DM-22—Data Loss Prevention

>Control Description

Data loss prevention capabilities are implemented to protect sensitive information as it is stored, transmitted, and processed.

Theme

Technology

Type

Preventive

Policy/Standard

Logging & Monitoring Standard

>Implementation Guidance

1. Ensure that Data Loss Prevention solution is enabled on systems to protect sensitive data as it is stored, transmitted, and processed. 2. Ensure appropriate alerts are sent and actions are taken to remediate any deviations.

>Testing Procedure

1. Validate whether that Data Loss Prevention solution is enabled on a sample system. 2. Validate whether appropriate alerts are sent and actions are taken to remediate any deviations.

>Audit Artifacts

E-DM-22

E-DM-21

>Framework Mappings

Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.

CIS Controls
1

3.13

Ask AI

Configure your API key to use AI features.