Eliciting Requirements for a Companywide Data Leakage Prevention System

Sensitive information assets are critical to business as their leakage can harm a company’s competitiveness and reputation [1]. To prevent information disclosure, companies increasingly make use of Data Leakage Prevention (DLP) systems [6]. As company-wide DLP systems have to operate in highly dynamic and heterogeneous working environments, the challenge is to identify requirements for configuring these systems properly. To approach this challenge, we investigate the DLP system in test at Continental Tires. As a result, we propose an approach to support elicitation of desired requirements for DLP systems and discuss preliminary results.