A Conceptual Foundation for Data Loss Prevention
Sabah Al‐Fedaghi · International Journal of Digital Content Technology and its Applications · 2011
Data leak prevention (DLP) systems are centralized data management systems that monitor and safeguard sensitive information, manage policies, enforce flow of data, and audit incidents of leakage. Most current approaches to DLP design are system dependent and involve specific hardware and commercial software systems. This paper presents a theoretical framework for DLP in terms of a flowbased conceptual model. It proposes that DLP can be oriented toward the entire information lifecycle and incorporate diverse processes in the course of business by using this framework as a foundation for specification and design of DLP. To demonstrate feasibility of the approach, the model is applied to the Records and Information Management system of the U.S. Internal Revenue Service.