Simplify Sensitive Data Protection With Fully Managed DLP and EDR

The company had a small security team, but recognized it was not prepared to manage both DLP and EDR with its existing resources. In their words, “getting budget for security solutions was simple compared to getting budget for additional personnel.” In short, they needed a partner that could act as their security experts and provide oversight and guidance for protecting their data.

Critical Success Factors 

• Satisfy partner’s recommendation for DLP and EDR 
• Minimal impact on internal security resources 
• Visibility to all data use throughout the environment and through egress points 
• A partner with demonstrated experience managing sensitive information for customers

The Solution

The company knew Fortra™’s Digital Guardian® ’s reputation through its existing business partners and conducted an extensive proof of concept with Digital Guardian and another vendor. The process demonstrated Digital Guardian’s expertise in designing policies to meet the company’s requirements, its ability to provide visibility to data throughout the environment and provide alerts and remediation guidance when required. Digital Guardian’s ability to deliver DLP and EDR with a single agent simplified deployment and overhead on the endpoints while accelerating compliance efforts. 

When alerts occurred, Digital Guardian’s Managed Security Program (MSP) team was able to quickly identify any changes on endpoints, including whether any new processes were launched and if any additional endpoints were affected. Before Digital Guardian, the company was “blind to these events.”

The granularity of policies available in Digital Guardian also impressed the company. Previously they prohibited the use of cloud storage services like Dropbox out of concern that sensitive data could be exfiltrated. This forced employees to request one-off exceptions from security repeatedly when they needed to send large file. This often caused users to view security as a blocker in the business and created unnecessary friction between security and the business units. With Digital Guardian, the company could allow departments or individuals with access to these services, while still protecting uploads that included PHI or other sensitive data.