Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Data Loss Prevention (DLP) in the modern Enterprise!
Rating: 4.4 out of 5(44 ratings)
197 students

Data Loss Prevention (DLP) in the modern Enterprise!

The right way to implement Data Security in modern organizations.
Created byRisal Nasar
Last updated 5/2021
English

What you'll learn

  • Key Concepts in Data Loss Prevention
  • Sensitive Data Types
  • Data Loss Prevention (DLP) Detection Methods
  • Data Loss Prevention (DLP) Deployment Types
  • Data Loss Prevention (DLP) Solution Types and how to select the best solution for the Organization
  • Data Loss Prevention (DLP) Prerequisites
  • Data Loss Prevention (DLP) Organizational Structure
  • Data Loss Prevention (DLP) Processes
  • Key Concepts in Regular Expressions
  • Confidence to author Regular Expressions
  • Regular Expressions (Regex) - How to formulate them
  • How to use regular expressions to search and find almost anything under the sun! (textual data ofcourse ;) )

Course content

4 sections62 lectures2h 7m total length
  • Introduction0:25

    Explore the technology, people, and process aspects of data loss prevention and learn how to approach building a successful DLP program in your enterprise.

  • Notes0:02
  • Data Loss Incidents5:44

    Examine major data loss incidents, from Yahoo, LinkedIn, Adobe, and eBay breaches to Marriott incidents, and their regulatory, reputational, and financial impacts, guiding strengthened data loss prevention in modern enterprises.

  • Types of Sensitive Data6:18

    Identify types of sensitive data to protect—personal data, intellectual property, access credentials, business plans, and financial data—and learn how GDP and PDP regulate purpose, consent, and 72-hour breach notification.

  • Data Formats and Data Transfer Channels3:15

    Organizations store data in databases, active directory, data warehouses, and file formats like Word, Excel, PDF; transfer channels include email, instant messaging, cloud storage such as Google Drive, and FTP.

  • Sensitive Data Detection Methods14:42

    Learn data loss prevention detection methods, including hash-based exact matching, rolling hash for partial content, machine learning, and keyword and regex pattern matching, plus predefined identifiers for credit card numbers.

  • DLP Deployment Types9:23

    Discover DLP deployment types in the modern enterprise, including endpoint, Casby, and network in-line solutions, plus data discovery and email server deployments with API integrations and reverse proxy controls.

  • DLP Solution Types3:55

    Compare integrated DLP and enterprise DLP, noting cost and coverage. Integrated DLP uses existing security tools for quick setup; enterprise DLP offers centralized policy management and unified reporting.

  • Data Loss is a Business Risk and Data Loss Prevention is primarily a Process3:42

    Position data loss prevention as a business risk, not just a technology issue, and secure senior management commitment to protect sensitive data through an ongoing DLP process.

  • Data Security Policy4:51

    Define and implement a data security policy that designates data owners and custodians, and defines simple three-label classification (confidential, internal, public) with encryption and access controls.

  • DLP Solution Selection Process3:58

    Lead the DLP project by collecting stakeholder requirements and thoroughly testing solutions to ensure compatible, flexible policies that address data formats, channels, and control behavior.

  • DLP Organizational Structure (People Structure)1:47

    Form the DLP working group with data owners and custodians to define policies protecting the most sensitive data. The IT security team implements these policies, guided by a governance body.

  • DLP High Level Processes9:35

    Examine high level DLP processes, including access governance, data owner roles, policy creation and tuning, triage and escalation, and governance forums to protect sensitive data.

Requirements

  • Basic understanding of IT within an Enterprise

Description

Welcome to the Data Loss Prevention (DLP) in the Enterprise Course! The course comprehensively covers the main concepts in Data Loss Prevention and explains the factors required for modern organizations to successfully implement a Data Loss Prevention Program.

Topics Covered:

  • Data Loss Incidents

  • Types of Sensitive Data

  • Data Formats and Transfer Channels

  • Sensitive Data Detection Methods

  • DLP Deployment Types

  • DLP Solution Types

  • Data Loss is a Business Risk

  • DLP is primarily a Process

  • Data Security Policy

  • DLP Selection Process

  • DLP Organization Structure (People Structure)

  • DLP High Level Processes



Additionally, this course explains the basic concepts of regular expressions and how they could be used for pattern matching to match almost any kind of textual data.

The Regex sessions are structured as below:

  • Basic Concepts - Metacharacters and their usage.

  • Challenges and Walkthrough - Practical Challenges for you to attempt your skills at Regular Expressions. Detailed walk through of solution. Examples include different kinds of data in table delimited format, json and xml.


By the end of the course, you would be confident to create your own regular expressions!


Happy Learning and All the Best!

-----

Topic Background: What is DLP?

Data loss prevention (DLP), is defined as technologies which perform both content inspection and contextual analysis of data sent via messaging applications such as email and instant messaging, in motion over the network, in use on a managed endpoint device, and at rest in on-premises file servers or in cloud applications and cloud storage. These solutions execute responses based on policy and rules defined to address the risk of inadvertent or accidental leaks or exposure of sensitive data outside authorized channels.

DLP technologies are broadly divided into two categories – Enterprise DLP and Integrated DLP. While Enterprise DLP solutions are comprehensive and packaged in agent software for desktops and servers, physical and virtual appliances for monitoring networks and email traffic, or soft appliances for data discovery, Integrated DLP is limited to secure web gateways, secure email gateways, email encryption products, enterprise content management platforms, data classification tools, data discovery tools, and cloud access security brokers.


What are Regular Expressions?

Regular Expression, or regex or regexp in short, is extremely and amazingly powerful in searching and manipulating text strings, particularly in processing text files. One line of regex can easily replace several dozen lines of programming codes.

Regex is supported in all the scripting languages (such as Perl, Python, PHP, and JavaScript); as well as general purpose programming languages such as Java; and even word processors such as Word for searching texts. Getting started with regex may not be easy due to its geeky syntax, but it is certainly worth the investment of your time.

Regular expression synax varies slightly between languages but for the most part the details are the same. Some regex implementations support slightly different variations on how they process as well as what certain special character sequences mean.

Who this course is for:

  • Anyone interested in learning about Data Loss Prevention (DLP) Concepts
  • Anyone interested in Cyber Security, IT Risk Management, IT Audit
  • Anyone interested in learning about Regular Expressions (Regex)
  • Anyone interested in developing the ability to write own Regular Expressions (Regex)