A large e-commerce company processes millions of transactions daily and stores vast amounts of customer data. Due to increasing regulatory scrutiny (e.g., GDPR, CCPA) and a rise in sophisticated cyberattacks, the company needs to enhance its ability to identify, protect, and report on sensitive data across its hybrid cloud environment. The existing tools are siloed and provide an incomplete picture of data risk. Which strategy would provide the most comprehensive solution for continuous data discovery, classification, and protection across the enterprise?
- AImplementing an advanced Endpoint Detection and Response (EDR) solution.
- BEnhancing network segmentation and firewall rules.
- CDeploying a unified Data Security Posture Management (DSPM) platform.
- DUtilizing a Security Orchestration, Automation, and Response (SOAR) platform.
Show answer & explanationAnswer & explanation
Correct answer: C. Deploying a unified Data Security Posture Management (DSPM) platform.
A Data Security Posture Management (DSPM) platform is designed to provide continuous, real-time visibility into sensitive data across hybrid and multi-cloud environments. It automates data discovery, classification, and risk assessment, identifying misconfigurations, access risks, and compliance gaps specific to data. This directly addresses the need for comprehensive data protection, regulatory compliance, and reporting in a complex data landscape.
Why the other options are wrong
- A. EDR focuses on endpoint threat detection and response, not comprehensive data discovery, classification, and protection across hybrid cloud environments.
- B. While network segmentation and firewall rules are fundamental security controls, they do not provide the granular data visibility, classification, and continuous posture management required for regulatory compliance and advanced data protection challenges.
- D. SOAR platforms automate security operations and incident response workflows but do not specialize in the continuous discovery, classification, and posture management of sensitive data itself.
Data Security Posture Management (DSPM)
DSPM is a security solution that provides continuous, real-time visibility into sensitive data across hybrid and multi-cloud environments. It automates data discovery, classification, and risk assessment, identifying misconfigurations, access risks, and compliance gaps related to data.
- Automates data discovery and classification.
- Identifies data risks and compliance gaps.
- Provides continuous monitoring of data posture.
- Covers hybrid and multi-cloud environments.
Memory trick: Discover, classify, protect your data everywhere.