Re: Data Loss Prevention Companies

[David Gillett <gillettdavid () FHDA EDU>]

As I see it, there are three major challenges to any DLP solution:

1.  Does it address physical removal and transport of devices/media?  How?

2.  Does it address encrypted network transmissions?  How?

3.  How does it recognize our sensitive data -- without its own recognition
database becoming
the juiciest target in the enterprise?

  I submit that a product without good answers to these questions falls
short of being a
"solution".

David Gillett
CISSP


  _____

From: WILLIAM I ARNOLD [mailto:WARNOLD () UT EDU]
Sent: Wednesday, November 19, 2008 11:09 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Data Loss Prevention Companies



I will update as we proceed. Thanks

Bill



From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Witmer, Robert
Sent: Wednesday, November 19, 2008 1:58 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Data Loss Prevention Companies
Importance: Low



We too at SNHU have recently initiated a process of evaluating the value of
DLP.  We are currently looking at Symantec's Vontu.  I would appreciate any
input on Data Loss Prevention companies as well.

Regards,
Bob





Bob Witmer

Information Security Officer

Southern New Hampshire University

r.witmer () snhu edu

603-645-9728