StudyToCert

All certifications / CISA / Lessons

ISACA Certified Information Systems Auditor (CISA) 2024 job practice · Domain 5: Protection of information assets

Data loss prevention and data encryption

▶ Watch the overview video

Last reviewed September 30, 2026 · Leer en español

Data can leave an organization by mistake or on purpose: an email sent to the wrong person, a spreadsheet uploaded to personal cloud storage, a lost laptop, a misconfigured storage bucket or a deliberate theft by an insider. Data loss prevention (DLP) and encryption are two of the main technical defenses. DLP watches where sensitive data goes and can stop it; encryption makes data unreadable to anyone without the key, so that if it does escape, it is useless. Both depend on knowing which data is sensitive, which is why data classification comes first.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study CISA for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the CISA study plan