simpl.
로그인
사이버보안 GRC 14개 항목

Data Loss Prevention (DLP) Program Audit

이 체크리스트는 영어로 제공됩니다.

Audits the coverage, policy tuning, and incident handling of the data loss prevention program across endpoints, email, network, and cloud channels.

CIS v8NIST 800-53ISO 27001

무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.

Data Discovery & Classification

  • Is sensitive data classified and labeled to drive DLP policy? *
  • Is automated discovery used to locate sensitive data at rest? *
  • Is a data inventory maintained mapping sensitive data to systems and owners? *

Channel Coverage

  • Is DLP enforced on outbound email? *
  • Is endpoint DLP deployed to control USB, printing, and local exfiltration? *
  • Is DLP or CASB coverage applied to cloud and SaaS uploads? *
  • Is network DLP inspecting web and file-transfer traffic?

Policy & Tuning

  • Are DLP policies aligned to data classifications and regulatory obligations? *
  • Are policies tuned to manage false positives while maintaining detection? *
  • Are blocking, quarantine, and alert-only actions defined per policy severity? *
  • Are exception and override requests logged and approved?

Incident Handling

  • Are DLP alerts triaged by a defined team within an SLA? *
  • Are confirmed data-loss events escalated to incident response? *
  • Are DLP metrics and trends reported to management?

Data Loss Prevention (DLP) Program Audit 체크리스트 전체 다운로드

인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.