October 23, 2008
1:46 am | Last updated: October 23, 2008 at: 5:52 am
Data Loss Prevention with Microsoft Enterprise Rights Management – The Desktop Files
Want to be proactive about preventing data loss? Enterprise rights management is the way to go. Discover how the Microsoft Enterprise Rights Management solution can protect your organization's information from unauthorized access and use, writes TechNet Blog.
Loading
You must be kidding.
Enterprise DRM as a way of protecting data loss???
Please - unauthorized use is not even close to being an internal threat.
By definition - data loss, is unauthorized network transfer of data that the user is ALREADY permitted to access.
There are really 3 sources of data loss, DRM is worthless security countermeasure for preventing data loss.
The first (and mildest) is trusted insiders;
I have access rights to a sensitive file. I open it in Word, save to PDF, send it to my private Gmail account.
The second (and next severe) is malicious outsiders. It's easy to socially manipulate a customer service person over time with minor compensation for non-critical data, gaining their trust. But - eventually - the time comes when the attacker will ask for more - for core company data - and get it.
The third (and most severe) is IT operations. Riddled with buggy applications, poor integration and configuration - DRM will never mitigate this threat to data loss.
Danny Lieberman