Acronis Data Loss Prevention (DLP)

Frequently Asked Questions

• How complex is it to provision and manage services on top of Acronis DLP?

  Service providers can leverage DLP to deliver data loss prevention services without adding costly security expertise headcount on their end.

  Advanced DLP removes the inherent complexity of DLP solutions historically focused at enterprises, with automatic client-specific DLP policy creation achieved by learning from end users.

  Advanced DLP also streamlines DLP service management. Once the initial DLP policy is generated automatically in an easy to understand and validate graphical format, the enforced DLP policy can be extended with additional rules to allow and protect newly observed data flows through an automated, user-assisted process.

  The service is natively integrated into Acronis Cyber Protect Cloud, allowing you to centralize service management and provisioning and manage clients per tenant while integrating it with the most common RMM and PSA tools used by service providers.

  The unmatched level of data loss prevention automation offered by DLP, with its MSP-centric design, makes it easy to launch a comprehensive DLP service without high costs for Acronis partners.

• What types of clients could be protected with DLP?

  Data loss prevention protects against leakage of sensitive data. Service providers can launch services on top of DLP oriented with clients that store regulated sensitive information such as personally identifiable information (PII), protected health information (PHI), or payment card data (PCI DSS). DLP services are also critical for clients that need to protect confidential corporate information.

  Traditional industries that rely more heavily on data loss prevention are banking and finance (BFSI), healthcare, government, IT providers and telecoms, manufacturing, legal, retail and logistics.

• How are services with DLP usually provisioned?

  Provisioning data loss prevention services could be a complex and costly process, historically requiring additional consultation from DLP vendors. DLP, however, is specifically designed to remove this complexity and enable service providers to include a comprehensive DLP into their practice.

  The service is provisioned to clients through the Acronis Cyber Protect Cloud agent and requires only a flick of a switch in the management console. In initial provisioning, DLP should be set in observation mode to automatically create the initial DLP policy by observing end users’ behavior and optionally requiring a one-time justification from them for newly detected data flows. The baseline data loss prevention policy creation period should take between one and two months, depending on the quantity of observed data flows during that period.

  Once generated, the baseline (initial) DLP policy is presented in an easy-to-understand graphical format. It is then validated with clients, who best understand their business’ specifics and can help make the DLP rules more accurate. The validation process is extremely easy, requires no technical knowledge from clients, and is done in just a few hours.

  Once validated, the data loss prevention policy is enforced to allow all business-related transfers of sensitive data while blocking any sensitive data transfer that is not used in the business process. The policy can be enforced in two ways — strict enforcement or adaptive enforcement. In adaptive enforcement, you can leverage automated, user-assisted extensions of enforced policies with additional rules to allow and protect new data flows that were not observed when creating the initial DLP policy. The adaptive enforcement mode enables better business continuity, ensuring new data flows will not be blocked. The strict enforcement mode is for clients who require more strict controls, DLP will block any new data flows that do not match already approved ones in the DLP policy.