Usage of data loss prevention tools to protect sensitive data is no longer restricted to the banking, financial services, and insurance, telecom, business process outsourcing, pharmaceutical, and research industries. An increasing number of companies from the manufacturing and retail verticals are also seriously considering DLP deployments. Madras Cements Limited, the Chennai-based sixth largest cement producer in India is one such company that plans to implement a data loss prevention tool in 2011.
What constitutes sensitive and confidential data at Madras Cements Limited? “Employees from our marketing team are often on the move, and carry a lot of sensitive data such as dealer information and credit limit on their laptops,” replies G Muthukrishnan, the deputy general manager for information technology at Madras Cements Limited. “We want to protect this critical information through a data loss prevention tool.” The data loss prevention tool will be deployed for the entire organization to provide protection at network and endpoint levels. “Our primary requirement is to curtail any leakage of information through USB devices and emails,” maintains Muthukrishnan.
The company has started evaluating leading data loss prevention tools, including the offerings of vendors like Symantec and Checkpoint. The company plans to undertake a thorough study of some more data loss prevention tools available in the market, before undertaking the first DLP pilot in the JFM 2011 quarter, which requires a huge investment. “We will select a solution only after understanding its performance and relevance in our environment,” reveals Muthukrishnan.
In the first few months of 2011, Madras Cements plans to develop policies for its data loss prevention tool, as well as restrict the printing of information rights to certain individuals. The data loss prevention tool would be the second major information security project for the company after its two-factor authentication deployed in 2009. The company uses RSA hardware tokens to enable secure authentication to remote users who wish to access business applications over the Internet.