A data loss prevention system must not allow the cost of prevention to outweigh the benefits and, in the event of a leak, must also provide tamper-proof evidence for disciplinary action and legal proceedings. It is best managed from a single web-based console where universal and granular policies for email and general system security are applied in real-time and continually updated in response to evolving threats.