Data Loss Prevention: proactive protection - DLP from A to Z

Name: Data Loss Prevention: proactive protection - DLP from A to Z
Rating: 4.4 (4 reviews)

DLP - From Concept to Technology Details: data classification and detection, DLP/user interaction, regular expressions

Created byTomasz Królasik

Last updated 1/2024

English

What you'll learn

the concepts and ideas behind Data Loss Prevention in detail
what information is stored in various organizations (government, manufacturing companies, etc)
how information can be categorized
what information should be protected
when it is necessary to protect information
how information should be protected
methods of classification
mechanisms for classifying information
ways and types of marking documents with different confidentiality levels

Course content

5 sections • 22 lectures • 1h 29m total length

DLP introduction1:24
Protect data with data loss prevention (DLP) strategies that prevent data leakage or theft from devices and the IT environment, including transfers to physical media and network locations.

Data in organizations0:30
Banks1:56
Explore how employee data, planned banking strategies, future products, and other financial tools make banks a treasure trove of information about us, highlighting the importance of data loss prevention.
State institutions2:08
Discover how data is processed by state institutions and why all such data should be well protected, highlighting the need for proactive data loss prevention.
Car industry2:32
Highlight the importance of protecting company data to prevent irreversible damage, using a car manufacturer as an example to identify information that requires protection.

Data classification - part 11:27
Learn how data classification supports data loss prevention by assessing what may leave the company, marking data with sensitivity levels, and using three or four level schemas for information management.
Data classification - part 22:05
Determine data group assignments in agreement with the company's legal department to support data classification.
Types of classification mechanisms3:06
Compare manual labeling and automatic classification in data loss prevention, showing how user actions trigger labeling and how policies protect data in use, at rest, and in transit.
User Classification5:08
Engage users in manual data classification to determine document severity and assign it to confidentiality groups. This enhances awareness, accuracy, and overall data loss prevention.
Automatic Classification3:03
Explore automatic data classification that speeds protection by analyzing content, context analysis, and fingerprints to label documents as confidential or public, using content inspection, dictionary-based classification, and fingerprinting.
User and Automatic Classification - part 11:24
Learn to assign sensitivity levels to files using user classification and detect them with DLP policies.
User and Automatic Classification - part 27:39
Use a DLP policy with a secret dictionary to classify documents as secret, applying higher priority when header confidential words or dictionary terms appear and sensitive actions occur.
Other Conditions3:35
Learn how data loss prevention policies protect sensitive data by defining targets and triggering conditions using keywords, dictionaries, and regex patterns to detect sensitive formats.
Regular Expressions - part 18:35
Learn the fundamentals of constructing and interpreting regular expressions, using plain text patterns with meta characters like caret, dollar, and dot, and quantifiers such as ? and *.
Regular Expressions - part 27:43
Identify character sets and ranges in regular expressions for data loss prevention, apply caret negation and escape sequences, and use quantifiers to specify exact, minimum, or range repetitions.
Regular Expressions - part 312:32
Explore how regular expressions detect sensitive data like Spain IBANs and credit card numbers, craft flexible yet accurate patterns, test them, reduce false positives, and tune DLP policies.
Fingerprinting3:23
Fingerprinting creates unique data fingerprints using hashing to detect confidential information across files and databases and feed DLP policies with exact or similar content matches.

Logs, policy fine-tuning, incidents and reports - part 16:05
Configure DLP systems, respond to events, and fine-tune policies using real-world examples of confidentiality levels and severity. Track incidents, generate reports, and optimize rules to prevent leaks.
Logs, policy fine-tuning, incidents and reports - part 29:17
Explore how data loss prevention policies monitor user actions, log events, trigger alerts and incidents, and generate reports for ongoing policy refinement.

Requirements

You do not need to have any prior knowledge about DLP. Everything is explained in an accessible way - both basic concepts as well as more advanced ones.

Description

This comprehensive DLP course explains Data Loss Prevention concepts, techniques, and best practices from A to Z in an accessible way, requiring no prior DLP knowledge.

It covers basic and advanced Endpoint DLP topics relevant to a wide audience including current/future DLP users, those involved in creating security policies, implementing DLP policies, selecting DLP systems, and anyone wanting to learn DLP fundamentals.

Specific topics include:

DLP concepts and rationale;

types of sensitive information stored in various organizations;

information categorization and classification methods;

criteria for determining what data to protect;

when and how to protect data;

advanced classification techniques;

sensitive data detection mechanisms;

reaction to user actions (interaction with the users);

planning appropriate DLP strategies and policies to meet legal/organizational data protection requirements;

explanation of the concept of regular expressions (regex) along with an in-depth analysis of both simple, basic examples and more complicated ones (bank account numbers, credit cards).

The vendor-neutral material focuses on universal DLP system capabilities and features to help you evaluate providers based on your organization's needs. Thanks to the acquired knowledge, you will know what to expect from DLP systems and assess how to supplement security requirements. As a DLP user, you will know how to handle and protect confidential information. Whether you need to implement DLP for your organization or simply want to learn DLP essentials, this course has you covered.

Who this course is for:

to all users of DLP systems (current and future)
to people responsible for creating security policies based on DLP technology
to employees who will implement DLP policies
for test users
to people responsible for selecting a specific DLP system
to people implementing the DLP system
and of course to all those who want to learn the secrets of Data Loss Prevention

Data Loss Prevention: proactive protection - DLP from A to Z

What you'll learn

Explore related topics

Course content

Introduction1 lecture • 1min

DLP - purpose and why we should use DLP systems3 lectures • 6min

Data in organizations4 lectures • 7min

Data classifications12 lectures • 1hr

We know how to detect a data leakage, but what next?2 lectures • 15min

Requirements

Description

Who this course is for: