Gartner defines data loss prevention (DLP) as a technical control designed to prevent data loss in order to comply with personal data regulations, prevent unintended disclosure, minimize insider risk and ensure that sensitive data is not overly accessible. DLP controls are typically applied to reduce the data risk for two states of unstructured data: data at rest and data in motion. Depending on the state of the data, DLP applies detective, preventive or corrective controls, including alerting, quarantining, blocking, redaction or access restriction.
Gartner defines digital communications governance and archiving (DCGA) solutions as designed to enforce corporate governance and regulatory compliance, and derive insights from an evolving number of digital communications tools utilized by organizations. For the various communications tools in use across the enterprise, DCGA solutions enable consistent policy management and enforcement, reveal new data insights, and provide reporting capabilities of their use. Organizations utilize DCGA solutions to proactively manage, monitor, collect and archive communications content. They are critical to an organizations’ efforts to meet a growing number of regulatory compliance mandates and an expanding scope of organizational communications governance and data insights. Compliance requirements include monitoring, oversight, audits and investigations for regulated industries such as financial services and health sciences. They also extend to investigation requirements of the public sector to respond to public records requests. Corporate governance requirements include employee conduct and handling of sensitive data in the use of digital communication tools.
Gartner defines an email security solution as a product that secures email infrastructure. Its primary purpose is to protect against malicious messages (phishing, social engineering, malware) or unsolicited messages (spam, marketing). Other functions include email data protection; domain-based message authentication, reporting and conformance (DMARC); investigation; and remediation through a dedicated console. Email security solutions may also support nonemail collaboration tools, such as those for document management and instant messaging. Email security tools protect an organization’s email from spam, phishing, malware attacks, account takeover and data loss. They may provide capabilities for data loss prevention, encryption, domain authentication and security education, as well as advanced protections against business email compromise. Email security platforms give cybersecurity teams visibility into email-related security incidents, support investigation and automated remediation, and enable management of both inbound and outbound email delivery. Email security solutions often integrate with other network, identity and endpoint security controls, and may also support collaboration tools and email relay capabilities.
The market for instant communications security and compliance consists of solutions that protect instant communications sent over networks, while also ensuring regulatory compliance.