Abroad, these programs are used by technology specialists
Posted: Sun Jan 19, 2025 7:09 am
While in Russian reality, they are used by “investigation” specialists.
In addition, the approach to using DLP systems is fundamentally different. This is due to the fact that abroad, these programs are used by technology specialists, while in Russian realities, they are used by "investigation" specialists, who are often not very technically savvy. These two groups use different methods in their work.
For some, it is important to set up the system correctly so that it uae whatsapp number list performs as many tasks as possible without human intervention, in automatic mode, independently solving most of the issues. Russian security specialists, on the contrary, prefer to work with the results mostly manually, using personal experience, without relying on the automation of the system.
There is also a significant difference in legislation that imposes restrictions on the possibilities of control - in Western systems they are much stricter.
These are such different approaches to information protection that the share of Western information security products on the Russian market has always been insignificant. This means that import substitution will not have a dramatic impact on the balance of power.
via GIPHY
From DLP to SIEM
Modern DLPs are currently developing in two directions:
The number of controlled channels is increasing, the list of supported devices and systems is expanding.
Automatic analytics methods and data processing tools are being improved. Today, any DLP monitors dozens of transmission protocols, hundreds of online services, many devices and ports, and tools for monitoring user performance and tools for detailed incident investigation (screenshots, video recording of actions) are being actively added. Some development companies are expanding their product lines that solve security problems but are not directly related to DLP.
In addition, the approach to using DLP systems is fundamentally different. This is due to the fact that abroad, these programs are used by technology specialists, while in Russian realities, they are used by "investigation" specialists, who are often not very technically savvy. These two groups use different methods in their work.
For some, it is important to set up the system correctly so that it uae whatsapp number list performs as many tasks as possible without human intervention, in automatic mode, independently solving most of the issues. Russian security specialists, on the contrary, prefer to work with the results mostly manually, using personal experience, without relying on the automation of the system.
There is also a significant difference in legislation that imposes restrictions on the possibilities of control - in Western systems they are much stricter.
These are such different approaches to information protection that the share of Western information security products on the Russian market has always been insignificant. This means that import substitution will not have a dramatic impact on the balance of power.
via GIPHY
From DLP to SIEM
Modern DLPs are currently developing in two directions:
The number of controlled channels is increasing, the list of supported devices and systems is expanding.
Automatic analytics methods and data processing tools are being improved. Today, any DLP monitors dozens of transmission protocols, hundreds of online services, many devices and ports, and tools for monitoring user performance and tools for detailed incident investigation (screenshots, video recording of actions) are being actively added. Some development companies are expanding their product lines that solve security problems but are not directly related to DLP.