LEARN HOW TO SECURE THE BREACH! SECURE THE BREACH: BREACH PREVENTION DOES NOT WORK A THREE-STEP APPROACH TO BOOST DATA PROTECTION

Transcription

1 SECURE THE BREACH: A THREE-STEP APPROACH TO BOOST DATA PROTECTION Reality as it was BREACH PREVENTION DOES NOT WORK LEARN HOW TO SECURE THE BREACH! Reality as it is The numbers do not lie whether internal or external, breaches are inevitable.

2 In an age where data is distributed across and beyond the enterprise, organizations cannot rely solely on perimeter security technologies. Breaches are inevitable. Here are three steps every company should take to mitigate the overall cost and consequences that result from a security breach: encrypt all sensitive data at rest and in motion, securely manage and store all keys, and control access and authentication of users. SafeNet is Now Gemalto SafeNet and Gemalto have recently joined forces to create the worldwide leader of data, transaction and identity protection solutions for enterprises, governments and financial institutions, protecting data at the core and securing access at the edge of the network. Together, we protect more data, transactions, and identities than any other company, delivering security services that are used by more than 30,000 businesses and two billion people in more than 190 countries around the world. We support 3,000 financial institutions and secure more than 80% of the world s intra-bank fund transfers, and protect the world s leading software applications. Why Sell Gemalto? Gemalto partners with over 300 vendors to expand opportunities in the enhanced security marketplace and to forge innovative interoperability relationships. That means if you are selling to one of our technology partners, you can add on Gemalto products and increase their level of security in this post-breach era. If you want to raise your average deal size by 30%, visit our Technology Partner Integration page to take advantage of opportunities with our many partners. Strategy Overview By implementing each of these steps within your customers IT infrastructure, you can help them effectively prepare for a breach. WHERE IS YOUR DATA? Gemalto 3 Step Approach WHO IS ACCESSING YOUR DATA? WHERE ARE YOUR KEYS? 03 By implementing a three step approach - encrypting all sensitive data at rest and in motion, securely managing and storing all of your keys, and controlling access and authentication of users - you can effectively prepare for a breach.

3 01: ENCRYPT THE DATA Encrypt all Sensitive Data at Rest and in Motion Locate where sensitive data resides, and encrypt it. Whether the data is in physical networks, virtualized environments, the cloud, or in motion, encryption will obscure and protect vital information. Storage Networks Applications File Servers WHERE Databases YOUR D ATA? Virtual Machines SaaS Apps Storage Networks IS Data in Motion Across Networks Applications File Servers WHERE ARE YOUR KEYS? Rotate 02: STORE AND MANAGE KEYS Delete Back-Up Securely Manage and Store Encryption Keys WHERE IS Create Store YOUR D ATA? Your customers cannot safely encrypt their data without a crypto management platform. Store keys in a vault Virtual Data in Motion Databases SaaS Apps away from any encrypted data, and implement a process to limit access, rotate, revoke, and Across reissue keys. Machines Networks Storage Networks Applications File Servers WHO IS ACCESSING Sales WHERE ARE YOUR KEYS? Rotate Databases Control Access and Authentication of Users IS YOUR Store D ATA? Virtual Machines SaaS Apps Sales Back-Up Marketing Unauthorized Delete Users WHERE 03: CONTROL USER ACCESS Rotate Accounting Create X Marketing Back-Up X Y O U R D ATA? Data in Motion Across Networks WHO IS ACCESSING WHERE ARE YOUR KEYS? Y O U R D ATA? Create Accounting Store Delete Unauthorized Users Determine who has access to the data, implement strong authentication of users, and establish a verification process. Define user access levels, and automate a way to provision, manage, and report on user groups. WHO IS ACCESSING Accounting Sales Marketing Y O U R D ATA? X Unauthorized Users

4 Solving Your Customers Challenges With the evolving threat model and changes to IT systems and infrastructure, organizations need to constantly improve their security strategies to address emerging risks. Here s how Gemalto solutions address these concerns: CUSTOMER CHALLENGES ENCRYPTION OF SENSITIVE DATA KEY MANAGEMENT AND STORAGE CONTROL ACCESS TO SYSTEMS AND APPLICATIONS BUSINESS DRIVER Safeguarding the information entrusted to you by customers, employees, and other stakeholders, as well as adhering to all compliance mandates of the industry. GEMALTO IDENTITY AND DATA PROTECTION Provides protection of both structured and unstructured data, at rest and in motion, whether hosted on-premises, in the cloud, or a hybrid infrastructure. Taking and maintaining ownership over how you are protecting your company s IP and other sensitive data. Offers a comprehensive key management and key storage solution that works across the infrastructure securing a variety of encryption use cases and providing a single point of auditing and management throughout the key lifecycle. Protecting your business against unauthorized users gaining access and/ or control to your systems and data. Static passwords are the weakest link in the data protection chain, and can be easily stolen or hacked. By providing a second factor of authentication in the form of a dynamic password or encrypted secret, two-factor authentication validates that users are who they claim to be when they access corporate applications, cloud services and networks. Gemalto Identity and Data Protection Solutions ENCRYPT THE DATA Encrypt data as it is transferred between data centers and to and from the cloud. Encrypt sensitive data at rest wherever it resides in on-premises, virtual, public cloud, or hybrid environments. SafeNet ProtectApp Provides an interface for key management operations, as well as encryption of sensitive data at the application level. SafeNet Protect DB Provides efficient and transparent column-level encryption of sensitive data, such as credit card numbers, social security numbers, and passwords, in multi-vendor database management systems. SafeNet ProtectFile Provides transparent and automated file system-level encryption of unstructured data at rest in the distributed enterprise, including Direct Attached Storage (DAS), Storage Area Network (SAN), and Network Attached Storage (NAS) servers using CIFS/NFS file sharing protocols. SafeNet ProtectV A high-availability solution that encrypts the full virtual instance, virtual machine, and attached storage volumes, in Amazon Web Services, VMware, Microsoft Azure, and IBM SoftLayer. SafeNet StorageSecure Network storage encryption secures file data connected to Ethernet networks securing NAS storage using SMB/NFS file sharing protocols. Once encrypted, it remains so through its lifecycle, regardless of the media on which it is stored. SafeNet Tokenization Protects sensitive information at the application-level by replacing it with a surrogate value - a token - that preserves the length and format of the data. SafeNet High Speed Encryptors Proven reliability, highest throughput, and lowest latency make SafeNet s network security devices the ideal solution for protecting data in motion, including time-sensitive voice, video streams, and metadata.

5 STORE AND MANAGE KEYS Key Management centrally manage the frequency of key rotation in order to better protect the data. KeyStorage the higher the level of security surrounding the key storage container, the more protected the data. SafeNet Hardware Security Modules and SafeNet Crypto Command Center provide reliable protection of cryptographic keys and processes used in transactions, digital identities, and applications. SafeNet KeySecure a single, centralized platform for managing cryptographic keys and applications. As the use of encryption proliferates throughout the corporation, security teams are able to administer keys, including key generation, key import and export, key rotation, and much more. CONTROL USER ACCESS Control access and protect identities Gemalto s strong authentication products are designed for enterprises and trust centers to secure access, identities and interactions. Our solutions include cloudbased or server-based management platforms, advanced development tools and the broadest range of authenticators. SafeNet Authentication Service delivers fully automated strong authentication from the cloud, enabling organization to protect cloud-based and on-premises applications, from any device with user-friendly token options. SafeNet Authentication Manager OTP and PKI authentication management for enterprises that want high assurance protection for remote access, local access and PKI-based applications Ezio Suite a full range of strong authentication and transaction security solutions designed to secure digital transactions throughout the banking and ecommerce ecosystem and enable the delivery of ebanking services on numerous channels. Broadest range of authenticators Gemalto s broad range of authenticators provide different levels of assurance depending on the sensitivity of the assets you want to protect. Hardware, software and tokenless options allow users to choose the method of their choice, optimizing security and convenience. Target Customers Enterprises using on-premises or virtualized data centers, hybrid, private and public cloud Regulated industries in need of security and compliance (e.g. Financial, Retail, and Healthcare) Educational institutions CIOs, CCOs, Directors/VPs of IT, Security Architects and Administrators, Storage Administrators, Network Administrators, Business Line Managers Small and medium-sized business (SMBs) that want security, simplicity, and low costs Key Talking Points Comprehensive information lifecycle protection Trusted by the largest organizations for critical data protection More FIPS and Common Criteria certifications than any other single vendor Gartner Magic Quadrant leader 4 years in a row for User Authentication High performance in high-volume deployments

6 Partner Ecosystem Gemalto partners with over 300 vendors to expand opportunities in the enhanced security marketplace and to forge innovative interoperability relationships. A full line of technical guides, solution briefs, cheat sheets, and software development kits (SDKs) are available for all platinum and gold partners to help with the selling and integration process. To find a technology partner, visit our Technology Partner Integration page. PARTNER NAME PARTNER LEVEL SAFENET INTEGRATION SOLUTION TYPE IBM Platinum HSM, Key Management, Encryption, Authentication NetApp Platinum Encryption, Key Management ACI HSM Blue Coat Encryption Dell Authentication, Encryption, Key Management DataCard/Entrust HSM, Authentication F5 Networks HSM Palo Alto Networks HSM, Authentication Symantec HSM, Authentication, Key Management Face reality as it is, not as it was or as you wish it to be. Jack Welch, former CEO, General Electric

7 HSM Partner Ecosystem Key Management Partner Ecosystem Authentication Partner Ecosystem Encryption Partner Ecosystem Payment Partner Ecosystem

8 Gemalto Case Studies More than 30,000 customers across commercial enterprises and government agencies trust Gemalto to protect and control access to sensitive data, manage risk, ensure compliance, and secure virtual and cloud environments. For the full list of available Case Studies please visit our Cipher Partner Portal. Banking: SafeNet High Speed Encryptors Secure International Bank s Global WAN. An international bank implemented SafeNet High Speed Ethernet encryptors to ensure secure connectivity and instant access to customer data from any of their 30+ locations on three continents. IaaS Provider: Cloud4com is an innovative Infrastructure-as-a-Service provider in the Czech Republic. Recognizing that providing encrypted cloud and key management services would set it apart from the competition, the company chose SafeNet ProtectV and SafeNet KeySecure to expand their security services portfolio. Insurance: Mercury Insurance needed to implement encryption on legacy and proprietary systems, as well as install a FIPScertified centralized encryption and key management solution that would interoperate with a variety of existing databases. SafeNet KeySecure, in conjunction with SafeNet ProtectApp and SafeNet Tokenization, enabled Mercury to secure high-value data, centralize key management, achieve PCI DSS compliance, and maintain the high performance required to run a successful business. Education: The University of Texas at Austin required a solution to enable them to share and store sensitive digital assets, such as encryption keys, passwords, passphrases, and personal identification numbers securely. They created a system to provide secure backup and retrieval of sensitive data, and they selected SafeNet HSM as a central repository that would enable secure, efficient sharing of sensitive assets. Payment Processing: The Logic Group required a PCI P2PE-compliant solution. They choose SafeNet Payment HSMs to secure some of the UK s top retail, telecommunication and insurance companies on a robust platform the company could deploy quickly and manage efficiently. Healthcare: A longtime SafeWord customer, Albert Schweitzer Ziekenhuis (ASZ) hospital system in the Netherlands relies on Gemalto authentication to secure physician access to sensitive hospital resources. Deal Registration Gemalto Deal Registration is an opportunity-based program that rewards authorized Gemalto partners with an additional discount (over non-registered deals), as well as the protection of the opportunity for an approved new-business deal they bring to Gemalto. The new program has enhanced the discount from 7% to 10%! Sign up for SafeNet Cipher Partner Portal for more information. Contact Us: For all office locations and contact information, please visit safenet.gemalto.com Follow Us: blog.gemalto.com/security GEMALTO.COM Gemalto All rights reserved. Gemalto, the Gemalto logo, are trademarks and service marks of Gemalto and are registered in certain countries. PLAYBOOK (EN)-Aug ELC Financial Services: A multinational financial services corporation simplifies security management and reduces costs by standardizing on Gemalto s suite of SafeNet Data Protection solutions, including SafeNet ProtectApp, SafeNet ProtectDB, SafeNet ProtectFile, SafeNet ProtectV, SafeNet StorageSecure, SafeNet Tokenization and SafeNet KeySecure, to institute an Encryption as an IT Service model company-wide.