{"id":1193,"date":"2026-09-11T12:28:16","date_gmt":"2026-09-11T12:28:16","guid":{"rendered":"https:\/\/www.osto.one\/resources\/?p=1193"},"modified":"2026-09-11T12:28:16","modified_gmt":"2026-09-11T12:28:16","slug":"dspm","status":"publish","type":"post","link":"https:\/\/www.osto.one\/resources\/glossary\/dspm\/","title":{"rendered":"DSPM"},"content":{"rendered":"\n<!-- =========================================================================\n     OSTO GLOSSARY: DSPM (DATA SECURITY POSTURE MANAGEMENT)\n     Live osto.one glossary stylesheet. Paste into one Custom HTML block. No H1.\n     ========================================================================= -->\n\n<style>\n.og{\n  --navy:#1c267a; --text:#0f1538; --muted:#0f1538; --light:#0f1538;\n  --border:#e7e9f2; --divider:#eceef5; --white:#ffffff;\n\n  --peri-50:#f4f5fd;  --peri-100:#e9ecfa; --peri-200:#cfd5f2; --peri-700:#4a52a8;\n  --sage-50:#f2f8f5;  --sage-100:#e3f0e9; --sage-200:#c3ddce; --sage-700:#3a6f5d;\n  --apri-50:#fdf6f0;  --apri-100:#fbe9dc; --apri-200:#f2cdb2; --apri-700:#a2603a;\n  --plum-50:#f8f3f9;  --plum-100:#f0e6f3; --plum-200:#dcc6e2; --plum-700:#6b4576;\n  --sky-50:#f1f7fb;   --sky-100:#e2eff7;  --sky-200:#bfd9e9;  --sky-700:#2f6a89;\n\n  --shadow:0 6px 22px rgba(15,21,56,.05);\n  --font:'Inter',-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;\n  font-family:var(--font); font-size:17px; line-height:1.75; color:var(--text);\n}\n.og p{margin:0 0 22px}\n.og h2{font-family:var(--font);font-size:clamp(25px,3vw,31px);font-weight:700;line-height:1.25;letter-spacing:-.5px;color:var(--navy);margin:52px 0 8px;scroll-margin-top:92px}\n.og h2::after{content:\"\";display:block;width:46px;height:5px;border-radius:3px;margin:12px 0 18px;background:var(--peri-200)}\n.og h2.c-sage::after{background:var(--sage-200)}\n.og h2.c-apri::after{background:var(--apri-200)}\n.og h2.c-plum::after{background:var(--plum-200)}\n.og h2.c-sky::after{background:var(--sky-200)}\n.og ul,.og ol{padding-left:22px;margin:0 0 24px}\n.og li{margin-bottom:9px}\n.og strong{font-weight:600}\n\n.og .dek{font-size:20px;line-height:1.6;color:var(--muted);margin:0 0 18px}\n.og .tags{margin:0 0 30px;padding:0;list-style:none;display:flex;flex-wrap:wrap;gap:8px}\n.og .tags li{margin:0}\n.og .tag{display:inline-block;font-size:12px;font-weight:600;letter-spacing:.7px;text-transform:uppercase;padding:6px 13px;border-radius:20px}\n.og .t-peri{background:var(--peri-100);color:var(--peri-700)}\n.og .t-sage{background:var(--sage-100);color:var(--sage-700)}\n\n.og .short{background:linear-gradient(135deg,var(--peri-100) 0%,var(--sage-100) 100%);border-radius:22px;padding:28px 32px;margin:0 0 30px}\n.og .short .k{font-size:13px;font-weight:700;letter-spacing:1.4px;text-transform:uppercase;color:var(--peri-700);margin:0 0 10px}\n.og .short p{font-size:19px;line-height:1.65;margin:0;color:var(--text)}\n\n.og .toc{background:var(--peri-50);border-radius:20px;padding:24px 28px;margin:0 0 34px}\n.og .toc .k{font-size:12px;font-weight:700;letter-spacing:1.3px;text-transform:uppercase;color:var(--peri-700);margin:0 0 12px}\n.og .toc ol{margin:0;padding-left:20px;columns:2;column-gap:34px}\n.og .toc li{margin-bottom:8px;break-inside:avoid;font-size:16px}\n.og .toc a{color:var(--navy);text-decoration:none;border-bottom:1px solid rgba(28,38,122,.22)}\n\n.og .callout{border-radius:4px;padding:24px 28px;margin:0 0 30px;background:var(--white);border:2px solid var(--navy)}\n.og .callout .k{font-weight:700;font-size:17px;margin:0 0 8px;color:var(--navy)}\n.og .callout p:last-child{margin-bottom:0}\n.og .callout.c-plum{background:var(--plum-50);border:none;border-radius:20px}\n.og .callout.c-plum .k{color:var(--plum-700)}\n\n.og figure{margin:0 0 30px}\n.og .sx{overflow-x:auto;-webkit-overflow-scrolling:touch;border-radius:20px;background:var(--white);box-shadow:var(--shadow)}\n.og .sx svg{display:block;width:100%;height:auto;min-width:600px}\n.og figcaption{font-size:14px;line-height:1.6;color:var(--muted);margin-top:12px}\n.og .swipe{display:none}\n\n.og table{width:100%;border-collapse:collapse;margin:0 0 28px;font-size:15px;background:var(--white);border-radius:18px;overflow:hidden;box-shadow:var(--shadow)}\n.og th{text-align:left;padding:14px 16px;font-weight:700;font-size:12.5px;letter-spacing:.8px;text-transform:uppercase}\n.og td{border-bottom:1px solid var(--divider);padding:13px 16px;vertical-align:top;line-height:1.6}\n.og tr:last-child td{border-bottom:none}\n.og .h-peri th{background:var(--peri-100);color:var(--peri-700)}\n.og .h-sage th{background:var(--sage-100);color:var(--sage-700)}\n.og .h-plum th{background:var(--plum-100);color:var(--plum-700)}\n\n.og .trio{display:grid;grid-template-columns:repeat(3,1fr);gap:14px;margin:0 0 28px}\n.og .tcard{border-radius:18px;padding:20px 22px}\n.og .tcard .n{font-size:16px;font-weight:700;margin:0 0 4px}\n.og .tcard .g{font-size:13px;font-weight:600;margin:0 0 10px;opacity:.8}\n.og .tcard p{font-size:14px;line-height:1.55;margin:0;color:var(--muted)}\n.og .tcard.a{background:var(--sky-50)}   .og .tcard.a .n,.og .tcard.a .g{color:var(--sky-700)}\n.og .tcard.b{background:var(--sage-50)}  .og .tcard.b .n,.og .tcard.b .g{color:var(--sage-700)}\n.og .tcard.c{background:var(--plum-50)}  .og .tcard.c .n,.og .tcard.c .g{color:var(--plum-700)}\n\n.og .pill{display:inline-block;font-size:11px;font-weight:700;letter-spacing:.8px;text-transform:uppercase;padding:5px 11px;border-radius:20px;white-space:nowrap}\n.og .p-req{background:var(--plum-200);color:#4d2f57}\n.og .p-exp{background:var(--sky-100);color:var(--sky-700)}\n.og .p-imp{background:#eef0f4;color:var(--muted)}\n.og .p-ask{background:var(--apri-100);color:var(--apri-700)}\n.og .p-yes{background:var(--sage-100);color:var(--sage-700)}\n.og .p-no{background:#eef0f4;color:var(--muted)}\n\n.og details{background:var(--white);border-radius:14px;margin:0 0 10px;box-shadow:0 2px 10px rgba(15,21,56,.04)}\n.og summary{cursor:pointer;padding:16px 20px;font-weight:600;font-size:17px;color:var(--navy);list-style:none;display:flex;justify-content:space-between;gap:16px;align-items:flex-start}\n.og summary::-webkit-details-marker{display:none}\n.og summary::after{content:\"+\";font-size:22px;line-height:1;color:var(--peri-700);flex:0 0 auto}\n.og details[open] summary::after{content:\"\\2013\"}\n.og details p{padding:0 20px 18px;margin:0;font-size:16px;line-height:1.7}\n\n.og .related{font-size:15px;color:var(--muted);border-top:1px solid var(--divider);padding-top:22px;margin-top:40px}\n\n@media(max-width:700px){\n  .og{font-size:16px}\n  .og .dek{font-size:18px}\n  .og .short p{font-size:17px}\n  .og .short,.og .toc,.og .callout{padding:22px 20px}\n  .og .toc ol{columns:1}\n  .og .trio{grid-template-columns:1fr}\n  .og .swipe{display:inline;font-weight:600;color:var(--peri-700)}\n  .og table{font-size:14px}\n  .og th,.og td{padding:11px 12px}\n}\n<\/style>\n\n<div class=\"og\">\n\n<p class=\"dek\">Your production database is well protected. DSPM is about the eleven copies of it that are not.<\/p>\n\n<ul class=\"tags\">\n  <li><span class=\"tag t-peri\">Glossary<\/span><\/li>\n  <li><span class=\"tag t-sage\">Data<\/span><\/li>\n<\/ul>\n\n<div class=\"short\">\n  <p class=\"k\">The short answer<\/p>\n  <p>DSPM stands for data security posture management. It finds sensitive data wherever it actually lives across cloud accounts and stores, classifies what it finds, maps who can reach it, and ranks the resulting exposure. Where other tools secure the infrastructure holding data, DSPM starts from the data itself and works outwards.<\/p>\n<\/div>\n\n<p>That reversal is the whole idea. Most security controls are applied to systems somebody deliberately built. Sensitive data ends up in places nobody deliberately built.<\/p>\n\n<div class=\"toc\">\n  <p class=\"k\">On this page<\/p>\n  <ol>\n    <li><a href=\"#questions\">The four questions DSPM answers<\/a><\/li>\n    <li><a href=\"#copies\">Copies are the problem<\/a><\/li>\n    <li><a href=\"#versus\">DSPM, CSPM and DLP<\/a><\/li>\n    <li><a href=\"#obligations\">Why regulators care<\/a><\/li>\n    <li><a href=\"#osto\">Where Osto fits<\/a><\/li>\n    <li><a href=\"#faq\">FAQ<\/a><\/li>\n  <\/ol>\n<\/div>\n\n<h2 id=\"questions\">The four questions DSPM answers<\/h2>\n\n<figure>\n<div class=\"sx\">\n<svg viewBox=\"0 0 760 178\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" role=\"img\" aria-label=\"Four DSPM stages: discover, classify, map access and prioritise.\">\n  <defs><marker id=\"dp\" markerWidth=\"8\" markerHeight=\"8\" refX=\"6.5\" refY=\"4\" orient=\"auto\"><path d=\"M0,0 L8,4 L0,8 z\" fill=\"#4a52a8\"\/><\/marker><\/defs>\n\n  <rect x=\"12\" y=\"22\" width=\"164\" height=\"84\" rx=\"13\" fill=\"#cfd5f2\"\/>\n  <text x=\"94\" y=\"50\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12.5\" font-weight=\"700\" fill=\"#1c267a\">Where is it?<\/text>\n  <text x=\"94\" y=\"72\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"10.5\" fill=\"#0f1538\">Scan stores, buckets,<\/text>\n  <text x=\"94\" y=\"87\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"10.5\" fill=\"#0f1538\">snapshots, warehouses<\/text>\n  <line x1=\"180\" y1=\"64\" x2=\"198\" y2=\"64\" stroke=\"#4a52a8\" stroke-width=\"2\" marker-end=\"url(#dp)\"\/>\n\n  <rect x=\"204\" y=\"22\" width=\"164\" height=\"84\" rx=\"13\" fill=\"#efe4f0\"\/>\n  <text x=\"286\" y=\"50\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12.5\" font-weight=\"700\" fill=\"#6b4576\">What is it?<\/text>\n  <text x=\"286\" y=\"72\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"10.5\" fill=\"#0f1538\">Personal, payment,<\/text>\n  <text x=\"286\" y=\"87\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"10.5\" fill=\"#0f1538\">health, credentials<\/text>\n  <line x1=\"372\" y1=\"64\" x2=\"390\" y2=\"64\" stroke=\"#4a52a8\" stroke-width=\"2\" marker-end=\"url(#dp)\"\/>\n\n  <rect x=\"396\" y=\"22\" width=\"164\" height=\"84\" rx=\"13\" fill=\"#e2eff7\"\/>\n  <text x=\"478\" y=\"50\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12.5\" font-weight=\"700\" fill=\"#2f6f96\">Who can reach it?<\/text>\n  <text x=\"478\" y=\"72\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"10.5\" fill=\"#0f1538\">Roles, keys, links,<\/text>\n  <text x=\"478\" y=\"87\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"10.5\" fill=\"#0f1538\">public exposure<\/text>\n  <line x1=\"564\" y1=\"64\" x2=\"582\" y2=\"64\" stroke=\"#4a52a8\" stroke-width=\"2\" marker-end=\"url(#dp)\"\/>\n\n  <rect x=\"588\" y=\"22\" width=\"160\" height=\"84\" rx=\"13\" fill=\"#e3f0e9\"\/>\n  <text x=\"668\" y=\"50\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12.5\" font-weight=\"700\" fill=\"#3a6f5d\">What first?<\/text>\n  <text x=\"668\" y=\"72\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"10.5\" fill=\"#0f1538\">Sensitivity crossed<\/text>\n  <text x=\"668\" y=\"87\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"10.5\" fill=\"#0f1538\">with exposure<\/text>\n\n  <rect x=\"12\" y=\"120\" width=\"736\" height=\"44\" rx=\"13\" fill=\"#fbe9dc\"\/>\n  <text x=\"380\" y=\"140\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12\" font-weight=\"700\" fill=\"#a2603a\">The third question is the one that produces action. A sensitive store nobody can reach is a low priority.<\/text>\n  <text x=\"380\" y=\"156\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#a2603a\">A moderately sensitive one open to every employee is not.<\/text>\n<\/svg>\n<\/div>\n<\/figure>\n\n<h2 id=\"copies\" class=\"c-sage\">Copies are the problem<\/h2>\n\n<p>Nobody loses control of the production database. They lose control of what was made from it.<\/p>\n\n<table class=\"h-sage\">\n  <thead>\n    <tr><th>Where the copy lives<\/th><th>How it got there<\/th><\/tr>\n  <\/thead>\n  <tbody>\n    <tr><td>Analytics warehouse<\/td><td>A pipeline replicates production so the data team can query without touching live systems<\/td><\/tr>\n    <tr><td>Development seed data<\/td><td>A production dump loaded into a test environment because synthetic data was too slow to build<\/td><\/tr>\n    <tr><td>Backups and snapshots<\/td><td>Retained for recovery, often for longer than the retention policy on the original<\/td><\/tr>\n    <tr><td>Exports and reports<\/td><td>A CSV pulled for a board deck and left in shared storage<\/td><\/tr>\n    <tr><td>Model training sets<\/td><td>Real records used to train or evaluate a model, then kept in case the experiment is repeated<\/td><\/tr>\n    <tr><td>Abandoned migrations<\/td><td>The old store from a platform change nobody decommissioned<\/td><\/tr>\n  <\/tbody>\n<\/table>\n\n<div class=\"callout\">\n  <p class=\"k\">The controls stayed with the original<\/p>\n  <p>Each of those copies is the same data, but the encryption standard, the access policy, the retention rule and the audit logging were configured on the source. A snapshot inherits storage-level protection at best. The copy in the test environment is frequently readable by every engineer, which is how a company with a genuinely well-secured production database still suffers a personal data breach.<\/p>\n<\/div>\n\n<h2 id=\"versus\" class=\"c-plum\">DSPM, CSPM and DLP<\/h2>\n\n<table class=\"h-plum\">\n  <thead>\n    <tr><th><\/th><th>DSPM<\/th><th><a href=\"https:\/\/www.osto.one\/resources\/glossary\/cspm\/\">CSPM<\/a><\/th><th><a href=\"https:\/\/www.osto.one\/resources\/glossary\/dlp\/\">DLP<\/a><\/th><\/tr>\n  <\/thead>\n  <tbody>\n    <tr><td>Starts from<\/td><td>The data<\/td><td>The infrastructure<\/td><td>The exit point<\/td><\/tr>\n    <tr><td>Core question<\/td><td>Where is sensitive data and who can reach it?<\/td><td>Is this cloud resource configured safely?<\/td><td>Should this leave right now?<\/td><\/tr>\n    <tr><td>State of the data<\/td><td>At rest<\/td><td>Not its concern<\/td><td>In motion<\/td><\/tr>\n    <tr><td>Finds unknown stores<\/td><td>Yes, that is the purpose<\/td><td>Only misconfiguration in known accounts<\/td><td>No<\/td><\/tr>\n    <tr><td>Typical output<\/td><td>An inventory of sensitive data with access paths<\/td><td>A list of misconfigurations<\/td><td>A blocked or allowed transfer<\/td><\/tr>\n  <\/tbody>\n<\/table>\n\n<p>They answer different questions and most teams need more than one. CSPM tells you a bucket is public. DSPM tells you that bucket contains customer records, which is what turns a configuration finding into a priority.<\/p>\n\n<h2 id=\"obligations\" class=\"c-sky\">Why regulators care<\/h2>\n\n<p>Data protection law is built on an assumption that is quietly demanding: that you know what personal data you hold and where.<\/p>\n\n<table class=\"h-peri\">\n  <thead>\n    <tr><th>Obligation<\/th><th>What it assumes you can do<\/th><\/tr>\n  <\/thead>\n  <tbody>\n    <tr><td><a href=\"https:\/\/www.osto.one\/resources\/glossary\/gdpr\/\">GDPR<\/a> records of processing<\/td><td>Describe categories of data, purposes and recipients, which requires knowing where the data sits<\/td><\/tr>\n    <tr><td>Data subject requests<\/td><td>Find every copy of one person&#8217;s data, including in the analytics warehouse and the backup<\/td><\/tr>\n    <tr><td>Retention and erasure<\/td><td>Delete data when its purpose ends, which is impossible for stores you have not identified<\/td><\/tr>\n    <tr><td><a href=\"https:\/\/www.osto.one\/resources\/glossary\/dpdp-act\/\">DPDP Act<\/a> safeguards<\/td><td>Reasonable security over personal data, applied wherever that data actually is<\/td><\/tr>\n    <tr><td><a href=\"https:\/\/www.osto.one\/resources\/glossary\/pci-dss\/\">PCI DSS<\/a> scoping<\/td><td>Define the cardholder data environment accurately. An unknown store holding card data expands scope without anyone knowing<\/td><\/tr>\n    <tr><td>Breach notification<\/td><td>State what data was affected, within a deadline, which needs an inventory prepared in advance<\/td><\/tr>\n  <\/tbody>\n<\/table>\n\n<h2 id=\"osto\">Where Osto fits<\/h2>\n\n<p>Osto does not sell a standalone DSPM product, and this section is not going to pretend otherwise. What Osto covers is the layer of controls a DSPM finding would tell you to apply, and several of the paths by which data escapes in the first place.<\/p>\n\n<p><a href=\"https:\/\/www.osto.one\/resources\/glossary\/cspm\/\">Cloud security posture management<\/a> surfaces the misconfigured storage and over-permissive policy that expose a store. <a href=\"https:\/\/www.osto.one\/resources\/glossary\/dlp\/\">Data loss prevention<\/a> and device controls govern data leaving through endpoints. <a href=\"https:\/\/www.osto.one\/resources\/glossary\/encryption-at-rest\/\">Encryption at rest<\/a>, <a href=\"https:\/\/www.osto.one\/resources\/glossary\/iam\/\">access management<\/a> and <a href=\"https:\/\/www.osto.one\/resources\/glossary\/rbac\/\">role-based access control<\/a> determine who can reach what. Access and storage events correlate in <a href=\"https:\/\/www.osto.one\/resources\/glossary\/siem\/\">the same SIEM<\/a>, so unusual reads against a sensitive store are visible alongside the identity that made them. If your requirement is a dedicated sensitive-data inventory across every warehouse and lake, that is a different category of product. If your requirement is to control and evidence access to the data you know you hold, that is what this stack does.<\/p>\n\n<!-- ============ CTA ============ -->\n<div style=\"background:linear-gradient(135deg,#1c267a 0%,#3f4796 48%,#6b4576 100%);border-radius:22px;padding:38px 34px;margin:40px 0 12px;box-shadow:0 10px 26px rgba(28,38,122,.2);text-align:center;\">\n  <p style=\"display:inline-block;background:rgba(255,255,255,.16);color:#ffffff;font-family:'Inter',-apple-system,sans-serif;font-size:11px;font-weight:700;letter-spacing:1.2px;text-transform:uppercase;padding:6px 14px;border-radius:20px;margin:0 0 16px;\">Platform walkthrough<\/p>\n  <p style=\"color:#ffffff;font-family:'Inter',-apple-system,sans-serif;font-size:26px;line-height:1.3;font-weight:700;letter-spacing:-.4px;margin:0 0 12px;\">Control the paths, not just the store<\/p>\n  <p style=\"color:#cfd3ea;font-family:'Inter',-apple-system,sans-serif;font-size:16px;line-height:1.65;margin:0 auto 26px;max-width:520px;\">Cloud posture, access control, encryption and data loss prevention in one stack, with reads against sensitive stores correlated to the identity behind them. One owner, one dashboard.<\/p>\n  <a href=\"https:\/\/osto.one\/book-demo\/\" style=\"display:inline-block;background:#ffffff;color:#1c267a;font-family:&#039;Inter&#039;,-apple-system,sans-serif;font-weight:700;font-size:16px;text-decoration:none;border-bottom:none;padding:14px 32px;border-radius:12px;margin:0;\" target=\"_blank\" rel=\"noopener\"><span style=\"color:#1c267a;\">Book a demo<\/span><\/a>\n  <p style=\"color:#b3b8d8;font-family:'Inter',-apple-system,sans-serif;font-size:13px;margin:18px 0 0;\">Evidence from live controls &middot; 200+ frameworks mapped &middot; One platform, everything<\/p>\n<\/div>\n\n\n<h2 id=\"faq\">Frequently asked questions<\/h2>\n\n<details>\n  <summary>What is DSPM?<\/summary>\n  <p>Data security posture management. It discovers sensitive data across cloud stores, classifies it, maps who can access it and prioritises the exposure. It starts from the data rather than from the infrastructure holding it.<\/p>\n<\/details>\n\n<details>\n  <summary>What is the difference between DSPM and CSPM?<\/summary>\n  <p><a href=\"https:\/\/www.osto.one\/resources\/glossary\/cspm\/\">CSPM<\/a> checks whether cloud resources are configured safely. DSPM asks where sensitive data sits and who can reach it. CSPM tells you a bucket is public. DSPM tells you it contains customer records, which is what makes the finding urgent.<\/p>\n<\/details>\n\n<details>\n  <summary>What is shadow data?<\/summary>\n  <p>Copies of sensitive data in places nobody is tracking: analytics replicas, development seed dumps, old snapshots, exported reports, model training sets and abandoned migrations. The controls were configured on the original, not on the copy.<\/p>\n<\/details>\n\n<details>\n  <summary>Do small companies need DSPM?<\/summary>\n  <p>Usually not as a dedicated product at an early stage, when the data estate is small enough to reason about. The underlying discipline matters immediately though, because a single production dump in a test environment creates the same exposure at any company size.<\/p>\n<\/details>\n\n<details>\n  <summary>Does DSPM replace DLP?<\/summary>\n  <p>No. <a href=\"https:\/\/www.osto.one\/resources\/glossary\/dlp\/\">DLP<\/a> governs data in motion at the point it might leave. DSPM governs data at rest and the access paths to it. They cover different halves of the same concern.<\/p>\n<\/details>\n\n<p class=\"related\"><strong>Related glossary terms:<\/strong> <a href=\"https:\/\/www.osto.one\/resources\/glossary\/cspm\/\">CSPM<\/a> &middot; <a href=\"https:\/\/www.osto.one\/resources\/glossary\/dlp\/\">DLP<\/a> &middot; <a href=\"https:\/\/www.osto.one\/resources\/glossary\/encryption-at-rest\/\">Encryption at Rest<\/a> &middot; <a href=\"https:\/\/www.osto.one\/resources\/glossary\/iam\/\">IAM<\/a> &middot; <a href=\"https:\/\/www.osto.one\/resources\/glossary\/rbac\/\">RBAC<\/a> &middot; <a href=\"https:\/\/www.osto.one\/resources\/glossary\/gdpr\/\">GDPR<\/a> &middot; <a href=\"https:\/\/www.osto.one\/resources\/glossary\/dpdp-act\/\">DPDP Act<\/a> &middot; <a href=\"https:\/\/www.osto.one\/resources\/glossary\/siem\/\">SIEM<\/a><\/p>\n\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Your production database is well protected. DSPM is about the eleven copies of it that are not. Glossary Data The\u2026<\/p>\n","protected":false},"author":8,"featured_media":1194,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[180],"tags":[591,590,592,593],"class_list":["post-1193","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-glossary","tag-data-security-posture-management","tag-dspm","tag-dspm-vs-cspm","tag-shadow-datashadow-data"],"_links":{"self":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts\/1193","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/comments?post=1193"}],"version-history":[{"count":1,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts\/1193\/revisions"}],"predecessor-version":[{"id":1195,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts\/1193\/revisions\/1195"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/media\/1194"}],"wp:attachment":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/media?parent=1193"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/categories?post=1193"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/tags?post=1193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}