What is the proper order of the six stages in the Symantec Data Loss risk reduction approach?

What is the proper order of the six stages in the Symantec Data Loss risk reduction approach?

• A. Planning/Deployment/Baseline/Remediation/Notification/Prevention
• B. Planning/Baseline/Deployment/Remediation/Notification/Prevention
• C. Deployment/Planning/Baseline/Remediation/Notification/Prevention
• D. Planning/Deployment/Remediation/Baseline/Notification/Prevention

Answer: (A)

This sequence reflects a staged risk-reduction lifecycle for a DLP program. You begin with planning to define what data to protect, who will be responsible, how success will be measured, and which systems and workflows will be affected. Next comes deployment, where the DLP tools and policies are actually put into the environment and wired to monitors, sensors, and enforcement points. After deployment, you establish a baseline to understand typical data flows and how the policies perform in practice, which lets you measure impact and tune settings accurately. With a solid baseline, you can perform remediation to fix gaps, adjust configurations, and refine detections based on real observations. Then you set up notifications to ensure timely awareness and response to incidents or policy events. Finally, you focus on prevention, locking in controls and automation to reduce the chance of future data losses and sustain improvements over time.

This sequence reflects a staged risk-reduction lifecycle for a DLP program. You begin with planning to define what data to protect, who will be responsible, how success will be measured, and which systems and workflows will be affected. Next comes deployment, where the DLP tools and policies are actually put into the environment and wired to monitors, sensors, and enforcement points. After deployment, you establish a baseline to understand typical data flows and how the policies perform in practice, which lets you measure impact and tune settings accurately. With a solid baseline, you can perform remediation to fix gaps, adjust configurations, and refine detections based on real observations. Then you set up notifications to ensure timely awareness and response to incidents or policy events. Finally, you focus on prevention, locking in controls and automation to reduce the chance of future data losses and sustain improvements over time.