GoKawiilCSA Survey: Most DLP Tools Detect Data Loss After It Already Occurred
A Cloud Security Alliance survey conducted with Jazz found that 73% of organizations experienced at least one confirmed data loss incident in the past two years, and only 16% said their DLP tools blocked the most serious incident before data left the organization. The survey also found that while nearly half of security teams rank GenAI tools as their top exfiltration risk, fewer than a third can produce routine reports showing sensitive data sent to such tools, and only 22% strictly block GenAI-related data transfers.
GoKawiil's interpretation of the reporting above, not reported fact.
The findings suggest a gap between the risks security teams say they worry about most and where they actually apply strict enforcement, which could leave newer channels like GenAI apps and cloud uploads more exposed than traditional ones like removable media. CSA's Hillary Baron frames this as evidence that legacy DLP systems were not built for AI-era data flows, implying organizations may be relying on tools that primarily document breaches rather than stop them.
- 73% of surveyed organizations reported a confirmed data loss incident in the last 24 months
- Only 16% said DLP stopped their most significant incident before data exfiltration
- GenAI is seen as the top risk by 48% of teams, yet only 22% strictly enforce controls against it
Source: darkreading.com, 2026-10-21
Published there as: “Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.