SSEData source
Web, CASB & DLP
The security service edge, CASB and DLP stack: web visits by category, filter bypass, OAuth grants, unauthorized SaaS, browser extensions, bulk and sensitive data movement, personal-cloud uploads, AI tool and prompt activity, vendor breach feeds and technical policy violations (19 signals).
Signals from this source
19- Downloads data in bulk above own baseline DH-B-01 · DH
- Uploads data in bulk DH-B-02 · DH
- Shares sensitive data externally DH-B-03 · DH
- Violates data-handling policy DH-B-04 · DH
- Stores work data in personal cloud DH-B-08 · DH
- Blocked data transfer attempts DH-B-12 · DH
- Third-party app they use was breached WC-T-02 · WC
- Visits known-malicious websites WC-B-01 · WC
- Bypasses web filtering WC-B-02 · WC
- Visits unauthorized websites WC-B-03 · WC
- Grants risky OAuth permissions WC-B-04 · WC
- Uses unauthorized SaaS apps WC-B-05 · WC
- Installs unvetted browser extensions WC-B-06 · WC
- Downloads from trusted sources only WC-B-08 · WC
- Uses unauthorized AI tools AU-B-01 · AU
- Puts sensitive data in AI prompts AU-B-02 · AU
- Uses personal accounts on AI platforms AU-B-03 · AU
- Uses the sanctioned AI tools AU-B-04 · AU
- Technical policy violations RR-B-09 · RR
Cite this term
"Web, CASB & DLP" (SSE), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/sources/web-casb-and-dlp
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.