Data loss prevention: the business case

Arbel, Lior

doi:10.1016/s1361-3723(15)30037-3

Cited by 9 publications

(3 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Companies that cater to the end consumer cannot afford to keep the data loose and vulnerable to hackers. The most important part of SECaaS is to educate these companies because data is the company’s biggest asset (Arbel, 2015; Angeles, 2013). Due to the service differentiation of a company (Furfaro et al , 2014), highlights the importance of the specific policy in SECaaS.…”

Section: Discussionmentioning

confidence: 99%

See 1 more Smart Citation

Security-as-a-service: a literature review

Wang

Yongchareon

2020

IJWIS

View full text Add to dashboard Cite

Purpose This study aims to identify the level of security from existing work, analyze categories of security as a service (SECaaS) and classify them into a meaningful set of groups. Further, the report will advise commercial applications and advice of SECaaS as an extended context to help firms make decisions. Design/methodology/approach This paper compares the SECaaS categories in Cloud Security Alliance (CSA) with the security clauses in ISO/IEC 27002:2013 to give a comprehensive analysis of those SECaaS categories. Reviewed from a number of related literature, this paper analyzes and categorizes SECaaS into three major groups including protective, detective and reactive based on security control perspectives. This study has discussed the three groups and their interplay to identify the key characteristics and problems that they aim to address. Findings This paper also adds new evidence to support a better understanding of the current and future challenges and directions for SECaaS. Also, the study reveals both the positive and negative aspects of SECaaS along with business cases. It advises on various sizes and domains of organizations to consider SECaaS as one of their potential security approaches. Originality/value SECaaS has been demonstrated to be one of the increasingly popular ways to address security problems in Cloud computing. As a new concept, SECaaS could be treated as integrated security means and delivered as a service module in the Cloud. However, it is still in infancy and not very widely investigated. Recent studies suggest that SECaaS is an efficient solution for Cloud and real industries. However, shortcomings of SECaaS have not been well-studied and documented. Moreover, reviewing the existing research, researchers did not classify the SECaaS-related categories.

show abstract

Section: Discussionmentioning

confidence: 99%

“…Category 2: Data loss prevention (DLP) . DLP is one of the most important solutions in modern business (Arbel, 2015), which provides protection, monitoring and verification of operational and recovery data. DLP is a strategy for ensuring that unauthorized users do not lose, misuse or access sensitive data (Agarwal and Tarbotton, 2017).…”

Section: Classificationmentioning

confidence: 99%

Security-as-a-service: a literature review

Wang

Yongchareon

2020

IJWIS

View full text Add to dashboard Cite

show abstract

“…Employees, i.e., the human element, have been identified as one of the most significant sources of data loss/leaks and can be enhanced in case of disgruntled employees when it's intentional, but it can also be unintentional [2]. Data Loss Prevention (DLP) emerged as a group of practices, techniques, and technologies with the sole aim of reducing or eliminating data loss from organizations, but it's also extended to keeping track of all data leaks, which may aid in recovery or at least, litigation against intentional data leaks [3]. DLP solutions, systems, and frameworks focus on both intentional and unintentional data leaks as well as on different dimensions of data leaks, including organizational parameters (both digital and physical) and end-points that connect to the company data points [4].…”

Section: Literature Reviewmentioning

confidence: 99%

Loss of Data Control Scenarios and Best Data Loss Prevention (DLP) Practices

Kodurupati

2022

J Arti Inte & Cloud Comp

View full text Add to dashboard Cite

Humans (employees in an organizational context) still remain the weakest link in cybersecurity and data loss. Employees can become a data vulnerability for an organization in a number of ways, i.e., copying data on physical media that can be lost or maliciously used, using the internet to intentionally send sensitive data to the wrong entities, unintentionally letting malware in or sending company data to malicious individuals/entities, and a number of other scenarios. Good Data Loss Prevention (DLP) practices like strict device use policies and access control can mitigate (if not eliminate) these security vulnerabilities.

show abstract

A Survey on Security as a Service

Wang

Yongchareon

2017

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Data loss prevention: the business case

Cited by 9 publications

References 0 publications

Security-as-a-service: a literature review

Security-as-a-service: a literature review

Loss of Data Control Scenarios and Best Data Loss Prevention (DLP) Practices

A Survey on Security as a Service

Contact Info

Product

Resources

About