3,151 subscribers

Before You Buy Another Security Tool, Read This Book

Antonio Ieranò

Information & Cybersecurity Strategist | Digital Sovereignty • AI Governance • Complex Systems | Author, Researcher & Occasional Philosopher | Views stubbornly my own. 🧠

November 4, 2026

DLP The Untold Story is essential reading for anyone building, buying or selling data protection—and a Christmas gift with a purpose.

Imagine discovering the true extent of your organization’s sensitive information from the people who stole it.

That is the unsettling premise of the fictional incident that opens DLP The Untold Story. Systems have inventories. Devices have owners. Applications have support contracts. Yet the information that gives a business its value—its strategy, intellectual property, negotiations and accumulated knowledge—can be scattered across mailboxes, shared folders, collaboration platforms and forgotten copies.

The opening raises a question that stays with the reader: does your organization actually know what it is trying to protect?

For anyone considering a data protection investment, that question deserves an answer before the purchase order.

The decisions behind the technology

DLP The Untold Story does not review specific products or tell readers which vendor to choose. Its subject is how to put together an information protection programme that makes sense: one grounded in business value, clear responsibilities, proportionate controls and evidence that those controls work.

The book makes a crucial distinction. Data Loss Prevention provides content-aware detection and policy enforcement at defined points of use, sharing or movement. A complete information protection programme has a wider responsibility. It must connect those capabilities with discovery, classification, identity, retention, encryption, physical handling and the people authorized to make decisions.

That distinction changes the conversation.

Before deciding what to block, someone must establish what information matters. Before applying a label, someone must decide what that label should change. Before approving an exception, someone must have the authority to accept the risk. And before reporting success, someone must verify the outcome.

These are practical questions. They determine whether an investment becomes a working protection system.

From finding information to protecting its use

The book follows information through its lifecycle and through the places where work actually happens: email, collaboration spaces, endpoints, cloud services, databases, code repositories and AI applications.

Its scope includes the awkward details that make protection difficult. A sensitive document can acquire a new audience without moving. A summary can preserve the confidential meaning of its source. A restored backup can bring back information that had already been removed. An authorized recipient can still create a copy beyond the reach of the original control.

Understanding these situations helps readers design protection around actual business activity.

The objective is to let information support legitimate work while keeping its use within understood and accountable boundaries. Sometimes that means allowing an action. Sometimes it means warning the user, requiring justification, protecting the content, escalating a decision or stopping the exchange.

The choice needs context.

A handbook for buyers—and for sellers

For security leaders, architects and practitioners, DLP The Untold Story provides a framework for asking better questions before deployment and making better decisions afterwards. Its working tools, illustrative scenarios and decision structures connect the principles to the everyday demands of implementation.

It deserves a place on the desk of anyone planning a data protection programme.

It also belongs on the reading list of anyone selling these solutions.

Vendors, consultants, integrators and sales engineers need to understand the operating model their technology will enter. Who owns the information? Who handles an alert? How will exceptions work? Which routes can the proposed controls observe? What evidence will demonstrate that the agreed outcome has been achieved?

A seller who understands those questions can help a customer define a credible project, set meaningful acceptance criteria and recognize where additional capabilities or organizational decisions are needed.

That makes this book valuable on both sides of the buying conversation.

A Christmas gift that earns its place on the desk

A book about data protection may seem an unusual Christmas present. For someone about to take responsibility for sensitive information—or help a customer do so—it is a thoughtful one.

DLP The Untold Story combines technical substance, practical working material and a dry sense of humour about the gap between policy and everyday organizational life. It offers readers a way to examine that gap before an incident exposes it.

Give it to the colleague preparing a deployment. The consultant shaping a proposal. The sales engineer helping a customer define requirements. Or yourself, before the next investment decision.

This Christmas, give a better starting point for data protection. Put DLP The Untold Story on your reading list—and on your gift list.