When installing or implementing a DLP solution, organizations typically assemble a technology team, composed of both internal resources and outside experts, who are charged with planning, managing, and executing the project. There are TWO teams are worthy of mention:
This team should also include stakeholders from the lines of business and administrative functions, as well as high-level executive leadership that is capable of cutting through interdepartmental struggles or obstacles. This is the team responsible for the starting point.
Distinct from the implementation team, an effective DLP program also requires ongoing and continuing support and leadership from a permanent DLP team. This group includes those who handle and respond to threats once the DLP tool is live, as well as executive leaders and technology representatives who will spearhead ongoing reassessment and continuous improvement.
Along with including representatives from various stakeholder groups, an effective DLP team must also be made up of people who fill critical roles in the team dynamic. Not only must the team be structured efficiently, within this structure it must incorporate a variety of personalities and contributors:
The DLP Gurus: Policy Managers and Security Analysts
The Steering Committee: Industry Experts, Translators, Shepherds
The Incident Response Team: First Responders, Escalation Responders, Forensics
In addition to the right people, a successful team also requires efficient processes. Even a technically adept Data Loss Prevention team with strong leadership and excellent team dynamics will still struggle to achieve its mission if the response processes and procedures available to it are inadequate.
Because every organization is unique, this is a crucial area where objective, outside expertise, can be particularly useful. Having access to experienced implementers who had encountered these challenges before can empower the DLP team and help them anticipate problems before they grow into serious threats, as well as achieve the goals originally laid out before the initiative began.
Reach out to me and the Risk Management Team at ITS to discuss ways that we might be able to help your organization address concerns or issues with a Mission Ready DLP Team!
These Stories on Data Loss Prevention (DLP)