Definition
Data loss prevention DLP refers to strategies and technologies designed to prevent sensitive data from leaving an organization's control. It involves identifying, monitoring, and protecting data in use, in motion, and at rest, ensuring it is not accidentally or maliciously exfiltrated. DLP systems work by enforcing policies that dictate how data can be accessed, shared, and transferred, often using content analysis and contextual awareness. Implementing DLP is crucial for maintaining regulatory compliance, protecting intellectual property, and safeguarding customer privacy. For instance, a DLP solution might block an employee from emailing a customer list to a personal account. Unlike simple access controls, DLP focuses on the content of the data itself. This concept is frequently tested on certifications like CompTIA Security+, CySA+, and CISSP.