Choose a data-loss programme, not just an agent
Fortra Data Loss Prevention is the current portfolio name associated with Digital Guardian. Use this page for the overall protection architecture: the sensitive information, business processes and channels that need control. Individual endpoint, network and cloud components should be selected from that architecture rather than bought as interchangeable ways of blocking files.
Begin with the data owner and a concrete disclosure scenario. An engineering design sent to an approved supplier needs a different handling decision from the same file copied into an unmanaged personal account. The initial policy set should distinguish those cases, name the person who can approve an exception and establish what evidence an analyst is allowed to inspect.
Design the pilot around legitimate work
MMC can scope discovery, policy workshops, product configuration and controlled deployment through its Fortra relationship. The statement of work should identify which activities belong to MMC, the customer and any manufacturer service. Licence entitlement is separate from a promise of managed incident review.
Use approved synthetic or sanitised documents to compare positive matches, similar non-sensitive material and required external transfers. Observe results before enforcing broad restrictions. Acceptance should include the operator's investigation path, user support and recovery from an incorrect block. For UAE organisations, agree event content, processing location and authorised reviewer access with the customer's privacy and security owners before production data is connected.
Evidence to request for this scope
- Name the information classes and channels covered by the proposed DLP configuration.
- Demonstrate one approved transfer and one prohibited transfer with documented analyst decisions.
- Record enforcement exceptions, event retention and the party responsible for continuing policy tuning.