DLP

A while back, in another world I was involved in doing a DLP scan of a customer's network. This revealed a number of issues including:

- Credit card numbers inexplicably transmitted in clear text between the organisation and another.

- Spreadsheets sent to Hotmail and other accounts

- PowerPoint presentations sent with embedded Excel spreadsheets containing salary details.

Unfortunately, once the report had been produced, a senior manager instructed us to 'bury' it. He chose to ignore the problems rather than deal with them.

What type of leader are you? Would you deal with such problems or choose to ignore them.....?

Andrew Prusek

Architecture and Delivery Specialist

10 年

This sounds like an issue with the culture of the organisation and no amount of policy, enforcement or technology will fix this issue. Security starts with people.

回复
Jamie Cooper

Corporate Security Response Lead - APAC at Amazon Web Services (AWS)

10 年

Placing your head in the sand on any issue related to security is a very foolish thing. Fortunately dinosaurs such as this, as history shows us, will become extinct. We just need the leaders of tomorrow to step up and actually lead. Real leaders aren't put off by adversity, politics or anything else. It's all about achieving results and the best outcome possible.

要查看或添加评论,请登录

Lawrence Ostle的更多文章

  • The Security Operations Center – measuring the business benefits.

    The Security Operations Center – measuring the business benefits.

    A Security Operation Center (SOC) is a central function within an organisation utilising people, processes, and…

  • What motivates people?

    What motivates people?

    What motivates people? Is it money? Status? Bonuses? Ownership? Here is my top 5 in order of importance! Money is…

  • The ‘Essential Eight’ is no longer relevant….

    The ‘Essential Eight’ is no longer relevant….

    ..

    1 条评论
  • it's 10 o'clock do you know where your PII is?

    it's 10 o'clock do you know where your PII is?

    In May 2018, GDPR (General Data Protection Regulation) came into effect. Even though this is euro-centric, it caused…

  • The Security Hype Cycle – What’s Your Take?

    The Security Hype Cycle – What’s Your Take?

    Gartner’s ‘Hype Cycle’ presentation has been criticised by some for its lack of science, the subjective nature of the…

    5 条评论
  • What's going to keep us awake in 2017?

    What's going to keep us awake in 2017?

    More of the same I think, with some subtle changes..

  • Is legacy endpoint dead or does it just smell funny?

    Is legacy endpoint dead or does it just smell funny?

    I attended a presentation from a business partner regarding ‘next generation endpoint protection’ recently. The pitch…

    5 条评论
  • A bridge too far?

    A bridge too far?

    THE ICT THREAT LANDSCAPE Most agree that the ICT security threat landscape is more dynamic now than ever before. The…

  • What makes the difference?

    What makes the difference?

    I’ve read that there are a number of ‘moments of truth’ during a company’s relationship with customers, usually when…

  • The Time Is Right For DLP

    The Time Is Right For DLP

    DLP Globally Much has been written in the overseas press (particularly in the US) about Data Loss Prevention (DLP). The…

    1 条评论