DLP-system in their Professional Activities in the Field of Information Security

The theme of the research is "DLP-system in their professional activity in the field of information security". The general purpose of the work is to study the principle of operation of DLP-systems, as well as their use by experts of the information security department. The research was based on the study of articles and literature on a given topic, as well as personal experience in the implementation of DLP-systems in more than 30 organizations, including the public sector, large banks and insurance companies. I analyzed typical violations and models of violators, which allowed to identify the relevance of the implementation and using DLP-systems, and will also be useful in the formation of IS policies. DLP-systems have been researched, including: DLP architecture research, identification of the main intercepted channels, technologies used in DLP to analyze the traffic that enters the system. The market of the world and Russian DLP-systems is analyzed and the domestic developments in DLP sphere are compared. Based on the conducted studies, the main stages of the system implementation were revealed, including: system testing, which allows to identify advantages and disadvantages of each system, when choosing the optimal solution. Recommendations for installation and configuration of the system was given, including recommendations for gathering requirements for configuring IS policies and controlling external ports. And also the process of responding to incidents of information security revealed, which makes it possible to make the most effective using DLP system in practice. The research has not only theoretical but also practical significance, recommendations can be successfully applied in practice when implementing or testing DLP-systems, since all recommendations were given on the basis of practical DLP implementation experience and communication with direct users of these systems.