What best describes a data loss prevention strategy in Annex B?

• A. Plans for data mirroring and backup only.
• B. Policies and tools to prevent sensitive data exfiltration; applies to endpoints, networks, and cloud.
• C. Strategies to improve user productivity.
• D. Procedures for data disposal.

Answer: (B)

Data loss prevention focuses on stopping sensitive information from leaving the organization’s control. The description that best fits this is about using policies and tools to prevent data exfiltration across all environments—endpoints, networks, and cloud.

Think of DLP as a set of rules and technologies that identify sensitive data, monitor how it moves or is used, and automatically enforce protections. This can include blocking transfers, encrypting data in transit, quarantining risky content, and alerting security teams. The reach across devices, network gateways, and cloud services ensures that protections apply whether data is saved on a laptop, shared through a network, or stored in a cloud app.

This differs from backup or mirroring, which are about data recovery after loss rather than preventing loss in the first place. It also isn’t about increasing productivity or about disposal procedures.