CCSP · Question #53
You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment. In order to get truly holistic coverage of your environment
The correct answer is A. Getting signed user agreements from all users. To ensure holistic coverage and user awareness for a Data Loss Prevention (DLP) solution, obtaining signed user agreements is a crucial deployment step.
Question
You are the security manager of a small firm that has just purchased a DLP solution to implement in your cloud-based production environment. In order to get truly holistic coverage of your environment, you should be sure to include __________ as a step in the deployment process.
Options
- AGetting signed user agreements from all users
- BInstallation of the solution on all assets in the cloud data center
- CAdoption of the tool in all routers between your users and the cloud provider
- DAll of your customers to install the tool
How the community answered
(53 responses)- A77% (41)
- B4% (2)
- C13% (7)
- D6% (3)
Why each option
To ensure holistic coverage and user awareness for a Data Loss Prevention (DLP) solution, obtaining signed user agreements is a crucial deployment step.
Implementing a DLP solution often requires changes in user behavior and data handling practices, making signed user agreements essential for communicating policies, obtaining consent for monitoring, and setting expectations about how sensitive data should be managed and protected. This fosters a culture of compliance and reduces inadvertent data leaks.
While DLP can be installed on assets, a cloud-based DLP solution often integrates at the network, endpoint, or application level, not necessarily requiring installation on all underlying cloud data center assets, which are typically managed by the cloud provider.
Installing a DLP tool in all routers between users and the cloud provider is impractical and often outside the scope or capability of a cloud DLP deployment, which typically focuses on data in transit, at rest, or in use within the cloud environment.
Expecting all customers to install your DLP tool is unrealistic and beyond the scope of a firm's internal DLP deployment; DLP typically protects an organization's own data, not data residing on customer systems.
Concept tested: DLP deployment considerations and user agreements
Topics
Community Discussion
No community discussion yet for this question.