34:55This recording is not available yet.
Modernizing Data Security with Proofpoint
Download resourcesCategories
AI & Emerging TechnologyPrivacy & Data ProtectionData Loss PreventionGovernance, Risk & LeadershipRisk ManagementSecurity Program & Strategy
Sponsored by
About this session
Jeremy Wittkop of Proofpoint argues that legacy DLP, built in 2002 around regulated numeric patterns like social security numbers, no longer matches how data actually leaves organizations. He walks through why programs resist modernizing (institutional inertia, perceived complexity, siloed stakeholders), then the case for change: more use cases covered, lower infrastructure cost via SaaS, and safer adoption of new technology such as generative AI. He frames three actor groups a program must address: well-meaning insiders, external actors using compromised accounts, and malicious insiders, illustrating the last with the American Semiconductor espionage case and a recent incident where triple-encrypted source code was smuggled out inside PDFs, both caught only through behavioral anomaly detection rather than content inspection. He then covers building a business case with the Open FAIR model and Return on Security Investment instead of ROI, five steps for transitioning from a legacy program, and a seven-area maturity framework built with NIST guidance covering planning, visibility, rule-building, enforcement, investigation, measurement and continuous improvement.
Recent research shows that organizations face more than one data loss incident per month. These incidents often result in business disruption, reputational damage, and regulatory fines. Unfortunately, legacy DLP solutions are no longer sufficient to address today's evolving risks—especially when it comes to protecting cloud and endpoint data and ensuring the responsible use of GenAI tools. Forward-thinking organizations are modernizing their data loss prevention programs by adopting a human-centric approach, which provides visibility into users' data access patterns across all applications and channels. Join us for an in-depth discussion on: Common reasons organizations don’t modernize their legacy DLP Platform Major benefits of modernizing DLP for Financial Services organizations Building a business case for change and the hidden cost of doing nothing What a transition looks like and why it's easier than many believe Assessing and maturing your DLP Program using a NIST Inspired Framework
Key takeaways
- Design controls for all three actor groups (well-meaning insiders, compromised external accounts, malicious insiders), not just the accidental-leak case traditional DLP was built for.
- Add behavioral anomaly detection alongside content inspection: most deliberate exfiltration is obfuscated (encrypted, split, appended to unrelated files) so content-only rules miss it.
- Build the business case with a risk-based model like Open FAIR and Return on Security Investment rather than a traditional ROI pitch to the CFO.
- Before transitioning off a legacy DLP platform, document current use cases plus the ones you cannot do today, and bring in stakeholders outside security (HR, legal, finance).
- Assess maturity across seven disciplines: planning, visibility, rule-building, enforcement, investigation and remediation, measurement, and continuous improvement.
Speakers
Jeremy Wittkop
Jeremy Wittkop is an expert in architecting, implementing, and managing Information Protection programs with a focus on helping multinational organizations comply with a changing regulatory landscape and protecting their most sensitive Intellectual… Read moreRead less
Jeremy Wittkop is an expert in architecting, implementing, and managing Information Protection programs with a focus on helping multinational organizations comply with a changing regulatory landscape and protecting their most sensitive Intellectual Property. Jeremy is a trusted information protection thought leader -- published author, blogger, public speaker, and advisor to clients, technology entrepreneurs, and public and private equity investors.
