Endpoint DLP is a powerful tool for reducing the risk of data loss while enabling the mobile workforce, especially when part of a full suite DLP solution with network and stored data capabilities. Endpoint DLP helps manage all three aspects of this problem. The first is protecting data at rest when it's on the endpoint-or what we call content discovery. Our primary goal is keeping track of sensitive data as it proliferates out to laptops, desktops, and even portable media. The second part, and the most difficult problem in DLP, is protecting data in use. This is a catch-all term we use to describe DLP monitoring and protection of content as it's used on a desktop-cut and paste, moving data into and out of applications, and even tying in with encryption and enterprise Document Rights Management (DRM). Finally, endpoint DLP provides data in motion protection for systems outside the purview of network DLP-such as laptops out in the field.