Source: [LinkedIn](https://www.linkedin.com/pulse/dlp-technologies-ask-gerardus-blokdyk/)  
Author: [Gerardus Blokdyk](https://www.linkedin.com/in/gerardblokdijk/)  
Publication date: March 22, 2022
Retrieved from on March 23, 2022

Relevant ISO 27001:2013 clauses/controls:
- [[ISO 27001 C 9.2 Internal audit]]
- [ISO 27001 A 18 Compliance](../../Standards/ISO27x/legacy/ISO%2027001%202013/ISO%2027001%20A%2018%20Compliance.md)

Relevant ISO 27002:2022 clauses/controls:
- [a-5.7-Threat-intelligence](../../Standards/ISO27x/OST/27002/EN/a-5.7-Threat-intelligence.md)


## DLP Technologies: Ask This;

1. Which tactics does your organization use to ensure that employees comply with your data protection/data loss prevention policies?

2. Which data loss prevention strategies are used to ensure that unauthorized users cannot access information stored in specified fields?

3. Do you have redundant power sources to reduce the risk of data loss in case of interruption of power?

4. Which data loss prevention policies for which services do you need to implement to ensure compliance with industry regulations moving forward?

5. Does your organization have policies in place preventing employees from copying client data to mobile devices, external media, or forwarding it to third party email?

6. Does your organization have effective measures in place to protect against various methods of data loss?

7. When configuring data loss prevention agents, what does the file recovery area location setting determine?

8. Have you implemented a DLP solution to protect data from leakage by users working remotely on high risk processes?

9. Do you have more than one tech savvy person who can manage data recovery from physical media under the extreme pressure of a data loss emergency?

10. Is your cybersecurity team monitoring DLP alerts and investigating the potential loss of sensitive data leaving the network boundary?

11. How does compliance affect your decision to buy or consider a comprehensive data loss prevention product?

12. Have you implemented a cloud DLP solution to protect data from leakage, based on your data classification schema?

13. Does your solution provide DLP support for unstructured data stored in non file formats?

14. Do you have an intrusion detection system to give visibility to potential data security breaches?

15. When inspecting data using DLP policies, is information as user name or file name where the violation occurred stored in your solution?

16. What is the main difference between data loss prevention and other security technologies?

17. How do you prevent sensitive data from leaving your network when employees have access to webmail?

18. Does the DLP solution your organization uses have the ability to integrate with enterprise active directory servers to determine users and build user, role, and business unit policies?

19. Does the DLP solution combine identity and content awareness to protect your sensitive data based on who is accessing it?

20. Can your cloud defenses apply DLP policies to cloud services and app data at rest and in motion?

21. Have you set up data loss prevention policies and/or set applicable restrictions on external file sharing?

22. Do you enforce DLP policies in real time as data is uploaded or shared without impacting end user experience?

23. Is host based data loss prevention in use to limit what content can be transferred to authorized removable media devices?

24. Which aspect of cloud computing serves as the biggest challenge to using DLP to protect data at rest?

25. What are your organizations plans to adopt data security and information risk management technologies?

26. Are data loss prevention tools in place to monitor for inappropriate data sets entering or leaving the network?

27. Which interface provides single sign on access for the purpose of administering Data Loss Prevention servers, managing policies, and remediating incidents?

28. Do you have capability to logically segment and recover data for a specific customer in the case of a failure or data loss?

29. What detection methods do you have to determine if the data has been breached by an outside source?

30. How do you leverage previous resource investments and extend existing on premise data loss prevention policies to the cloud?

31. Which data loss prevention service is responsible for controlling the detection servers?

32. Is it permissible to collect IP addresses, behavioral data, log data, DLP and endpoint data, tracking data, data analytics for security purposes?

33. Do you have stringent policies and procedures in place to reduce exposure of data to unauthorized people?

34. Where is a DLP solution generally installed when utilized for monitoring data in transit?

35. How have you learned about the success or status of your organizations data protection efforts?

36. Will there be any impact on your transactional information or data loss as a result of the change?

37. What is the maximum amount of data loss that can be tolerated after a disruption has occurred?

38. How do you prevent copy/ paste, disable printing and enforce other data loss policies across files?

39. What is your organization doing to take advantage of automation to improve data & information integrity?

40. Which is a way to implement a technical control to mitigate data loss in case of a mobile device theft?

41. Do you have policies in place that regulate or expressly forbid storing PII or confidential data on personal laptops, removable media and/or smartphones?

42. Does the platform provide customer instance isolation, encryption, and data loss prevention?

43. How has the use of cloud resources affected data protection risks within your organization?

44. Do you know any organization that has successfully identified and secured all sensitive data sitting idle on its network?

45. How do you prevent data loss from causing business disruption?

46. Does the DLP solution your organization uses have the ability to integrate with digital rights management client & server?

47. What about data loss that occurs on the users end accidental deletion due to user error or sync malfunctions or malicious deletion from hackers or disgruntled employees?

48. Which controls can be implemented together to prevent data loss in the event of theft of a mobile device storing sensitive information?

  

**Organized by Key Themes: SECURITY, DATA, MANAGEMENT, RISK, CLOUD, DEVELOPMENT, PROJECT, TECHNOLOGY, SYSTEMS, NETWORK:**

  

## SECURITY:

  

Which configuration changes should the administrator make under the advanced server settings to include all cases?

Be sure your group is involved in cloud network security technology (which include intrusion monitoring, threat detection and prevention systems, firewalls, and DDOS prevention solutions), and/or data protection technology (which include encryption, key management, data loss prevention, and hardware security modules), and/or identity management systems (which include directories, access servers, authorization services, identity provisioning and governance systems). 

  

Does your organization have perimeter scanning/monitoring agreements with managed network services providers?

Develop experience managing security information and event management (SIEM) systems, threat intelligence platforms, security automation and orchestration solutions, intrusion detection and prevention systems (IDS/IPS), file integrity monitoring (FIM), data loss prevention (DLP) and other network and system monitoring tools. 

  

What impact might it have on the success and trajectory of a reform coalition when your organization initiates coalition activity?

Interface so that your strategy is involved in security technologies such as automated penetration testing tools, Security Information and Event Management (SIEM), IDS/IPS, Data Loss Prevention (DLP), Proxy, Web Application Firewall (WAF), Endpoint Detection and Response (EDR), Anti-Virus, Sandboxing, network- and host-based firewalls, Threat Intelligence, etc. 

  

Does the DLP solution your organization uses have a quarantine that includes the ability to collect reports into cases?

Optimize threat detection products commonly deployed in corporate and cloud environments including solutions for Web Proxies, Data Loss Prevention (DLP), Security Information and Event Management (SIEM), advanced email protection, Endpoint Detection and Response (EDR), Antivirus, Intrusion Detection/Protection (IDS/IPS), and other standard industry security technologies. 

  

How do you determine if a system collects PII?

Make headway so that your personnel utilizes a variety of technologies, including security information and event management (SIEM), data loss prevention (DLP), intrusion prevention systems (IPS), endpoint detection and response (EDR), cloud access security broker (CASB) and other tools in designs. 

  

Is the it system or its information used to support any activity which may raise privacy concerns?

Lead application security solutions, data loss prevention solutions, insider threat solutions, enterprise vulnerability management and support business development (merger, acquisition, divestiture) security and IT solutions. 

  

Is there someone close by to whom the community or public officials can turn for action?

Be certain that your team is involved in intrusion prevention systems (IPS), vulnerability scanning/management, system hardening, security standards, data loss prevention (DLP) solutions, and endpoint detection and response (EDR). 

  

What compliance monitoring regime is envisaged and what are the implications of noncompliance?

Confirm that your operation is involved in IT security providing technical support/system administration for large corporate enterprise security tools such as file integrity monitoring software, web application firewalls, cloud access security brokers, file encryption, database activity monitoring, email security, data loss prevention, bot management, fraud and host based next-gen anti-malware/intrusion detection/advanced persistent threat software. 

  

What compliance monitoring regime is envisaged and what are the implications of non compliance?

Lead Service Delivery Team in delivering a wide array of cyber security solutions, including vulnerability/penetration testing, web application security, security information and event management (SIEM), file integrity monitoring, data loss prevention, and identity and access management. 

  

Does your solution allow multiple scans to occur simultaneously on the same scanning server?

Be sure your team is involved in developing your organization needs in depth security architecture standards, frameworks and design patterns in all aspects of the Cloud including the server, application, network, and data layers. 

  

## DATA:

  

Is available control/risk reporting data of sufficient quality to facilitate a full review?

Meet with the business and marketing stakeholders to understand their needs and work with the team to provide timely and quality solutions Mentor team members in development, requirements gathering, and software methodologies and process Construct and deliver long term plans, estimates Analyze application data and provide different metrics and analysis to management Present technology and project presentations to upper management for discussion and approvals Manage multiple initiatives simultaneously Identify product and project risks, communicate them to the team, and create mitigation plans Drive continuous improvements leveraging Agile methodologies Facilitate team communication, team building exercises, and morale. 

  

Does the agent perform detection locally, avoiding the need to transmit data over the network?

Perform triage of alerts from on-premises and cloud based security information and event management systems, intrusion detection systems, antivirus, cloud based services, windows servers, network infrastructure, data loss prevention systems, user behavior analytics systems and user submitted security inquiries. 

  

How do you get users and business units involved in the data clean up process?

Make headway so that your organization is involved in common security controls as data loss prevention (DLP), multi factor authentication (MFA), intrusion detection, encryption and mobile application management (MAM). 

  

Where is a DLP solution generally installed when utilized for monitoring data in transit?

Develop experience working with SIEM systems, Endpoint Detection and Response (EDR) solutions, threat intelligence platforms, security automation and orchestration solutions, intrusion detection and prevention systems (IDS/IPS), Data Loss Prevention and other network and security monitoring tools. 

  

How do you protect the data on lost devices and meet regulatory compliance?

Develop experience managing security technologies like Endpoint Detection and Response (EDR), CASB (Cloud Access Security Broker), Mobile Device Management (MDM), and Data Loss Prevention (DLP). 

  

Do you conduct external audits regularly as prescribed by industry best practices and guidance?

Monitor, detect, and enforce endpoint compliance and security posture including data retention policies and data loss prevention controls in accordance with industry best practices. 

  

How do you enable the inspection of outbound content for DLP?

Make sure your staff is responsible for the design, deployment, and configuration of endpoint security solutions that enable data security. 

  

How do you get users and business units involved in the data clean up process?

Oversee that your operation is involved in cyber technologies as Data Loss Prevention (DLP), Malware detection, User behavior analysis (UBA), and Endpoint Detection and Response (EDR) tools. 

  

Have you noticed difference in quality assurance test methods between different parties?

Continue to leverage and enhance User Activity Monitoring (UAM), Data Loss Prevention (DLP), and SIEM technology solutions to address risk as it relates to all aspects of Insider Threat risk. 

  

Does your organization provide connectivity information per location so that the vendors can determine what type of solution can be supported per location?

Support email security, data loss prevention and other security focused applications. 

  

## MANAGEMENT:

  

Is your cybersecurity team monitoring DLP alerts and investigating the potential loss of sensitive data leaving the network boundary?

Verify that your design is monitoring various information security systems including those for asset inventory, data loss prevention, endpoint protection, security incident and event management, and vulnerability management. 

  

What is your organization doing to take advantage of automation to improve data & information integrity?

Assure your group improve data protection, data loss prevention (DLP), and identity and access management technologies and procedures for on premise and cloud services. 

  

Did you alert the prominent individual that personally identifiable information had been compromised?

Make headway so that your group is responsible for your organizations network provisioning, circuit design, inventory management, and number procurement activities Make sure your organization is responsible for the departments standards and procedures and the design and management of all Transport tools and systems supporting companys transport service delivery. 

  

What compliance monitoring regime is envisaged and what are the implications of noncompliance?

Invest in review of system security monitoring and analysis tools, Identity and Access Management platforms, IT GRC platforms, and DLP systems. 

  

Is there a good vision for how the materials will be accessed by and delivered to researchers?

Proactively assess areas of potential risk or vulnerability and deliver recommendations to the Security and Risk Management Team. 

  

Are you doing adequate due diligence before contracting with third party providers particularly in regards to involving audit departments prior to contractual commitments?

Work closely with other IT team members and end users to provide solutions based on business requirements during all phases of the development and life cycle management process. 

  

Which jurisdiction will the employees affected by any shared or merged services report to?

Liaison so that your company performs data discovery, data classification, insider threat management and Data Loss Prevention (DLP) tasks. 

  

Can each user in the workflow be assigned to remediation of a certain set of incidents?

Migrate on-premises workloads to the cloud (AWS/Azure) Monitor application and infrastructure and identify opportunities to improve performance Work with developers and quality analysts to drive issues to resolution during application instability Identify weaknesses and be the driver of improvements Maintain and implement change management control procedures and processes for production, UAT and releases. 

  

Who is responsible internally for the protection and security of that critical information?

Confirm that your personnel is responsible for data loss prevention focused on compliance, data management rights, and data visibility. 

  

How do you get users and business units involved in the data clean up process?

Make sure your strategy is involved in risk analysis and the implementation of vulnerability management programs and related tools and systems. 

  

## RISK:

  

What is the minimum number of DLP policies and rules you must create to meet the requirements?

Identify and define data loss prevention classifications and work with business to classify all artifacts into specific categories, based on security and risk solutions that meet business needs. 

  

Which is an advantage of using group policy to redirect users local folders to networked drives in regards to data loss prevention?

Be confident that your team leads strategic infrastructure and security planning to achieve business goals by prioritizing keeping the lights ON efforts with newer enterprise system implementations, coordinating the evaluation, deployment and management of current and future infrastructure and security technologies using a risk-based assessment methodology. 

  

How does your organization identify relevant best practices regarding cybersecurity for its business model?

Operationalize establishing and maintaining internal control processes and practices which help ensure that the enterprise security risk management program remains current and incorporates/aligns with industry standards and practices including SOC 1, SOC 2, and ISO 2700X. 

  

How do you build the database architecture in order to meet the requirements?

Ensure your company works independently or as a member of cross functional teams on initiatives to meet enterprise security and information risk management goals and objectives. 

  

Will the deployment be applied to all of the traffic of data in use, or in motion, or at rest?

Develop experience working with Data Loss Prevention (DLP), insider threat detection and response, Cloud Access System Brokers (CASB), SIEM solutions, and User Behavior Analytics (UBA) to address risk as it relates to Insider Threat, sensitive data exfiltration, identity access management, and/or fraud. 

  

How do you manage outages and downtime?

Make sure the Security Risk Management Analyst invest in the day-to-day execution of governance, risk management, and information assurance processes and initiatives with a focus on supporting formal audit and compliance activities. 

  

How long does it typically take your organization to mitigate and stop an insider attack?

Collaborate with Security, Engineering and Data teams to incorporate strong security controls, apply security best practices in your development life cycle, and mitigate risks and security vulnerabilities. 

  

Do you conduct internal audits regularly as prescribed by industry best practices and guidance?

Create requirements for evolving Data Loss Prevention, DLP risks, DLP technical controls, DLP technologies, security best practices in conjunction with security architecture. 

  

Which individual in your organization should complete the self assessment for the specified contract?

Make sure the Information Security Cyber Assessment Team objective is to ensure that your organization can effectively assess cyber threats and risks against your organization. 

  

Does your organization have perimeter scanning/monitoring agreements with managed network services providers?

Be confident that your operation is working closely with the Vendor Management Office, supports the implementation and administration of a vendor security risk management program including assisting in performing vendor audits, assessments, and monitoring related corrective action plans. 

  

## CLOUD:

  

Are security components identified during each phase of the software development lifecycle?

Safeguard that your strategy has involvement in implementing security controls, including access control, privileged access management, data security, network security, data loss prevention, cloud security, vulnerability management, configuration management, privacy, and audits. 

  

Are there any administrative, regulatory, or bureaucratic barriers at your organization that inhibit your ability to secure your organizations networks and web applications?

Be sure your staff is designing a converged DLP strategy in addressing on-prem and Cloud web access governance and data loss prevention use cases for granular access control while still enabling business to externally collaborate and increased employee engagement with social media. 

  

How do you receive support for your implementation efforts or on behalf of your customer?

Be responsible for assessing tools and technology that support access, crypto, data loss prevention, and cloud solutions. 

  

Where in the application development lifecycle does your organization build in security features?

Develop experience leading high stress environments and existing related data protection infrastructure, including cloud DLP. 

  

How can non sensitive information be communicated to outsiders without creating covert channels?

Ensure you are creating an innovative, highly skilled, results oriented technology team with a deep commitment to building and implementing advanced network and cloud architectures. 

  

How the security gap is filled using the DLP technology compared to previous techniques?

Secure that your workforce is involved in developing server/(internal) client architecture using hybrid cloud environments. 

  

How do you protect data without impeding employee productivity or overloading your IT staff?

Secure that your staff is involved in developing cloud native applications in AWS/Azure. 

  

Do you feel ready to apply a variety of advocacy tools to develop your advocacy strategy?

Develop experience working with large, complex information systems and managing Cloud Operations at scale. 

  

How do you get users and business units involved in the data clean up process?

Warrant that your group is involved in native cloud DLP (GCP/AWS/Azure) or encryption solutions. 

  

How do you get users and business units involved in the data clean up process?

Certify your organization is involved in Agile and Cloud technologies, Continuous Integration/Deployment (CI/CD). 

  

## DEVELOPMENT:

  

How do you assure data isolation in a multi tenant environment?

Make sure your strategy analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks and contributes to the development and maintenance of information security architecture. 

  

Do you conduct network layer vulnerability scans regularly as prescribed by industry best practices?

Certify your group supports the development of coding standards and adheres to best practices and security guidelines. 

  

Does the DLP solution your organization uses provide the ability to delegate role based user administration by scope?

Operationalize development of use cases to automate and orchestrate security or business tasks. 

  

Are there any sectors or industries which you think are leading the way in how to approach the issue of latent errors?

Verify that your personnel assists IT Leadership Team and project leaders/managers in the development of feasibility analysis, tasks-environmental study, requirements definition, system conceptualization and cost-benefit study; develops general design of a system in accordance with specifications. 

  

How do you leverage previous resource investments and extend existing on premise data loss prevention policies to the cloud?

Liaison so that your workforce contributes to the development of Early Warning security policy and procedures. 

  

Will there be any impact on your transactional information or data loss as a result of the change?

Secure that your staff partners with the project management team to plan and coordinate project development activities across multiple teams. 

  

How do you get users and business units involved in the data clean up process?

Make sure your team is involved in leading teams in the design and development of full stack solutions. 

  

Are data loss prevention tools in place to monitor for inappropriate data sets entering or leaving the network?

Manage the SCRUM process and work closely with business analysts and development team to plan product releases and resolve issues. 

  

What are the primary features you would want in a DLP product, regardless of your current deployment plans?

Develop the detailed Project Management Plan for the enhancement, business process re engineering or development effort. 

  

Can each user in the workflow be assigned to remediation of a certain set of incidents?

Lead security engineers with development of workflow automations, analytics, and visualizations. 

  

## PROJECT:

  

Can your system provide custom report filtering across different variables and attributes?

Make sure the Information Security Analyst participates in projects and works with business units to provide requirements on implementation of controls. 

  

How do you manage application security?

Conduct or invest in vendor security and risk assessments providing recommendations to mitigate risks and manage resulting corrective action plans and projects. 

  

Is there a written safety plan, or behavioural contract in place which you are aware of?

Facilitate and participate in the delivery process for project deliverables including Project Plan, Business and Functional Requirements, Analysis and Design, QA, End User Testing, and Product Management deliverables. 

  

Does the DLP solution your organization uses have a quarantine that includes the ability to redact and/or highlight sensitive information?

Secure full brand cohesiveness on- and of-board Effectively communicate research findings, conceptual ideas, detailed design, and design rationale both verbally and visually Participate as a contributor to an interdisciplinary team that includes other designers, project management, business and brand strategists, and hardware and software developers. 

  

How is sox compliance achieved if in scope systems are deployed in the cloud provider environment?

Liaison so that your group is responsible for tracking project milestones, anticipating risks and issues, proactive risk mitigation and making recommendations to business and IT leadership to achieve successful outcomes. 

  

Does your solution target specific cloud folders for DLP scanning, and/or exclude folders from scanning?

Interface with cross functional teams to progress security projects and initiatives. 

  

How do you reduce the risk of data loss?

Confirm that your design defines project requirements, quality standards and time lines; determines and evaluates risks that may affect project; defines specific activities to be performed to produce project deliverables; evaluates deliverables and ensures project is ready to move on to its next phase; addresses any problems found in testing/piloting; ensures scheduled time frames are met; provides regular progress reports; determines and allocates resources and invest in budget planning; determines and evaluates testing and/or pilot program and/or project; oversees implementation schedule; manages and processes. 

  

How is sox compliance achieved if in scope systems are deployed in the cloud provider environment?

Guarantee your workforce is leading a diverse IT project team comprised of engineers with expertise in different subject matter areas, architects, cloud strategists, and project managers from initiation to production implementation, tracking project details to ensure expected results are achieved. 

  

Which network monitor configuration changes should be implemented to reduce the number of packets that are discarded?

Secure that your team is accountable for management of the projects scope for the project and gaining agreement and approval of scope changes with (internal) customer representatives and affected stakeholders. 

  

How do you get users and business units involved in the data clean up process?

Certify your process is involved in technical project management discipline and techniques. 

  

## TECHNOLOGY:

  

How do you get users and business units involved in the data clean up process?

Check that your staff is involved in technology solutions and tools used in data management and analytics. 

  

How do you determine that the security controls implemented are still enforced?

Review (internal) customer information with the technology team and implement technical initiatives for highly complex projects impacting multiple lines of business or across the enterprise. 

  

How do you know if the online data protection suite is working?

Secure that your design advises project teams and proposes solutions for complex and/or technical information governance and/or information technology issues. 

  

Is there a good vision for how the materials will be accessed by and delivered to researchers?

Make headway so that your team is collaborating with internal and external teams to deliver technology solutions for the business needs. 

  

How do you receive support for your implementation efforts or on behalf of your customer?

Oversee that your company partners with Business System Technology Architects to support Strategic Development and Execution. 

  

Does your architecture support remote sites and network users distributed across many different locations?

Be sure your organization is involved in distributed cloud systems technology (AWS needed). 

  

How do you drive innovation while mitigating risk, ensuring continuous compliance & maintaining security?

Collaborate with technology and process engineering teams to design best in class (internal) customer experiences while mitigating privacy risks. 

  

What is the expected server load in terms of generated flows from information exchanges?

Proactively manages changes in the industry, information technology governance and external risk compliance landscape. 

  

Did the plan consider opportunities for development within the context of the green infrastructure network?

Aid in the development and execution of Technology Finance and organization wide strategic initiatives, via specialized project work and/or project. 

  

How do you reconstruct the chain of custody for the data and how it was protected in the time frame, if the auditor wants that?

Lead or participate in managing and supporting the delivery of technology products and services of high profile business unit (internal) clients and operationalize large scale solutions planning related to Technology Business Services. 

  

## SYSTEMS:

  

Can your system provide custom report filtering across different variables and attributes?

Develop experience monitoring Content Filtering services to ensure availability and integration with other technical controls, services and components, such as firewalls, Data Loss Prevention, Advanced Persistent Threat Systems, email platform, incident response and/or Internet Services. 

  

How do you understand DLP provision in the contract?

Understand Data Protection Options including Data Loss Prevention and Encryption strategy for systems and applications. 

  

When a compliance issue hits, do you quickly and accurately gather the requested information?

Ensure your process provides technical guidance and support to other systems analysts Analyzes business cases in terms of the business environment, technical infrastructure, system capacity and business response time expectations when proposing solutions. 

  

How do you protect business data in your own data center or in the cloud with no downtime, outages or data loss?

Be sure your organization performs duties necessary to invest in establishing practices and system configurations to ensure the safety of information systems assets and to protect information systems from intentional or inadvertent access or destruction. 

  

Which command will you use to display all the disk groups that are currently imported on the system?

Be sure your team is involved in the Windows file system and registry functions or NIX operating systems and command line tools. 

  

When a compliance issue hits, do you quickly and accurately gather the requested information?

Work with Business Systems Analysts or work directly with users to gather information regarding requirements and specifications for the application. 

  

How do you reconstruct the chain of custody for the data and how it was protected in the time frame, if the auditor wants that?

Guarantee your design is setting procedures and guidelines to ensure that all information systems are functional, secure, and safeguarded throughout your organization. 

  

Does the DLP solution your organization uses provide the ability to prevent the forwarding of secure email?

Safeguard that your staff responds to outages with prompt and efficient resolution and communicates issues to via the proper support channels Gathers requirements and functional specifications from support teams in order to build monitors and dashboards that provide insight into the health and performance of systems. 

  

How do you get users and business units involved in the data clean up process?

Be certain that your organization is involved in cloud environments (AWS needed) and Linux containers and orchestration systems (Kubernetes needed). 

  

How quickly can the cloud provider restore data from a back up if it suffered a data loss?

Secure that your group interacts with vendor staff in the implementation of new systems and modifications to existing business applications. 

  

## NETWORK:

  

Do you allow tenants to opt out of having the data/metadata accessed via inspection technologies?

Be confident that your design is networking, topology, infrastructure specifically with IPv6 security requirements. 

  

Is your backup data center backed up regularly and ready to assume primary function at any time?

Be sure your staff researches and recommends network and data communications hardware and software. 

  

How do you empower your business units to protect data?

Oversee that your team develops and reviews system and network performance results, systems standards, strategies, and workflows. 

  

How are you identifying and responding to sophisticated attacks targeting your users email?

Check that your group defines solutions that balance network requirements and standards with business needs. 

  

Are there ways to identify how exposed organizations are before utilizing a DLP program?

Certify your operation is involved in endpoint and network focused forensics, incident response, and threat hunting utilizing both Deep Packet Inspection and NetFlow solutions. 

  

How do you check that the backup system works every time?

Interface so that your strategy is involved in configuring firewalls, access control list (ACLs), Network IDS/IP, Host IDS/IPS, DLP, etc. 

  

How do you get users and business units involved in the data clean up process?

Guarantee your design is involved in local area network and wide area network administration. 

  

How does your organization identify relevant best practices regarding cybersecurity for its business model?

Ensure your team is responsible for enabling (internal) customers through networking focused design practices. 

  

Is pgw looking for the vendor to implement social change and/or develop policy and procedures?

Develop experience crafting/building large scale data centers and IP/MPLS backbone networks. 

  

How do you prevent sensitive data from leaving your network when employees have access to webmail?

Establish that your team is troubleshooting system level problems in a multi vendor, multi protocol network environment.