Why Cloud DLP?

Data loss prevention (DLP) is the general practice of preventing leakage or exfiltration of sensitive data such as Personally Identifiable Information (PII), Protected Health Information (PHI), and financial information. Traditionally, DLP has been implemented via legacy endpoint and network solutions. Endpoint solutions are installed on user devices, and monitor or block data exfiltration at the device level. Network DLP solutions are agents installed on an organization’s network, where they monitor and block network traffic. 
Today, organizations are increasingly working and sharing information within cloud applications and infrastructure, while simultaneously shifting toward a distributed workforce - so legacy DLP solutions are losing efficacy. This is mainly a problem of implementation, as legacy endpoint and network solutions are typically deployed as agents on specific endpoints or on a network - when information is transferred to cloud applications from unmanaged or off-network devices, these legacy solutions are powerless to intercept it. And once the sensitive information is stored within the cloud application or infrastructure, legacy endpoint and network solutions can no longer see it at all. As a result, users of legacy DLP solutions are left with no visibility into sensitive data that already exists in the cloud, or which is being transferred to the cloud on unmanaged networks or devices. These gaps in visibility for legacy DLP solutions present an emerging risk for organizations seeking to avoid data exfiltration.
Nightfall’s Cloud DLP provides a solution to this problem. Nightfall is cloud-native, and integrates directly with other cloud applications and infrastructure at the application level, via API. Nightfall is able to inspect content stored within the cloud application regardless of how it got there, for complete visibility into cloud DLP risk. Another key advantage of direct cloud-native integration is that Nightfall can take remediation actions on sensitive data that is discovered in the cloud, thus eliminating the DLP risk at the source - a method that legacy solutions cannot hope to achieve. Nightfall’s cloud-native DLP does not require installation of agents, and can be integrated with your cloud applications in just a few clicks. The result is a DLP solution for the modern world that can proactively identify and eliminate DLP risk across your cloud environment.

Introduction

Cloud-native DLP vs. CASB

Last modified 9mo ago

Copy link