Identity Theft is the fastest growing crime in the US according to the FBI
 

Data security solutions

Written by OSAblog on Tuesday, July 28th, 2009

‘Take an information-centric view of security’

On one side digitization of information is providing quicker access and easy sharing using the information technology (IT) platform, while on the other side, it further demands great control and management of information.

 

Today, the rising incidents of unauthorized information access, data thefts or ineffectiveness of security mechanisms to protect information has raised major concerns among enterprises and organizations. Seclore Technologies’ CEO, Vishal Gupta talks to Pankaj Maru of Cyber Media News about information digitization and its changing dimensions, evolving information threats or risks, information security mechanism in the recessionary times and much more. Excerpts:

Digitization of information or data has completely changed the information dimensions and also the way it is used and managed today. Do you think the information digitization has brought in an entirely different perspective on information’s risk, its security and management, particularly at the enterprise level?

Absolutely. The methods to contain information risks before and after digitization are completely different. Before digitization, physical access control to information was the only method of its security. Examples of such are large document vaults which still exist in some pharmaceutical companies and law firms. With digitization and the collaboration that it brings, access control methods are rendered ineffective since replication and transmission of information is easy.

Consequently, any system which restricts access, replication or transmission quickly becomes ineffective due to new methods coming for the same purpose. There is no option but to take an information-centric view of security and ensure that security is built into the information itself instead of the infrastructure around it.

Which are the evolving threats or risks about information? And how can it be managed using IT?

Risks of information breaches are continuously evolving like a ‘cops-and-robbers’ game, i.e. you mitigate one risk and another one springs up. Also the solutions to problems typically become the problem themselves after a while. Amongst the largest threats today are risks associated with “internal employee or partner” data breach (Blog reference) as well as risks associated with the rapidly vanishing “enterprise perimeter”.

Most security systems today, like firewalls, UTMs etc, do not take care of “internal” resources being the cause of an information breach. The only way to mitigate such risks is to have an “information-centric” policy for usage, i.e. define and implement a policy for information usage which is dependent on the “as-of-now” relationship between the owner of information and its user.

Also, these usage rights should be dynamic, i.e. if the genuine need for the “recipient” to use the information has expired or the business relationship between the owner and the recipient changes, then it should be possible to “withdraw” the usage rights to that information.

Seclore’s products such as Seclore FileSecure and Seclore InfoSource provide exactly these controls to individuals and enterprises. Seclore FileSecure allows users (owners) of information to control WHO (people, groups, etc) can use the information, WHAT (view, edit, print, forward, etc) can they do with the information, WHEN (dates, timespans, etc) can they use the information and WHERE (within the office, at home, etc) can they use the information.

Seclore InfoSource allows enterprises looking to outsource key business process to external agencies (BPO/KPO) to retain control over information shared with the agencies, while not hindering the agencies’ capability to perform. This is specially useful in any kind of cross-border data flow.

Budget constraints, especially for IT, has become a major issue today. In the Indian context, how are the local organizations and enterprises evaluating the significance of information security mechanisms and IT budgets constraints?

The need for information security has not gone away; the budgets to support large initiatives have, however, reduced considerably. Considering this, information security companies should look at a partnership model with customers which can allow security initiatives to progress with a “pay as you use” commercial model.

Some of the largest enterprises are coming around to this model, which I believe will not only define security initiatives but also generic software initiatives. At Seclore, we have introduced exactly this model which will allow us to become a partner in the customers business and its security.

http://www.seclore.com

Article Source:http://www.articlesbase.com/security-articles/data-security-solutions-1075232.html

Share and Enjoy:
  • Digg
  • del.icio.us
  • Facebook
  • NewsVine
  • Reddit
  • StumbleUpon
  • Google Bookmarks
  • Yahoo! Buzz
  • Twitter
  • Technorati
  • Live
  • LinkedIn
  • MySpace
  • E-mail this story to a friend!
  • RSS
  • Turn this article into a PDF!

Welcome back! You may want to subscribe to my RSS feed. Thanks for visiting!

Technorati Tags: , , , , , , , , , , , , , , , , , , ,

  • Share/Bookmark

If you enjoyed this post, make sure you subscribe to my RSS feed!

Blog Traffic Exchange Related Posts
  • Computer Security: Protecting Your Data Computer Security has become increasingly important as more and more companies rely on software to run their business. This article will provide you information about computer security and how you can use it to protect your data. Whether you’re a business owner, an executive, or an IT manager, the following......
  • How To Get Rid Of Spyware Infections On Your Pc, The Easy Way You will be shocked to hear that US businesses alone lose around 65 billion dollars in computer and internet crime and the major portion of it contributed by spyware related issues. This brings in a major security issue of the decade. How do you get rid of spyware? The money......
  • Information Security Titles “Out Of Control”         We are in an era where Security and Compliance have made it to the forefront of corporate board room discussions. It is now one of the key topics on the agenda.  Are we protecting our corporate and personal data?  Are we meeting both corporate and regulatory requirements as it......
  • Boosting Data Security with a Secure USB Drive It is becoming very clear that the best way to boost security of mobile data is through the use of a secure USB drive. As each week goes by more and more information becomes mobile and is available through many diverse mediums; internet, flash drives, etc. This naturally is going......
  • Business Risks Associated With Data Breaches The EU Data Protection Supervisor – the independent EU supervisory authority responsible for protecting personal data within the EU – recently pushed for the EU ePrivacy directive to be amended to provide for a pan-European data breach notification requirement. In parallel, the UK Information Commissioner, who is charged with enforcing......
Blog Traffic Exchange Related Websites
  • VoIP Telephony - What You Need to Know First About Emergency 911 Calls Voice over Internet Protocol providers Skype, and Vonage are just two of the many VoIP telecoms service providers which have, in the past, come under fire in the US, and elsewhere, for failing to connect emergency 911 calls. It is quite natural for users to assume that VoIP based systems......
  • Avacado HeartI am at Risk, Are You? Know the Facts on Heart Attacks I have a lot of reasons for wanting to lose weight.  Right up at the top of the list is be with my family.  To be there to watch my children grow up. To spend quality time with my wife.  To enjoy all of the great things that come with......
  • Key Concepts of Virtual Private Networks Virtual Private Networks claim to solve majority of the security problems faced by the enterprises. Most of the issues were related to secure data transfer over the public internet. The internet's greatest asset is ubiquity and openness but this is its greatest weakness as well. VPN seems to have......
  • How to Pick Out the Best IT Support Doing business these days requires the use of IT Support. Using appropriate technologies lets businesses cut down on overhead costs and serve customers better. However, opting for a specific service provider will take some doing. This article lists four measures for identifying the right IT firm for your specific......
  • HP iPAQ 211 Enterprise Handheld Enterprise-grade PDA with Windows Mobile 6 Classic operating system and 4-inch touchscreenView and edit Word, Excel, and PowerPoint files with Microsoft Office Mobile; sync email and calendar from desktop with Outlook MobileWi-Fi networking (802.11b/g); Bluetooth connectivity for handsfree devices and peripherals; dual expansion slots for optional SD/SDIO and CompactFlash......
 

Leave a Comment

CommentLuv Enabled

« Importance of IT Support Services for Large Business | Home | Speed Up Windows without Letting the Productivity to Suffer »