SearchInform has expanded the range of blocking options available in SearchInform Risk Monitor, its Next-Gen DLP solution. The system can now block files with SearchInform FileAuditor classification labels from being copied to USB drives.
If an employee attempts to copy a document labeled “Confidential” or “Trade Secret” to a USB drive, Risk Monitor blocks the action and notifies the user that the file is protected and cannot be copied. The notification makes the control process transparent: users see exactly why the action was blocked and understand that it violates security policy. This helps reduce accidental violations.
SearchInform FileAuditor is a DCAP solution for auditing and protecting file resources. It scans corporate repositories to identify files that require protection, such as documents containing personal data, financial information, trade secrets, or other sensitive content. FileAuditor assigns classification labels based on the type of content found in each file. These labels indicate the file’s level of sensitivity and the protection measures that should be applied. When FileAuditor and Risk Monitor are used together, Risk Monitor can rely on these labels instead of analyzing file content each time a file is sent or copied. This reduces system load and enables a faster response to potential threats.
“We continue to develop the integration of our systems to make data protection multi-layered yet seamless,” said Sergio Bertoni, Lead Analyst at SearchInform.
“Risk Monitor already uses FileAuditor labels to block file transfers, for example, by email, in messengers, network folders and cloud services, and now it can do the same for transfers to USB drives,” he added.
The new feature complements the existing set of tools for preventing data leaks via external storage devices. For example, Risk Monitor previously updated its removable device control module for Linux-based PCs. It also automatically blocks documents from being written to USB drives based on their content or attributes, such as format, quantity, size, and other parameters. Blocking rules can be applied precisely to individual employees or groups, as well as to specific PCs, so that restrictions do not disrupt business processes. When required, the system can also be configured to completely block access to USB drives.
ABOUT SEARCHINFORM
SearchInform is an information security and risk management product vendor as well as an MSS provider. The company's clients are more than 4000 companies in 20+ countries. Today, the team has products and services for comprehensive protection against insider threats at all levels of corporate information systems: FileAuditor (the DCAP class solution); DLP system with extended functionality; Risk Monitor (advanced platform for internal threat mitigation); SIEM system, Information Security outsourcing service.
Subscribe to get helpful articles and white papers.
We discuss industry trends and give advice on how to deal with data leaks and cyber incidents.
Subscribe to our newsletter and receive a bright and useful tutorial Explaining Information Security in 4 steps!
Subscribe to our newsletter and receive case studies in comics!