Data Leakage Prevention and Corporate Governance : An Approach Paper

Data leakage prevention has always been an important ingredient of corporate governance and attendant internal controls of organisations like BPOs etc., who handle confidential/business data of their customers. This is reflected in their IT infrastructure planning, implementation and subsequent management. Since availability and confidentiality of information is crucial for any business entity, IT administrators employ plethora of security tools and systems to ensure that the business sensitive information is not pilfered by unauthorized means and is not accessible to users who are not intended to view it. It is also a well known fact that the information security measures have proven to be futile when the weakest link in the information security chain i.e. human, advertently or inadvertently become an instrument of security breach. Consequently, a number of commercial information security solutions (both hardware based and software based) have proliferated and are readily available. In this approach paper we aim to review the existing information security practices, bring out the problems and propose a security framework which would make DLP near full proof. The proposed framework leverages on existing COTS technology, customized management software and procedural aspects to achieve the level of security which can meet the security requirements of even a highly sensitive LAN environment. This improvement would be achieved at much lesser cost than what is presently being spent by business entities on information security