Before buying DLP tools, you need to classify your data and identify what's actually valuable, your crown-jewel information. Many CIOs skip this step and end up with useless protection. Rushing DLP deployment can cause lasting damage to your organization.
So, and I've seen this even modern day recently at companies that maybe don't have an incident, but CIOs a lot of times will say, I need DLP. And I say, okay, do we understand data classification? Do we understand what we're trying to protect? Because basic DLP can control a lot of basic stuff like privacy data or banking data. But when you get into company proprietary data or what are the crown jewels within department B or finance? Have you built the foundation to make that happen? There's some work that's not sexy for technologists that is required to make DOP work for you. So I think not involving the workforce, rushing the tools can have lasting damage. And I think InfoClass and DOP go together.
