What measures prevent data leakage?

What measures prevent data leakage?

• A. Data leakage is inevitable; only incident response matters.
• B. Measures to prevent unauthorized exposure of data include DLP, encryption, access controls, monitoring, and user training.
• C. Data leakage prevention is only about email filtering.
• D. Data leakage relates to physical theft; requires CCTV only.

Answer: (B)

Preventing data leakage relies on a layered, proactive approach that protects data wherever it resides or travels. Data loss prevention tools help identify and block sensitive information from leaving the organization through various channels like email, cloud apps, or removable storage. Encryption keeps data unreadable if a leak occurs, so exposure doesn’t automatically lead to usable information. Strong access controls ensure only the right people can view or move data, reducing both insider and external risks. Ongoing monitoring and auditing detect unusual or unauthorized activity quickly, enabling prompt responses. Training users helps them recognize risky sharing, phishing, and misconfigurations, addressing human error—the major leakage source. Taken together, these measures cover people, processes, and technology, providing a comprehensive shield against leakage. Narrow approaches that focus only on incident response, a single channel like email, or just physical security miss important leakage paths and are insufficient on their own.

Preventing data leakage relies on a layered, proactive approach that protects data wherever it resides or travels. Data loss prevention tools help identify and block sensitive information from leaving the organization through various channels like email, cloud apps, or removable storage. Encryption keeps data unreadable if a leak occurs, so exposure doesn’t automatically lead to usable information. Strong access controls ensure only the right people can view or move data, reducing both insider and external risks. Ongoing monitoring and auditing detect unusual or unauthorized activity quickly, enabling prompt responses. Training users helps them recognize risky sharing, phishing, and misconfigurations, addressing human error—the major leakage source. Taken together, these measures cover people, processes, and technology, providing a comprehensive shield against leakage. Narrow approaches that focus only on incident response, a single channel like email, or just physical security miss important leakage paths and are insufficient on their own.