ISC Data Protection · Updated November 2026
Data Loss Prevention: How Does a Company Stop Sensitive Data From Walking Out the Door?
DLP focuses on recognizing sensitive information and controlling inappropriate movement of that information.
Data at rest
Sensitive information can sit in databases, file systems, cloud storage, and endpoints.
Data in motion
Information can leave through email, web uploads, messaging, and network transfers.
Data in use
Sensitive data can also be exposed while users or applications actively access and manipulate it.
DLP actions
A DLP system can detect patterns, alert security teams, block transmissions, encrypt data, require approval, or log incidents.
The takeaway
DLP works across data at rest, in motion, and in use, and depends heavily on accurate data classification.
Related Summit guides
FAQ
Is DLP only an email control?
No.
Can DLP monitor cloud uploads?
Yes.
Does data classification improve DLP effectiveness?
Yes.