Data Leakage Prevention Implementation Case Study

This case study outlines the implementation of a data leakage prevention solution for a department of the Hong Kong government that manages a significant source of revenue. The department faced challenges in protecting confidential data stored in their internal systems, particularly from potential leaks by authorized employees. Existing security measures were primarily focused on external threats, leaving a gap in safeguarding against internal risks. The chosen solution, Curtain e-locker DLP, enables the department to protect specific systems without relying on keyword scanning, thus eliminating false positives that could disrupt normal operations. The system restricts unauthorized data transfers and logs all actions for auditing purposes. After two years of successful use, the department is considering expanding this solution to other internal systems requiring similar protection. The results include targeted protection, improved data security, and reduced reliance on employee discipline, demonstrating the effectiveness of the implemented solution.