Skip to content

Moraph for clients

Sign in

Getting started

Getting started with Data Loss Prevention

What Data Loss Prevention is for, who uses it, what you need before you start, and your first steps.

Applies to Data Loss Prevention as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.

Last reviewed 2 min readReport a problem
On this page
  1. What it is for
  2. Who uses it
  3. Before you start
  4. Steps to get started
  5. Where to go next

Moraph resells, implements and runs Forcepoint data loss prevention for banks, credit unions, lenders and investment firms. We configure Forcepoint to recognize Social Security numbers, payment card numbers and your own customer data, enforce policies on endpoints and network channels, and triage the incidents it raises so your team only handles the ones that need a decision. Forcepoint provides the platform; Moraph operates it; your organization decides the policies and what happens to people who break them.

What it is for

Consumer financial data leaves institutions in ordinary ways: a spreadsheet of account holders emailed to a personal address, a file of card numbers uploaded to a web form, a customer list copied to a USB drive. Many institutions own a DLP tool but run it in monitor-only mode because the policies were never tuned, the false positives overwhelm the security team, and nobody has time to review incidents. When a regulator or customer asks how sensitive data is protected in transit, the honest answer is that the tool is installed but not really used.

  • DLP policies left in monitor-only mode because tuning never finished
  • Too many false positives for the team to review, so real incidents are missed
  • Agents missing or out of date on part of the endpoint estate
  • No clear record of incidents, decisions and follow-up for examiners

Who uses it

  • Banks, credit unions, lenders and investment firms that handle Social Security and payment card numbers
  • CISOs and security teams who own data protection controls
  • Privacy, compliance and fraud teams who decide what happens after an incident
  • IT teams who deploy and maintain endpoint agents
  • Internal audit and examiners reviewing safeguards for customer information

Before you start

  • Your organization uses Data Loss Prevention as a managed platform from Moraph, under an agreement that covers it.
  • Licences for Forcepoint, bought through Moraph or under your own agreement with the vendor.
  • A Moraph account in your organization for each person who works with Moraph on the service.
  • Named technical and security contacts, recorded in the Moraph Portal.

Steps to get started

  1. Agree the scope of the managed service for Data Loss Prevention with Moraph, including which environments and teams it covers.

  2. Name your administrators, technical contact and security contact in the Moraph Portal under People and access.

  3. Review the configuration baseline Moraph proposes for your regulations, and record any changes you need.

  4. Confirm how users will sign in, through your identity provider where the platform supports it.

  5. Agree the pilot group and the cut-over plan with your Moraph delivery lead.

Where to go next

Was this page helpful?

Report a problem with this page
What’s the problem?
Quote the step or heading if you can. Don’t include passwords or personal records.
Only if you’d like a reply. We use it for this report and nothing else.

Need help with your own setup rather than this page? Raise a support ticket.