Learn in the textbookAdvanced Threat Protection and Network Architecture / Communication Security
DefinitionDLP identifies the content of data that must be protected, such as confidential or personal information, and blocks it or issues a warning when it is about to leave the organization.
ExplanationRules defining what counts as confidential, such as keywords it contains or the type of document, are registered in advance, and data is stopped only when matching content moves through email, copying to external storage or printing. Because DLP watches the data itself rather than the user, it can also catch mistaken sends or removals by employees who hold legitimate access rights.
AnalogyIt is like the staff at a building exit who check bags. No matter who is carrying them, documents that must not leave are kept inside.
Memory hookShort for Data Loss Prevention. Here, loss does not mean data getting corrupted; it means data slipping out of the organization.