1. A method of protecting data items in an organizational computer network, comprising: a) defining multiple information profiles for classifying data items; b) defining protection policy rules, for protecting a data item belonging to a specific information profile; c) responsive to an event being associated with the existence of said data item, and initiated by an authorized user or application, and before said authorized user has control on said data item, performing the following steps: c.1 taking control of all content access to said data item by said authorized user or application; c.2) analyzing the source that created said event and/or the content and/or the metadata of said data item; c.3) classifying the data item according to the analysis results and to the defined information profiles; c.4) protecting said data item by transforming the content and the form of said data item, based on said classification and the defined protection policy rules; c.5) changing said data item to its transformed form which is independent of any storage location or of its way of transmission and optionally includes said protection policy rules, which are automatically enforced in response to said event; and d) in response to said event, allowing access of said authorized user or application of other users to said data item, only in its transformed form, and according to said automatically enforced protection policy rules, wherein said agent is adapted to update the enforced protection applied to the data item responsive to an event, according to said classification and defined protection policy rules.