Lessons of dressmaking from DLP developers

But a DLP system, as well as expensive suit should sit ideally. Therefore, on corporate network and on compliance to needs of the company not to do without preliminary fittings in any way. Such fitting is implementation of a pilot project. Only after the customer will put on a suit very clean, and will see, the ensemble how gracefully looks, he will be able to estimate elegance and quality of a new thing fully. Also start up everything developers DLP announce ensuring safety of information and compliance to requirements of regulators, only a qualitative DLP system is capable "it is ideal to sit down". Together with functionality for data protection the customer gets additional benefits which are not obvious at first sight.

On the basis of the questionnaires completed with the companies which use the SecureTower system analysis department of Falcongaze company decided to describe what additional opportunities reveal before the organizations during the work with functionality of DLP. Besides, on the basis of experience of specialists of the company in a research it was decided to outline a circle of difficulties which the enterprises at a stage of implementation of systems for data protection most often face.

If to speak about the additional opportunities revealing before the user of DLP practically all respondents analysis department noted that additional tools of a system for data protection were not less useful, than the main functionality of a product. "Employees began to work more" As it appeared, most of specialists of the polled companies noted that with installation of a DLP system and after the due notification of personnel, employees began to work more fruitfully and to be distracted by foreign affairs less. According to many users, a DLP system in some way acts as the hidden incentive which is unostentatiously urging on employees to find more time directly for workflow and to be distracted by foreign affairs less.

"HR managers received the cool tool"

Also rather large number of the companies noted that the functionality of a DLP system was the convenient tool allowing to increase efficiency of human resources managers. HR managers of many enterprises noted what thanks to a DLP system became possible to improve the general social climate in the company and also to identify people and groups of disloyal employees who adversely influenced the atmosphere of trust in the organization and often broke workflow.

"It is convenient when all business correspondence near at hand"

According to many respondents, a DLP system is extremely useful in cases when it is necessary to browse quickly business correspondence with this or that person, or to find the necessary document sent earlier. Because the most qualitative systems intended for data protection intercept all traffic and are capable to store it as much as long, became possible not to spend a lot of time for search of the necessary files. In addition the staff of departments of security noted that a system several times reduces time necessary for investigation of this or that incident connected with potential date leak.

"detected spam bot"

Sometimes even developers do not guess usefulness of the developed product, to be exact that sphere in which it can be used. Some companies focused attention on the fact that a DLP system allowed them to reveal computers from which it was made harmful spam mailing. Here such macro-story about the well-known drink containing caffeine and bubbles of a carbon dioxide gas, in a new way: wanted to invent medicine, and in public favourite drink turned out.

However numerous advantages of DLP systems can be followed by certain difficulties which to become capable a serious stumbling block if not to think of them in advance. Further the staff of analytical center provides the list of the most widespread difficulties which the companies at a stage of preparation for system implementation for data protection faced.

"DLP it is remarkable, but costs much"

In minds of heads of many companies the stereotype took roots that a DLP system is a close relative of an antivirus. Such position occasionally strongly prevents to see the main thing: in fact, a DLP system represents the complex tool serving for providing economic safety of the company. Therefore opinion on what the DLP solution should cost as a simple antivirus – absolutely mistakenly. Though often from the organizations it is also necessary to hear that DLP is too expensive, but as practice shows, the solution to the solution discord and the prices of DLP can be very democratic and information leak will be many times more expensive.

"There is a wish to set DLP, but opportunities do not allow"

One more moment on which some companies focused attention are obstacles which arise because of unpreparedness of the company to implementation of a DLP system. Namely, occasionally in the organization just there is no department or the employee responsible for information security support. In principle, there is nothing fatal in it, and the necessary person practically always manages be found, nevertheless, the similar situation can remove the beginning of process on product introduction for data protection for some time.

"Monitor employees – it is bad"

The ethical aspect of a question can serve as one more counterargument. Some companies refuse DLP systems, motivating it with what they trust the employees and do not want to monitor them. On the one hand such position can seem noble and laudable, however, as it was already repeatedly told, a large number of leaks happens by negligence and existence of a DLP system does not oblige to read personal correspondence of the secretary Lenochka with the programmer Lesha at all. And besides a system for data protection is initially created not for shadowing employees, and for control of information and identification of the incidents connected with leaks therefore to compare DLP to the unscrupulous spy it is similar to how to think that good suits carry only the mafioso.

"Not such and effective these DLP systems"

There is an opinion that any DLP system is inefficient and is not capable to protect information of the company from leaks. Most often it can be heard in case of insufficient understanding of how systems for information security support function. But, nevertheless, to overpersuade the person who thinks in a similar key in words rather difficult if it is not impossible therefore just it is better to show once how a system works at practice. Anything any more effective, than evident demonstration in this world was thought up yet. However and to say that a DLP system is 100% a panacea from all problems of the company too not truly. Any product DLP is first of all the tool which at implementation of a due complex of organizational measures in the company and also setup and the correct use can increase considerably the level of information and economic safety of the enterprise.

"It is necessary to rebuild all network to save information"

As well as in a case with the prices of DLP, many companies are sure that for system implementation it is necessary to convert all corporate network. Actually, really qualitative solution in any environment will never require replacement of all equipment and will be able most just to be integrated into any network. Therefore, concerns that for data protection it is necessary to arrange global reorganization of network of the company are groundless.

If the developer cares for the client and really respects him, and appreciates, then, as well as the good tailor, it will not force it to throw out all old clothes to please to the unique new thing.

It is possible to weigh all pros and cons indefinitely, also as well as to part theoretical fights on any arising question. Therefore instead of hours-long reflections, it is better to approach safely a threshold of sewing studio, to push a door and to ask the tailor to sew a suit "on a figure".