One of the sections of the appendix on

[relemedf5w023]

As an organizational measure, the first thing that the support team needs to do is to draw up a regulation on the protection of confidential information in the company. Each employee involved in the processing of protected objects must be familiar with this regulation, as well as with a description of the process and the register of protected information that he processes as part of his job responsibilities.

the protection of confidential information should contain requirements for informing the support group of all changes (planned or already made) to the processes of processing confidential information by persons responsible for the process, as well as requirements for employees to inform responsible persons if they become aware of such changes. This section must necessarily stipulate the maximum permissible timeframes for informing, and it would be a big plus to develop a form for informing about changes (indicating their possible types) as an appendix to the regulation - it is especially important to reflect changes in the object access matrix (including hong kong whatsapp data entities that are not employees of the company).

It is also recommended to rank processes by criticality and to specify shorter deadlines for informing about changes in the most important processes.

When regulating the notification deadlines, they must be specified in such a way that the support group has enough time to examine the changed process, update the registers and adjust the DLP rules.

And the final step after familiarizing employees with the regulation will be sending out a memo, for example, once a quarter, indicating the most important aspects: the deadlines for informing and contact information for the support group members.

Conclusions
Maintenance work on the information leak prevention system should follow the rules of a continuous integrated approach to organizing information security with its constant improvement, when not only the specialized department but also all employees processing confidential data participate in ensuring protection. This task can be solved by the above methods, combining technical means of protection, organizational measures and by increasing the level of awareness in the company, because the most effective DLP is a means of training employees to work with confidential information, and not a surveillance tool.