments
![Page 17: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/17.jpg)
17
RSA Data Loss Prevention Suite
![Page 18: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/18.jpg)
18
DLP Network
DLP Endpoint
DLP Endpoint
DLP EndpointDLP Datacenter
DLP EndpointDLP Datacenter
RSA Data Loss Prevention Suite
DLP RiskAdvisor -PS
![Page 19: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/19.jpg)
19
RSA DLP Discovery Scalability and Performance
RSA DLP Discovery technology provides unmatched performance and scalability via a unique distributed agent architecture
![Page 20: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/20.jpg)
20
RSA Data Loss Prevention Suite
DLP Datacenter
Monitor Sensor
EnforceInterceptor
ICAP Server
DiscoverSoftware (Agents)
EnforceSoftware (Agents)
Discover File shares, SharePoint sites, Database files, SAN/NAS
Remediate Delete, quarantine, move
Monitor Email (SMTP, IMAP), HTTP/S, FTP, P2P, IM/Chat, etc.
Enforce Block, Notify, Alert, Encrypt
Discover Laptops and desktops with Windows 2000 SP4 or higher OS
Allow/Block Copy, print, save, USB, burn, etc.
DLP Endpoint
DLP Network
ENTERPRISE
MANAGER
Software(Grid or Agents)
DLP RiskAdvisor
PSEngagement
![Page 21: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/21.jpg)
21
Microsoft uses RSA DLP Suite
“Grid processing and incremental scanning were essential for Microsoft given the volume of data that we store. Also, RSA DLP Datacenter generates matched files with an accuracy rate consistently at or above 98%.”
Olav OpedalSecurity Program, Microsoft
![Page 22: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/22.jpg)
22
Cisco & RSA Collaboration
![Page 23: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/23.jpg)
23
Cisco & RSA Collaboration
RSA and Cisco will work closely together to develop joint solutions
Cisco intends to integrate data-classification technology from the RSA’s DLP Suite with Cisco’s DLP capabilities in the network and on desktop and server endpoints
RSA plans to take advantage of the various Cisco policy enforcement points with the RSA DLP Suite
![Page 24: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/24.jpg)
24
Summary
Technology alone is not sufficient
Everyone in the organization must play a part
Make data loss prevention part of organization culture
Use a proven market solution to facilitate the data loss prevention efforts
![Page 25: Data Loss Prevention - Cisco20 RSA Data Loss Prevention Suite DLP Datacenter Monitor Sensor Enforce Interceptor ICAP Server Discover Software (Agents) Enforce Software (Agents) Discover](https://reader034.vdocuments.site/reader034/viewer/2022052518/5f0b5e317e708231d4302c13/html5/thumbnails/25.jpg)
Thank you!