Gartner defines data loss prevention (DLP) as a technical control designed to prevent data loss in order to comply with personal data regulations, prevent unintended disclosure, minimize insider risk and ensure that sensitive data is not overly accessible. DLP controls are typically applied to reduce the data risk for two states of unstructured data: data at rest and data in motion. Depending on the state of the data, DLP applies detective, preventive or corrective controls, including alerting, quarantining, blocking, redaction or access restriction.
Digital communications governance and archiving solutions (DCGA) are designed to enforce corporate governance and regulatory compliance across a growing number of digital communication tools available to employees. For the various communication tools in use across the enterprise, DCGA solutions enable consistent policy management, enforcement and reporting capabilities. Enterprise organizations face a growing number of regulatory mandates, such as the Financial Industry Regulation Authority (FINRA), Financial Conduct Authority (FCA), Health Insurance Portability and Accountability Act (HIPAA), and General Data Protection Regulation (GDPR). In addition, they must adhere to corporate governance guidelines, such as proper employee conduct and handling of sensitive data, in the use of digital communication tools. The DCGA market aligns to vendors that develop archive- and platform-integrated solutions, which capture and analyze communication channels, and those that solely develop communication connectors to a variety of communication tools used by enterprises. Organizations utilize DCGA solutions to proactively manage and collect communication content. As part of their direct integration and ability to centralize access to communication data, DCGA solutions facilitate multiple use cases such as supervision, surveillance, e-discovery and data insights. While email has been the most traditional communication channel in the scope of DCGA solutions, there are multiple types of communication channels to be factored into a governance strategy. The scope of these communication tools is constantly changing as new messaging applications are frequently introduced to the market and adopted by employees. Recent evidence suggests enterprise organizations’ customers are dictating the communication tool of choice.
Gartner defines an email security platform as a product that secures email infrastructure. Its primary purpose is the removal of malicious (phishing, social engineering, viruses) or unsolicited messages (spam, marketing). Other functions include email data protection, domain-based message authentication, reporting and conformance (DMARC), investigation, and remediation through a dedicated console. These solutions may integrate as a secure email gateway (SEG) for predelivery protection or as an integrated cloud email security (ICES) solution for postdelivery protection. Email security platforms protect an organization’s email infrastructure from social engineering, phishing, business email compromise, spam, malware attacks and data theft. These platforms are deployed independently but integrated with other network and endpoint security controls to improve the overall risk posture of the organization. They offer cybersecurity teams visibility into email-related security incidents for investigation and remediation.
Gartner defines the insider risk management (IRM) market as solutions that use advanced analytics, monitoring, and behavior-based risk models to detect, analyze and mitigate risks posed by trusted insiders within an organization. These solutions monitor the activities of employees, service partners and key suppliers to ensure their behavior aligns with corporate policies and risk tolerance levels. IRM platforms can be delivered as cloud-based services or on-premises solutions, or in hybrid forms. When effectively implemented alongside proper governance, they provide comprehensive visibility, real-time detection, and proactive intervention to safeguard against data theft, fraud and other malicious or unintentional insider threat activities.
The SACBT market is characterized by vendor offerings that include one or more of the following capabilities: Ready-to-use training and educational content; Employee testing and knowledge checks; Availability in multiple languages, natively or through subtitling or partial translation (in many cases, language support is diverse and localized); Phishing and other social engineering attack simulations; Platform and awareness analytics to help measure the efficacy of the awareness program. Training modules are available as cloud-hosted SaaS applications or on-premises deployments via client-managed learning management systems (LMSs), and also support the Sharable Content Object Reference Model (SCORM) standard, enabling integration with corporate LMSs.
Reviews for 'Security Solutions - Others'