Definition
Data loss prevention, or DLP, is a strategy and set of tools designed to prevent sensitive data from leaving an organization's control. It works by identifying, monitoring, and protecting data in use, in motion, and at rest through policies that dictate how information can be handled. Implementing DLP is crucial for maintaining regulatory compliance, safeguarding intellectual property, and preventing reputational damage from data breaches. For instance, a DLP system might block an employee from emailing a customer list to a personal account. This differs from simple access controls by focusing on the content of the data itself, not just who can access it. DLP concepts are frequently tested on cybersecurity certifications like CompTIA Security+ and CySA+, as well as CISSP.