Tell us about you

Work Email required

Organization required

First Name required

Last Name required

Job Title required

Phone required (###) ###-####, or int ######...

City required

State/Province required

Tell us about your organization

error messages will go here...

Looks like we’re already familiar with you!

Please press next to continue with the survey.

Looks like we’re already familiar with you!

According to your account type you are not eligible to take surveys at this time. If this is a mistake, please contact KLAS.

If you are trying to access KLAS research data and reports, an email has been sent to   with a link to login.

If the email doesn't appear in your inbox, ask your IT department to add KLASresearch.com to your company spam filter's "whitelist", and check your email's spam folder.

Membership Commitment

In exchange for giving their feedback, healthcare providers can create an account to get access to industry reports, user commentary, and real-time ratings.

By submitting your account request, you are engaged in patient care as either an employee (or contractor) of your provider organization and that you confirm that you have reviewed and agree to abide by the Terms of Use for this website as updated periodically.

To learn more about how we process and protect your personal data, you may view our Privacy policy.

By submitting your account request, you confirm that you have reviewed and agree to abide by the Terms of Use for this website as updated periodically. To learn more about how we process and protect your personal data, you may view our Privacy policy.

By submitting your account request, you confirm that you have reviewed and agree to abide by the Terms of Use for this website as updated periodically.

To learn more about how we process and protect your personal data, you may view our Privacy policy.

 

To learn more about how we process and protect your personal data, you may view our Privacy policy.

 

To learn more about how we process and protect your personal data, you may view our Privacy policy.

Thank You! Your information was submitted successfully!

Next Steps - An email has been sent to . Please follow its instructions to verify your email, and login.

If the email doesn't appear in your inbox, try asking your IT department to add KLASresearch.com to your company spam filter's "whitelist", and checking your email's spam folder.

Thank You! Your information was submitted successfully!

Next Steps - A KLAS representative will contact you to discuss working with KLAS, typically within 24 to 48 hours.

If you have any further questions please contact info@klasresearch.com or 1-800-920-4109.

Surprise! Looks like we already have an account for you.

An email has been sent to blah@blah.com with a link to login.

If the email doesn't appear in your inbox, try asking your IT department to add KLASresearch.com to your company spam filter's "whitelist", and checking your email's spam folder.

Data Loss Prevention: A Market Full of Surprises - Cover

Data Loss Prevention: A Market Full of Surprises

At KLAS, our mission is to publish research that will benefit healthcare providers. So, when Data Loss Prevention (DLP) software surfaced in our 2017 Cybersecurity report as one of the most impactful security technologies, we knew we had to dig deeper.

By the end of 2017, we had interviewed 100 healthcare security professionals about their DLP strategies and published KLAS’ first ever Data Loss Prevention report. I’d expected to learn a lot from this first dive into the segment, but I hadn’t expected so many surprises.

Surprise #1: Low Adoption

While firewall and antivirus tools keep things like malware and ransomware out of an organization, DLP software is designed to keep PHI and other data in the organization. This can be done in several ways, such as encrypting shared files, filtering emails, locking down storage devices, and identifying high-risk behaviors of end users.

Email filtering/encryption had been third on the list of technologies with greatest impact from our Cybersecurity report, so we knew that most organizations we spoke to would be using that functionality. But even though other DLP functionality had been fourth on that same list, fewer organizations than anticipated had adopted tools across the DLP continuum.

A common theme emerged: Many organizations, particularly small ones, choose to start their DLP journeys by procuring a focused tool—often Proofpoint’s or Zix’s—for strictly email filtering and encryption. Generally, larger organizations or organizations who are able to secure extra resources end up purchasing the rest of the DLP functionality types.

DLP Usage at a Glance

 

Surprise #2: Multiple Solutions

A couple of vendors—namely Digital Guardian and Symantec—offer comprehensive suites that cover all of the major DLP bases. KLAS expected to see these suites used as one-stop shops for many provider organizations. That brings us to Surprise #2: The Digital Guardian and Symantec tools were broadly used in all of the DLP areas but less frequently as one-stop-shops.

Apparently, a lot of the organizations who start with an email tool like Proofpoint’s and then expand to a full-suite vendor actually keep the old tool as well as the new functionality. In nearly every other market segment of HIT, the current trend is to let one vendor handle as much as possible and ditch tools from other vendors. But DLP software doesn’t need the same integration other tools do. For most provider organizations using DLP tools from multiple vendors, consolidation isn’t a priority and redundancy provides extra security layers.

Surprise #3: Poor Support the Deal-Breaker

So if having two DLP tools and some overlap in covered functionality doesn’t bother many providers, what does? According to KLAS’ research, the email filtering/encryption vendors achieve impressive customer loyalty despite their tools’ limited functionality, but several of the other DLP vendors suffer with potential-turnover rates as high as 40%. Why? Because these vendors’ customers aren’t getting adequate support.

Whether it be due to an acquisition (Digital Guardian), high optimization needs (Symantec), an escalation-heavy support structure (Microsoft), or general service issues (Forcepoint), all of the DLP vendors with customers who are eager to leave struggle with support. This could have something to do with DLP software itself; many of the tools require extensive fine-tuning both initially and on an ongoing basis. But no matter the possible excuses, DLP vendors can’t escape the truth that KLAS sees throughout our research: Providers need, above all else, supportive partners and vendor guidance.

More Surprises to Come? 

One of the hardest parts of helping create a KLAS report is having to wait to see what happens next in the space. As a relatively new area, DLP is sure to evolve. I hope to see more providers take advantage of the help offered by DLP software and more vendors step up their game in support. But no matter what surprises come next, KLAS will be sure to tell you about them.