2 posts tagged “information-centric security”
I'll admit I'm the last one I know who's jumped on the Gmail bandwagon, but I did so just as it was on the cusp of opening up to the world. After a few days of use it is clearly superior to the other offerings available and if Yahoo! and Microsoft don't get their heads back in the game they'll both lose more than just me as a customer.
Lets talk about information security for a minute, I'm not sure how to handle this but since the Execs were happy to mention it to the press at the RSA Conference and the news had leaked anyway we might as well spend some digital ink on PowerPath's upcoming encryption option. PowerPath Data At Rest Encryption is one of those no-brainer wins you only consider to be a no-brainer win after someone else has mentioned it to you.
There's a lot of unencrypted data sitting out on storage already, how to do you realistically apply encryption in a reasonable amount of time without having to install racks of in-band encryption boxes? You use PowerPath Migration Enabler to do it for you.
What about Key Management? EMC already has a battle tested key management system with RSA Key Manager. What will all this give you? It'll give you encrypted data from the moment it leaves the host for the storage, it'll never be clear on the wire.
What about information security before it leaves the host? Thats where RSA Database Security Manager & RSA File Security Manager come in. That's where RSA SecurID, RSA Access Manager and RSA Certificate Manager come in.
How do you deal with the events these and the other products in your environment will generate? How will you ensure compliance, audit & security integrity and so on? That's where RSA enVision comes in.
If you didn't get the message loud and clear at the RSA Conference I'll repeat it for you. EMC is in the information business, information security is but one dimension of information protection and like all the other dimensions it's something the company is going all in on. I'm looking at the value prop and the depth of technologies available and I see a bunch of things which are going to leave EMC's competitors in the dirt.
That's not swagger & bravado, it's the fact that there's a scarcity in the security market of companies who can offer such a product range under the same letter head on the same paper.
Locked away on PowerLink I'm afraid, and I'm not going to start reposting EMC content here, but if you're an EMC customer or are registered on PowerLink you can login and read the fascinating Secure DNA: Enabling Security in EMC Products whitepaper.
For anyone interested in how EMC approaches product security it's a must read.
A warning to the non-technical, it's written by engineers for consumption by IT Managers, IT Security & Storage System Professionals.
