Question

A company has experienced negative publicity associated with users giving out their credentials accidentally or sharing intellectual secrets that were not property defined. The company recently implemented some new policies and is now testing their effectiveness. Over the last three months, the number of phishing victims dropped from 100 to only two in the last test The DLP solution that was implemented catches potential material leaks, and the user responsible is retrained. Personal email accounts and USB drives are restricted from the corporate network. Given the improvements which of the following would a security engineer identify as being needed in a gap analysis?

1. Additional corporate wide training on phishing

2. A policy outlining what is and is not acceptable on social media

3. Notifications when a user falls victim to a phishing attack

4. Positive DLP preventions with stronger enforcement

Answer 1

Choosing positive DLP Preventions with stronger enforcement will create good security for an organisation.

It is always a concern for the business and keep on focuses on physical documents or pretending from theft.Data and communication will be preserved easily.

-Not sure where companies data is stored and whom is accessing it.
-Protecting data from external sources
-disclousure of Confidential information by employees
-Data Breaches.
-protecting data against threats
-Maintaining complex regulations