 |
|
|
|
Gartner projects that 85 percent of large enterprises will initiate data-at-rest encryption projects by mid-2006.
|
|
|
|
Storage Encryption for Service Management
“Must Have” Security for Service Organizations
Upholding to a Higher Standard
Outsourced service providers keep the global economy turning by providing critical technological underpinnings – hosting, transacting, aggregating, and storing everything from market trades and credit card payments to healthcare records and federal tax returns. Given that many service organizations provide cross-industry solutions, they are bound by a dizzying array of mandated data privacy regulations. |
|
|
|
|
Think of a security directive (i.e., GLBA, HIPAA, Sarbanes-Oxley, NIST/FISMA, PCI, DPEC, and Basel II) and service organizations must be prepared to meet it and all others with a pragmatic and comprehensive security strategy. Usually, they are also required to meet security service-level agreements and SAS 70 Type II, SysTrust, and ISO 17799 auditing standards that hold them to an even higher standard than the customers they represent. Now, with the latest round of privacy legislation (i.e., CA SB 1386, NY ISBNA), service organizations – and their customers – must publicly disclose security risks and subsequent actions taken, even if they so much as suspect a security breach. The new legislation ups the ante that much more, significantly increasing the demand for security.
Security Becomes a Business Differentiator
All of these factors have made security an important business differentiator for service organizations. Take Payformance Corporation, a provider of electronic payment processing services to the banking, healthcare, insurance, and retail industries. “Confidentiality is a big priority for our customers…and data privacy regulations are only going to become stricter over time,” noted George Betancourt, information security officer at Payformance. “We need a secure technology infrastructure that will support today's regulations as well as tomorrow's.” Service organizations must consider not only regulations and customer trust but also liability issues.
Storage Encryption: The New Line of Defense
These days, everyone is lining up to implement encryption because it not only meets mandated requirements for both backup media and networked storage but also significantly minimizes the risks and liabilities associated with internal and/or external security breaches. In fact, Gartner has increased its forecast to project that "by the second quarter of 2006, 85 percent of large enterprises will initiate data-at-rest encryption projects in response to regulatory compliance or industry initiatives." 1
“Every time I read in the news about identity thefts or lost backup tapes, it makes me wonder why any company entrusted to protect sensitive data would neglect to encrypt that data,” Payformance's Betencourt observed. Service organizations like Payformance demand a security strategy that fully encompasses data encryption best practices, like centralized encryption key management, access control, and authentication. These companies turn to NeoScale Systems, Inc., the industry leader in enterprise storage security, for security solutions that meet the higher standards they face.
NeoScale Solutions – Seamless. Reliable. Secure.
NeoScale delivers a range of storage security appliances that automate encryption of data headed to storage and decryption of data headed to applications, making stored data unreadable to unauthorized users. Using NeoScale’s centralized management features, service organizations can ensure that encryption keys, access controls, and authentication are customized to each customer’s needs. NeoScale’s CryptoStor® storage security appliances make it possible to consolidate the storage infrastructure while at the same time isolating each customer’s information, thereby ensuring that only the right information is available to the right people in the right way.
Protection without Crippling Complexities
IT professionals are justifiably concerned about the complexities that encryption can impose on transaction processing performance and the storage infrastructure. However, NeoScale's storage security appliances are purpose-built, providing ubiquitous, immediate, and transparent protection of storage data regardless of application, transport, media type, or location – with virtually no latency delays and minimal impact on response time. They securely automate the transfer and recovery of information from primary and secondary storage, while minimizing operational complexity at the lowest possible cost. Easy to deploy, NeoScale CryptoStor’s enterprise-class solutions offer high-speed security that can selectively compress, encrypt, and authenticate data.
NeoScale Customers Save Costs Across the Board
With NeoScale solutions, service organizations like Payformance save by decreasing both risk and liability.
|
