Data Loss Prevention Maturity, a comparison between regulated and unregulated industries

Abstract

We are currently living in the era of data. Competitive advantage can be gained by acquiring design data from competitors and identity fraud due to data leaks are very likely. Data-centric security has been evolving over the years, providing an additional layer of protection on top of system- and network security. Data security is intricately connected with an organization's business goals and priorities.

There are two primary drivers for data security: whether the organization operates in a regulated industry (such as pharmacy, finance, or defense) or in an unregulated industry (such as manufacturing) that relies on monetizing intellectual property using technical advantages.

This research, utilizing the DLP Adoption Maturity model developed by Alsuwaie, demonstrates that companies with legal or regulatory obligations for data protection exhibit a higher level of maturity using Data Loss Prevention tools compared to organizations that benefit commercially from protecting their intellectual property.

Based on these findings, companies in unregulated industries can proactively engage with their counterparts in regulated industries to gain insights into best practices and potential challenges when implementing, or further enhancing, Data Loss Prevention tools. This collaborative approach can help bridge the gap in data security maturity between different sectors.

Date of Award	17 Oct 2023
Original language	English
Supervisor	Lex Bijlsma (Supervisor) & Lloyd Rutledge (Examiner)