Is Encryption necessary ? PDF Print E-mail

With the advent of high capacity DSL lines, USB devices, IPods and 350Gb USB Hard Disks, there is now a massive risk of commercial data going missing. Almost every day there is a disclosure that either a Laptop, CD or USB Stick has been lost or deliberately stolen

The Financial Services Authority (FSA) came out in April 2008 and stated that they require any company regulated by them to encrypt mobile Customer Data.  They have also stated for the record, that they will fine companies that are not in compliance.

Not only is there the threat of fines from the FSA, there is the very real Corporate Risk of data going missing.  This can be Customer records, pricing & account details.  Imagine what your competitors might be willing to pay for a full database of all of your customers

There is also a requirement as part of PCI (Payment Card Industry) membership that all sensitive data held, needs to be encrypted.  We can provide solutions that encrypt sensitive information within the database, hooking in to applications without requiring Database and program re-writes.  The uniqueness of the technology is that it is Format Preserving, i.e. if you store a 16 digit card number in a database and encrypt it, then it would normally become a much longer number which would not fit inside the Database Tables

With Format Preserving Encryption, a 16 digit card number is still encrypted, but it will still be 16 digits long and only accessible to the the people who specifically have access to that information.  This also removes the exposure that the DB Admins have to the Credit Card information as they can still administer the database without viewing the specific credit card details.

We have all heard in the news about the recent blunders, as well as the well publisized Nationwide fine, are all reasons to ensure that your Company is not exposed to a data breach

In the US, Encryption is a "Safe Harbor" which means that if there is a laptop lost or stolen, yet the company can prove that it was encrypted, then there is no legal requirement for disclosure.

The risk of files being sent outside of the organisation by email, USB or CD can only be highlighted by the recent HMRC mistakes, and as of today, they still do not know where the data is.

If the disks had been encrypted, then the Government would not have suffered such bad press and negative publicity that it has had to endure.

Don't let your Organisation be the next Revenue & Customs, ensure you are protected....