After this lesson, you will be able to: Understand DLP tooling across endpoints, networks, and cloud, and how policies are written.
DLP (Data Loss Prevention) tools watch for sensitive data in motion (network), at rest (storage), and in use (endpoint). They use pattern matching, fingerprinting, and increasingly ML to flag/block exfiltration.
Network DLP, sits at the perimeter, inspects egress traffic. Endpoint DLP, agent on laptops, blocks USB copies, prints, screenshots. Cloud DLP. Google Workspace, M365 Purview, AWS Macie scan cloud storage.
1. Discovery, scan everything, see what sensitive data exists.
2. Monitor, alert only, don't block (avoid breaking business).
3. Tune, eliminate false positives.
4. Enforce, start blocking the high-confidence rules.
5. Educate, when blocking, show user *why*.
Microsoft Purview (M365 native), Symantec DLP (enterprise legacy), Forcepoint, Digital Guardian, Google Workspace DLP, AWS Macie (S3 scanning).
Network, endpoint, or cloud DLP?
Sign in and purchase access to unlock this lesson.