Before deploying DLP, organizations need InfoClass: a detect-versus-protect phase where employees label data and the company observes patterns. After generating reports to identify crown-jewel assets, you can focus protection on what actually matters instead of locking down everything.
Chapters
So the reason you want to slow down is the old adage of go slow to go fast is because you've got to get the foundational pieces right. And you've got to kind of do what— in technology, they kind of put it in like detect versus protect mode. It's kind of like the technology difference. And that is in the first part of InfoClass, teach your employees how to label data, flag the data, and then wait some time and look at the report. Because often what you find is there's business cases that you didn't identify early on. But if we're able to see across the organization where the most sensitive, highest crown jewels are, we can focus a lot of attention towards just that area. So the, that's public, maybe just internal and confidential, that doesn't need as much protection. So it's, it's a little easier to run, it's more fluid. Instead of having to go slow in all these different areas, it's just, just these two pieces. And so it gives that like prioritization to data and how you protect and classify it in organizations.