Gartner defines data loss prevention (DLP) as a technical control designed to prevent data loss in order to comply with personal data regulations, prevent unintended disclosure, minimize insider risk and ensure that sensitive data is not overly accessible. DLP controls are typically applied to reduce the data risk for two states of unstructured data: data at rest and data in motion. Depending on the state of the data, DLP applies detective, preventive or corrective controls, including alerting, quarantining, blocking, redaction or access restriction.
Gartner defines digital communications governance and archiving (DCGA) solutions as designed to enforce corporate governance and regulatory compliance, and derive insights from an evolving number of digital communications tools utilized by organizations. For the various communications tools in use across the enterprise, DCGA solutions enable consistent policy management and enforcement, reveal new data insights, and provide reporting capabilities of their use. Organizations utilize DCGA solutions to proactively manage, monitor, collect and archive communications content. They are critical to an organizations’ efforts to meet a growing number of regulatory compliance mandates and an expanding scope of organizational communications governance and data insights. Compliance requirements include monitoring, oversight, audits and investigations for regulated industries such as financial services and health sciences. They also extend to investigation requirements of the public sector to respond to public records requests. Corporate governance requirements include employee conduct and handling of sensitive data in the use of digital communication tools.
Gartner defines an email security solution as a product that secures email infrastructure. Its primary purpose is to protect against malicious messages (phishing, social engineering, malware) or unsolicited messages (spam, marketing). Other functions include email data protection; domain-based message authentication, reporting and conformance (DMARC); investigation; and remediation through a dedicated console. Email security solutions may also support nonemail collaboration tools, such as those for document management and instant messaging. Email security tools protect an organization’s email from spam, phishing, malware attacks, account takeover and data loss. They may provide capabilities for data loss prevention, encryption, domain authentication and security education, as well as advanced protections against business email compromise. Email security platforms give cybersecurity teams visibility into email-related security incidents, support investigation and automated remediation, and enable management of both inbound and outbound email delivery. Email security solutions often integrate with other network, identity and endpoint security controls, and may also support collaboration tools and email relay capabilities.
IT Security refers to products and services that protect digital systems and data from cyber threats and unauthorized access. This category includes markets that focus on network security, identity management, data protection, and cloud security, enabling organizations to reduce risk, ensure compliance, and operate securely in a digital world.
Gartner defines the insider risk management (IRM) market as solutions that use advanced analytics, monitoring, and behavior-based risk models to detect, analyze and mitigate risks posed by trusted insiders within an organization. These solutions monitor the activities of employees, service partners and key suppliers to ensure their behavior aligns with corporate policies and risk tolerance levels. IRM platforms can be delivered as cloud-based services or on-premises solutions, or in hybrid forms. When effectively implemented alongside proper governance, they provide comprehensive visibility, real-time detection, and proactive intervention to safeguard against data theft, fraud and other malicious or unintentional insider threat activities.
The SACBT market is characterized by vendor offerings that include one or more of the following capabilities: 1. Ready-to-use training and educational content. 2. Employee testing and knowledge checks. 3. Availability in multiple languages, natively or through subtitling or partial translation (in many cases, language support is diverse and localized). 4. Phishing and other social engineering attack simulations. 5. Platform and awareness analytics to help measure the efficacy of the awareness program. Training modules are available as cloud-hosted SaaS applications or on-premises deployments via client-managed learning management systems (LMSs), and also support the Sharable Content Object Reference Model (SCORM) standard, enabling integration with corporate LMSs.