What is DSPM?
Data security posture management (DSPM) is the practice of finding where sensitive data sits, who owns it, who can reach it and how exposed it is. Rather than watching data in motion, it looks across endpoints, servers and storage to show the risk before anything leaves.
How does DSPM work?
-
Scan
Endpoints, file servers and shared folders are searched.
-
Classify
Each file is recognized by its content and labeled.
-
Map access
The owner of each file and everyone who can open it are listed.
-
Fix exposure
Shares are tightened, files moved or owners notified.
What does a DSPM finding look like?
- Data
- Payroll export with salaries and IBANs
- User
- Finance team (owner)
- Destination
- NAS folder shared with everyone
- Policy
- Payroll data: owners only
- Decision
- Warn owner notified
Where is DSPM in GuardStance?
Endpoints use the same agent as DLP; network shares are scanned without an agent.