Protecting Sensitive Data Across Email, USB and Endpoints

The challenge

Commercial documents, pricing data and customer files were routinely exchanged through email and removable media. Management wanted stronger controls against accidental leakage without making normal work unnecessarily difficult.

Our approach

Astek mapped common data flows first: who created sensitive information, how it moved, which users legitimately needed USB or external sharing, and where blanket blocking would disrupt operations.

What Astek implemented

• Defined practical data categories and high-risk transfer scenarios.
• Applied endpoint controls to removable media based on role and requirement.
• Introduced DLP policies for selected sensitive files and outbound channels.
• Strengthened email security and monitoring for risky outbound behaviour.
• Created an exception and approval process for legitimate business cases.

Business outcome

The company gained better control over how sensitive information left managed devices while preserving business workflows that genuinely required file transfer. Security policy became role-based and explainable rather than simply restrictive.