Consolidated DLP and EDR 
for Internal and External Threats

About The Customer

At one of the world’s largest data management companies, the value of proprietary information was always clear. It was the primary reason its customers used its solutions. This also included their own proprietary information; data which allowed it to compete effectively in a crowded market. With thousands of employees worldwide, the company recognized the risk to valuable IP from attacks originating both inside and outside the organization.

The Business Challenge

The company’s data included source code, design documents, customer information, and internal financial records. They required a solution that would recognize the different types of data and apply appropriate controls, automatically. Manually classifying millions of documents, aside from being ineffective, was simply not possible. 

The company started with Data Loss Protection, but also recognized the growing risk from outsiders using advanced techniques to gain a foothold in their environment, move laterally, and access confidential data. While adding Endpoint Detection and Response (EDR) was important, they needed a solution that would block malicious activity instead of simply generating alerts to security. 

The Solution

The company issued separate RFI’s for DLP and EDR. While they had previously licensed Fortra™’s Digital Guardian® DLP solution, they were unaware of Digital Guardian’s Consolidated DLP and EDR offering. Once provided information on this solution, it became clear they could address both external and internal threats with a single agent on the endpoints and a single management console. The subsequent competitive bake-off revealed Digital Guardian as the ideal partner. 

Digital Guardian’s MSP team translated the company’s desired policies into a set of enforceable controls on every endpoint. This allowed the company to have full visibility to all data types and enforce controls to prevent data loss through printing/emailing documents or downloading to unauthorized devices. All without the overhead and learning curve of deploying multiple on-premises solutions. A single console for building, deploying, and monitoring DLP and EDR greatly simplified management and reporting. 

Digital Guardian’s automated classification eliminated any need to manually classify millions of existing documents, spreadsheets, and other files. Automatic classification assigns policies to data based on the source of the data (e.g., department, user, application, server) or on the contents of the data (e.g., PII, credit card information) to protect data from misuse and simplify regulatory reporting. This ensured a quick deployment for initial testing, and rapid time-to-value for the company.

Data Types We Protect

INTERNET & ADVANCED TECHNOLOGY 

• R&D Data 
• Customer Contracts 
• Source Code 
• Patents

SAAS

• Personally Identifiable Information (PII) 
• Source Code 
• Login Credentials 
• Business Processes

SOCIAL NETWORKS

• Login Credentials 
• Personal Information such as Pictures, Profile Data

TELECOMMUNICATION

• Personally Identifiable Information (PII) 
• Privacy Data 
• R&D Data 
• Network Design 
• Patents