SRC Secure Solutions bv. Why SecureZIP was chosen by a Pension Services Company to safeguard sensi<ve data

Transcription

1 SRC Secure Solutions bv Why SecureZIP was chosen by a Pension Services Company to safeguard sensi<ve data 1

2 Pension Services Company Pension Services Asset and Liability Management Communica<on Daughter of PGB > clients In top 10 largest in pension sector (NL) 2

3 Pension Services Company Using the Paymaster (Centric) applica<on to manage pension payments to pensioners. Paymaster produces an XML CLIEOP file detailing payments and recipients This file was open and made available via fileshare Manually transmired to Equens for processing 3

4 Pension Services Company De Nederlandsche Bank audit advised securing the CLIEOP file Search for a suitable product Standards Easy to implement Mul<- plavorm Support Cost? 4

5 Pension Services Company Problems Acceptance by partners Reluctance to accept another standard Reluctance to implement in applica<ons (Easy!) Name in the market Expensive? not true! Standard? ZIP AES SHA- 2 FIPS

6 SecureZIP for Windows Server ENTERPRISE EDITION Copyright 2014 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP and PKZIP are registered trademarks of PKWARE, Inc. Trademarks of other companies men<oned in this documenta<on appear for iden<fica<on purposes only and are property of their respec<ve companies. Confiden<al Informa<on.

7 PKWARE Enterprise Security Socware Company SecureZIP runs on and across ALL major technology plavorms; mainframe to mobile and cloud Since PKWARE invented.zip, everything they do has embedded performance (compression) 7

8 Where Does PKWARE Add Value? Regulated industries and government High transac<on volume and storage Secure transac<ons Personal informa<on security Other sensi<ve/proprietary businesses 8

9 Typical Customer Advantages 1. Security (data/file level security) 2. Security compliance 3. Cost savings (speed, SLA, CP) ALL with a performance edge 9

10 SecureZIP Server Security FIPS validated algorithms for regulatory compliance Symmetric (passphrase) and Asymmetric (digital cer<ficates) AES (128,192, 256), 3DES OpenPGP Support Filename Encryp<on Con<ngency Key support for audit/risk mi<ga<on Interoperability Mul<- plavorm capabili<es (i.e. EBCDIC à ASCII) Open Systems (Windows/ Desktop/ Server, UNIX/LINUX) Mainframe, midrange (iseries, zseries) Integra:on Applica<on Integra<on SYSLOG and SNMP integra<on (i.e. error repor<ng for arended/ unarended opera<ons) SMTP and FTP integra<on (i.e. seamless integra<on to other plavorms) Performance Up to 95% compression

11 SecureZIP for Windows Desktop ENTERPRISE EDITION Copyright 2014 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP and PKZIP are registered trademarks of PKWARE, Inc. Trademarks of other companies men<oned in this documenta<on appear for iden<fica<on purposes only and are property of their respec<ve companies. Confiden<al Informa<on.

12 SecureZIP Desktop Advantages Policy Manager Allows the CONTROL of encryption and compression Contingency Key Ensure access to data encrypted by end users in accordance with regulatory and audit requirements Microsoft Office Integration Minimizes user workflow changes and training integration with Microsoft Outlook Automatically compress and encrypt files attached to outgoing messages FIPS Mode lockdown Lock down users to only encrypt/decrypt with FIPS validated algorithms Data-Centric Security File/Folder based encryption compliments Whole Disk Encryption Solutions Easy to deploy, manage and use!

13 Benefits/Features of Policy Management Allows the CONTROL of encryption and compression Lock down users to only encrypt/decrypt with based on user/group and validated algorithms (like FIPS) Contingency Key added to ensure access to data that is encrypted by end users in accordance with regulatory and audit requirements

14 Benefits/Features of Contingency Key A contingency key is a private key held by the organization using their current key management/access methodology Designated individuals have the corresponding private keys that allow decryption of data for contingency access The contingency key holders could be the InfoSec team from an organization-wide perspective, or departmental owners at a more granular level Granular deployment allows for multiple keys to automatically be associated with the encrypted payloads Contingency keys can be x.509 keys, PGP keys, or both More about Contingency Key

15 SecureZIP Integration with Microsoft Office SaveSecure Makes Microsoft Office a secure application Save Microsoft Word, Excel, and PowerPoint documents as protected files directly from the applications Reduces steps user must perform to protect content Secure either a copy of the document or save it as a secured document only with the latter the more secure option Includes OpenSecure capability to open protected documents directly from the protected SecureZIP archives No User Action to Compress and encrypt files attached to outgoing messages Easily open, decrypt and/or extract ZIP file attachments

16 Microsoft Outlook integration Automatically Compress and Secure s and Attachments SecureZIP integrates with Microsoft Outlook s and attachments sent using this application are secured automatically or on an individual basis Users can also re-encrypt messages and attachments when forwarding s to others SecureZIP s advanced compression reduces file size, eliminating the problems associated with sending large attachments that exceed mail system size limits Sending secure s is simple: write an , attach files, and click send No additional steps necessary

17 FIPS compliance SecureZIP for Windows Desktop is FIPS compliant and it lists corresponding FIPS validated cryptographic algorithm certificate numbers FIPS compliance requires listing of all validated cryptographic libraries along with the certificate numbers WinZip is only FIPS 197 compliant, which is not the same crypto depth and standard as FIPS FIPS 197 addresses just the AES algorithm Does not address other more comprehensive requirements found with FIPS 140-2

18 SecureZIP Data Centric Security Security always stays with data, reducing enterprise risk Standard means for cross-platform secure data exchange Only set of data file data encryption applications for all major enterprise computing platforms from a single vendor FIPS compliance solution across the Desktop, Server and Mainframe environments Support for SHA-256/384/512 digital signatures LDAP Support Advanced self-extractors Scalable to meet needs of organization

19 SecureZIP Desktop Challenge: Easy to Use Data Security and Compression for all users GUI Wizard and integrated app Data Recoverability should a password or credential be lost or compromised Security Policy Enforcement regulatory compliance and audit requirements Solution: Multiple GUIs and ways to invoke - with Microsoft Office and Outlook Integration SecureZIP Contingency Key addressed lost key as well as suspicious encryption activity SecureZIP Policy Manager locked down password strength and encryption algorithms SecureZIP Benefits FIPS compliant Contingency Key Use digital certificates or passphrase or both to encrypt Centralized Policy Management User friendly with Wizards and Fluent and Conventional interfaces Standardizing on one solution for all platforms eliminating WinZip with its lack of policy enforcement, CK and x.509 support

20 Pension Services Company Choice = SecureZIP for Windows Server Uses standards (ZIP, AES, 3DES, SHA2 etc) FIPS , SOX, HIPPA etc compliant Mul<plaVorm Supports PKI Supports OpenPGP Simple to implement Scalable Worldwide support References (ABN AMRO, ING, KPN, EMCF, Achmea Belas<ngdienst, UWV, Min. Binnenlandse Zaken etc) 20

21 Pension Services Company Choice = SecureZIP for Windows Server Socware integrated into Paymaster in hours Tested - passed Stage one SFX (Self Extrac<ng File) using digital signature (later with encryp<on) Rollout Adop<on of SecureZIP as standard within the organisa<on SecureZIP Desktop with Outlook integra<on 21

22 SecureZIP Windows Desktop Server (Win/Aix/Linux/Unix) IBM i/os IBM z/os Viivo SecureZIP Reader Partnerlink vzip SecureZIP DLP 22

23 SRC Secure Solutions Thank you 23