DSPM (Data Security Posture Management)
Was ist DSPM (Data Security Posture Management)?
DSPM (Data Security Posture Management)A class of tools that discover, classify, and continuously monitor sensitive data across multi-cloud, SaaS, and data-lake environments, then surface posture risk such as exposed PII or over-permissioned datasets.
Data Security Posture Management (DSPM) emerged as a recognized category around 2022 to cover what CSPM and DLP missed: the data itself. A DSPM platform crawls cloud storage (S3, GCS, Azure Blob), databases (RDS, BigQuery, Snowflake, Redshift), data lakes, SaaS apps (Drive, Box, Salesforce), and unstructured stores, then classifies what's there (PII, PHI, payment card, source code, secrets) and links each data store to its access graph — which IAM principals, applications, and humans can reach it, and how. The output is a posture view: 'this Snowflake database contains EU PII, is accessible by a service account whose key is also in a public Lambda environment variable, and has not been read in 14 months.' DSPM features overlap with CSPM (configuration), CIEM (identities), and traditional DLP (egress), and the categories are converging into broader CNAPP and 'data-first' security platforms. Vendors in the space include Cyera, Dig (acquired by Palo Alto Networks), Sentra, BigID, Rubrik (Laminar), Wiz Data Security, and Symmetry.
● Beispiele
- 01
A DSPM scan finds an S3 bucket containing customer payment-card exports, with public read enabled and last-touched four months ago.
- 02
DSPM-driven alerts replace quarterly access reviews by continuously flagging shadow copies of regulated data in non-production environments.
● Häufige Fragen
Was ist DSPM (Data Security Posture Management)?
A class of tools that discover, classify, and continuously monitor sensitive data across multi-cloud, SaaS, and data-lake environments, then surface posture risk such as exposed PII or over-permissioned datasets. Es gehört zur Kategorie Cloud-Sicherheit der Cybersicherheit.
Was bedeutet DSPM (Data Security Posture Management)?
A class of tools that discover, classify, and continuously monitor sensitive data across multi-cloud, SaaS, and data-lake environments, then surface posture risk such as exposed PII or over-permissioned datasets.
Wie funktioniert DSPM (Data Security Posture Management)?
Data Security Posture Management (DSPM) emerged as a recognized category around 2022 to cover what CSPM and DLP missed: the data itself. A DSPM platform crawls cloud storage (S3, GCS, Azure Blob), databases (RDS, BigQuery, Snowflake, Redshift), data lakes, SaaS apps (Drive, Box, Salesforce), and unstructured stores, then classifies what's there (PII, PHI, payment card, source code, secrets) and links each data store to its access graph — which IAM principals, applications, and humans can reach it, and how. The output is a posture view: 'this Snowflake database contains EU PII, is accessible by a service account whose key is also in a public Lambda environment variable, and has not been read in 14 months.' DSPM features overlap with CSPM (configuration), CIEM (identities), and traditional DLP (egress), and the categories are converging into broader CNAPP and 'data-first' security platforms. Vendors in the space include Cyera, Dig (acquired by Palo Alto Networks), Sentra, BigID, Rubrik (Laminar), Wiz Data Security, and Symmetry.
Wie schützt man sich gegen DSPM (Data Security Posture Management)?
Schutzmaßnahmen gegen DSPM (Data Security Posture Management) kombinieren typischerweise technische Kontrollen und operative Praktiken, wie in der Definition oben beschrieben.
Welche anderen Bezeichnungen gibt es für DSPM (Data Security Posture Management)?
Übliche alternative Bezeichnungen: Data Security Posture Management, Cloud data security.
● Verwandte Begriffe
- cloud-security№ 280
CSPM (Cloud Security Posture Management)
Kategorie von Werkzeugen, die Cloud-Konten kontinuierlich gegen Best-Practice- und Compliance-Baselines prüfen, um Fehlkonfigurationen zu erkennen und zu beheben.
- cloud-security№ 187
CIEM (Cloud Infrastructure Entitlement Management)
Disziplin und Werkzeugkategorie zur Erkennung, Analyse und Verkleinerung von Identitäten und Berechtigungen in Cloud-Umgebungen.
- privacy№ 306
Datenklassifizierung
Prozess der Kennzeichnung von Daten nach Sensibilität und Wert, damit Schutz-, Handhabungs- und Aufbewahrungsmaßnahmen konsistent angewendet werden können.
- cloud-security№ 214
CNAPP (Cloud-Native Application Protection)
Eine integrierte Sicherheitsplattform, die CSPM, CWPP, CIEM, IaC-Scanning und Laufzeitdetektion vereint, um Cloud-Native-Anwendungen vom Build bis zur Laufzeit zu schützen.
- privacy№ 308
Data Loss Prevention (DLP)
Technologien und Richtlinien, die unbefugte Abflüsse sensibler Daten auf Endpunkten, im Netzwerk, in E-Mails und in Cloud-Diensten erkennen und blockieren.
- cloud-security№ 204
Cloud-Datenexfiltration
Unbefugtes Kopieren oder Verlagern von Daten aus einem Cloud-Konto heraus, oft ueber Object-Storage-APIs, Snapshots, Replikation oder angreifer-eigene Konten.