I'm administrating my company's network all alone. I'm the only IT guy around and can not spend too much time with anything special as some people would start freaking out.
I have to implement some DLP(Data Leaking/Loss Prevention) system and I have to decide whether to focus on monitoring or preventing it.
PROS: No false positives.
CONS: Lack of time will cause data being leaked and me realising a two days later.
PROS: No data leaked (if properly configured)
CONS: False positives and configuration and reconfiguration of filters
So far, I'm in favour of Monitoring as the other option would lead in false positives = mad people
Anyone could throw some light in here? What should I do regarding my scenario?