I recently had an interesting meeting with someone looking to implement DLP.  During our conversation the director of security began talking about tombstones and ransom notes.  I listened trying to figure out what the heck he was talking about… “Did I misunderstand him?  No.  There, he said it again.  He wants tombstones?  Ransom notes?”
I waited [...]

A few days ago I read a paper on DLP that caught my attention for the wrong reason.  The paper was by a reputable vendor.  It laid out a number of steps to secure confidential data, and generally speaking was “okay” as far as vendor papers go.
Note: I’m deliberately omitting the vendor’s name to avoid [...]

As Data Loss Prevention (DLP) emerges as one of today’s hottest technologies, it remains among the least understood.
Organizations continue to invest in tools and processes that make information available and portable.  This availability risks leaking confidential data into the public domain and potentially the hands of competitors.  This year alone I’ve met with more than [...]

Adrian at Securosis had a post today on Data Discovery and Classification.  He wrote about a conversation he overheard in which an IT executive expressed his dissatisfaction with his data discovery implementation.
As I mentioned in my comment (see below), I generally attribute this sentiment to a failure to properly set expectations.  Ultimately, this is a [...]

CNN and a variety of other news outlets today reported that the Obama and McCain campaigns’ computers were hacked for policy data, apparently by a foreign government and/or organization.  Read the CNN article here.
Before I get into the substantive portion of this thread let me first take a second to point out that it’s unclear [...]