ENCRYPTION IS NOW CHEAP
|
|
|
- Letitia Byrd
- 7 years ago
- Views:
Transcription
1 ENCRYPTION IS NOW CHEAP SENSEI ENTERPRISES AND SIMPLE AND MAY BE ETHICALLY REQUIRED! D.C. Bar Association May 6, 2016 Sharon D. Nelson, Esq. & John W. Simek
2 Is Encryption Ethically Required? No Maybe Probably Definitely
3 Is Encryption Ethically Required? Never Sometimes Always
4 Is Encryption Ethically Required? The potential for unauthorized receipt of electronic data has caused some experts to revisit the topic and issue [ethics] opinions suggesting that in some circumstances, encryption or other safeguards for certain communications may be required. ABA, Eye on Ethics (July 2015)
5 Lost and Stolen Devices: Considering the high frequency of lost assets, encryption is as close to a no-brainer solution as it gets for this incident pattern. Sure, the asset is still missing, but at least it will save a lot of worry, embarrassment, and potential lawsuits by simply being able to say the information within it was protected. Competent and Reasonable Efforts
6 Attorneys Avoid Encryption Encryption 10 FT
7
8
9 Attorneys Avoid Encryption Encryption is too difficult. Encryption is too expensive. I don t need encryption!
10 Why Attorneys Need Encryption Up to 70% of data breaches involve laptops & portable media. About 10% of laptops are stolen during their useful lives. 1.4 million smartphones were lost during million smartphones were stolen during 2013.
11 Why Attorneys Need Encryption 8/11 Baltimore law firm (external hard drive backup left on light rail) 8/14 Law firm with GA operations center (external hard drive backup - stolen from employee s trunk) 1/15 San Francisco attorney (laptop stolen) 4/15 San Diego law firm (laptop stolen on trolley)
12 Why Attorneys Need Encryption 2007: 18 laptops were stolen from the offices of a law firm in Orlando. - Protected by encryption - SANS Institute: (laptop stolen, but the data was protected) shouldn t be newsworthy... Encryption protects data!
13 Why Attorneys Need Encryption Electronic communications can be intercepted. Wired and wireless network traffic can be intercepted. Cyberspace is a dangerous place!
14 Why Attorneys Need Encryption
15 Why Attorneys Need Encryption PRISM Web-based Telephone records Text messages Social media sites ISP communications VoIP File transfer Video conferencing
16 Why Attorneys Need Encryption The Encryption Wars July 7, 2015
17 FBI vs. Apple iphone 5c ios 9 PIN Backdoor
18 Encryption An electronic process to protect data Transforms readable data into unreadable data Requires a key to make data readable again
19 Encryption Readable Plaintext Encryption Key Unreadable Ciphertext Decryption Key Readable Plaintext
20
21 Encryption Key Example AES-256 Key +30NbBBMy7+1BumpfmN8QPHrwQr36/vBvaFLgQM561Q=
22 Encryption Key -----BEGIN PGP PRIVATE KEY BLOCK----- Version: BCPG C# v lqosbfionhgbcacwahcybg5x52ikbikpen21wea3kr+elvqrkdjd1ol1o4kmy3hh Zz1l/DH7RcZX+efCP3RfEvi7Mu3a9KIEq0D0KxLQbhaWvVDzJ8yUCR8kRepFDKtj pj1g/049djgm4ayhqhmtpsnwrnpbtv5ci2k9cwgzsnh/4nnkagyudsftreoxosut pfytymeogbg2dkng4yz6ug86v5k641lgh9qabajjffxoe2amwbypmwqdahjlczfh U2q05GJt/2zThnky/D//savhrshpNxr1ddEa1QwgGSR/EDPkflv1b4yWH05DbRST dr9b136kh+2ymdtqaj75hhu/h9q6wmhbailxabebaah/awmcozz7ekyu0yzgxuo d EoYlOwJmlu/ZLx2GSFtZO2RNyvblG+O3ZeKukG1xbSvzBS0Z5OjQOYnD+X5arvNM DmpyilKpb5DueaN1osxPOkunqQ6cJlOWdROvUQkgLCD7Y7jfu4/coeK+HZuoIHSq txeqaictdcenfyjdjnyngwkj6wft3lgjdhcreck6mzcggjhjmcn8vf+yemsuikm+ 9D/US/rl/lWnINlfgmhiN1NxpAhg9Xo43Mpwex3hZLXLrbhdTkRMVgHLEH5h3xxo /UyNGCn3T9CTa4/vNdmZmMlAAHQk6F0ZhqFLS8x3sR2hxwkaNGmGHRr/ihklv15U RrggHzH89zxc3RDC8al/wcieM1vXx9hK195r9NPJ/hET1EIqs3wLu8rmZDPazIVT j8bqdhh3x964q70ciirevxby29uwsxkhu6q8agmcddegoz/bhtlayss6q53dgw97 U2IN6QIxHDTa+eZU5t1RVR5ugHph6yhTk6rCQF+FTsiaezwHkXqS5SfyNJ2JgOCi 6l4HpA2gLOy3raV4MoSpsEwIpquTccu/B8Aiucy6UL7IELOAMT2s7c2R7qVoBvew 5e2gDid0CWNqN03Zvg4USKq3lYskMUWUtaaexDWNALB210OKixm6mGN4Vzelmq MK w6drwwbfuo+xt540wlgooucjzoem+qxkofndzicdq9lns/eswvlzs2l/ei3kf4du B0wexeG7R5eNlOlDfReyz5qWXOLgS47In6OLBXlUfuuNsI0m64DM3Z9LBXev2TuG YHGG26j1FRwgOdSDynjITA2xZrIJQ7rBjJhiMedH1bLlUau75EU/qQVAV1jZ+qD/ CbD/vxVW237NaAPPlctGXrvWMyZh/PSjb/wC56veYrQAiQEcBBABAgAGBQJSDpx4 AAoJEKJQRE9Opr2dRb8H/A67kPkY8fwCY8JxF6tV46rmXIyPOsVzVHb+TG9p+0ep 1js13t1MGJuMS7CXaDdtPdahD9IKwKRO3z2Jxsg2ADYditkR7QUknGUnrJsQOkKx 8gXinRihRNjM2JzsqWkBEOauIlnO5+Y01g7KTo93N1F+pNrPNzRko8gAPWIozJMd 5wLT9NvtdJLRumJjTjQ9ydyLa41uOq8EZvYELwyq0USO5AzlOu5XAduduRv9qhIm CmN8RLgShJzCGhu2E08hgU2kZZtY1g3VyGnttkkn4Vtr6wREh5SyvMlzirWAMb1G LvaFZWAYAPLlCtCZQU3pL8mjFTFAxsKS1CcRLUrOkLM= =9Ry END PGP PRIVATE KEY BLOCK-----
23 A Simplified Overview Encryption Program Algorithm Key
24 Protect Data at Rest Servers, Desktops, Laptops, Tablets, Portable Media, Smartphones, etc. Data in Motion Wired Networks, Wireless Networks, Internet, Cell Networks, etc.
25 Is Encryption Too Difficult? AES ALGORITHM Source: quadibloc.com
26 Is Encryption Too Difficult? Attorneys will often need assistance in setting up encryption. There are now many easy to use options for encryption (particularly after setup).
27 Attorneys Duty to Safeguard Ethics Rules Common Law Contracts Statutes and Regulations
28 ABA Ethics 20/20 Amendments Model Rule 1.1 Competence Comment [8] To maintain the requisite knowledge and skill, a lawyer should keep abreast of changes in the law and its practice, including the benefits and risks associated with relevant technology
29 ABA Ethics 20/20 Amendments Model Rule 1.6 Confidentiality (c) A lawyer shall make reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client. + Comments 18 & 19
30 Ethics Opinions - Encryption New Jersey Opinion 701 (2006) California Formal Opinion No Pennsylvania Formal Opinion Texas Opinion No. 648 (2015)
31 Unencrypted = A Postcard "The common metaphor for Internet is postcards: Anyone letter carriers, mail sorters, nosy delivery truck drivers - who can touch the postcard can read what's on the back." Bruce Schneier 1995
32 Unencrypted = A Postcard A Postcard Written in Pencil Larry Rogers 2001 SEI - Carnegie Mellon University
33 Unencrypted = A Postcard s that are encrypted as they re routed from sender to receiver are like sealed envelopes, and less vulnerable to snooping whether by bad actors or through government surveillance than postcards. Google Official Blog June 2014
34 Unencrypted = A Postcard "Security experts say is a lot more like a postcard than a letter inside an envelope, and almost anyone can read it while the note is in transit. New York Times July
35 Bottom Line Encryption is increasingly required in areas like banking and health care and by new state data protection laws. As these requirements continue to increase, it will become more and more difficult for attorneys to justify avoidance of encryption. It has now reached the point where all attorneys should generally understand encryption, have it available for use when appropriate, and make informed decisions about when encryption should be used and when it is acceptable to avoid it.
36 Protect Decryption Key! Generally requires password/passphrase to access key. Use a strong password/phrase - 14 characters or more. Use a password manager for multiple encryption instances.
37 Passphrases Iluvmy2005BMW! IluvmXy2005B3MW! Stronger: Break dictionary words with random letters, numbers, or symbols.
38 Safeguards Backup Data Backup Recovery Key Enterprise Management
39 Laptops and Desktops Full Disk Encryption Limited Encryption Partition, Folder or File
40 Hardware Full Disk Encryption Automatically encrypts entire disk Decrypted access when an authorized user logs in Examples: Seagate Momentus (SED) Samsung SSD Hitachi Self-Encrypting Drive Seagate
41 Operating System Encryption Microsoft Windows - Bitlocker (business versions: Vista, 7, 8, 10) [Encrypted File System (EFS)] Device Encryption (8.1, 10 with specific tech specs) Apple OS X FileVault FileVault 2
42 Encryption Software Full Disk & Limited Examples: Check Point Dell Data Protection McAfee Endpoint Sophos Symantec (PGP and Endpoint) WinMagic TrueCrypt (open source)
43 Encrypted Portable Media CMS Secure Vault SanDisk Ironkey (Imation) Imation Bitlocker to Go Seagate Go-Flex
44 Smartphones and Tablets iphones and ipads Android BlackBerry 1. Follow manufacturer s instructions. 2. Use strong PIN or passcode. 3. Enable encryption. 4. Enable wipe after X failed log-on attempts. 5. Set auto timeout.
45 Proceed With Caution!
46 More Secure (Examples) Dell Data Protection Cloud Edition Sookasa Business Enterprise HP
47 Cloud Encryption Who has the key? Internet End User Cloud Service Provider
![Wireless Networks [Wired Equivalent Privacy (WEP)]](/docs-images/39/19972344/images/48-0.png "weak! Wi-Fi Protected Access (WPA) - cracked Wi-Fi")
48 Wireless Networks [Wired Equivalent Privacy (WEP)] weak! Wi-Fi Protected Access (WPA) - cracked Wi-Fi Protected Access, second generation (WPA2) Sniffer programs War driving Pineapple Evil twin Source: Wikipedia.org
49 Wireless Networks
50 Let s Be Careful Out There! Risky if open (no need for username and password) Be sure you have a secure connection (https: or VPN) Be sure you have a properly configured firewall Warnings from security professionals / US-CERT Sgt. Phillip Freemason Esterhouse Hill Street Blues
51 Virtual Private Network VPN Concentrator Internal Network Internet VPN Remote User
52 VPN Data Leaks IPv4 & IPv6 IPv6 traffic leaks DNS hijacking IPv6 routing tables Tunnel DNS requests
53 https: Secure Connection ( Web Server (SSL / TLS) Internal Network Internet Encrypted Tunnel Remote User
54 Encryption Public Private
55
56 Digitally Signed
57 Signed and Encrypted Public
58 Outlook 1 2
59 Outlook 3 4
60 Gateway to Gateway (TLS) Server 2 Server 1 Clear Clear 3 Encrypted
61 Secure Portal (Pull) Secure Portal 1 2 Notice of Message 3
62 Secure Attachment (Push) Internet Attachment Encrypted Attachment Clear
63 Secure (Examples) AppRiver DataMotion HP Secur (Voltage) Mimecast Office 365 Zixcorp
64 Encryption of Attachments Microsoft Office Adobe Acrobat WinZip Limited Protection!
65 Word Menu 1
66 Word 2 3 4
67 Word 5 6
68 Adobe Acrobat 1
69 Adobe Acrobat
70 Adobe Acrobat
71 WinZip New File Existing File
72 When Encryption is Bad SSL/TLS network attacks Cyber criminals Encrypted C&C communications IDS/IPS blind
73 Encryption is part of the solution. Use with other comprehensive security measures. BACKUP! Key recovery Enterprise management
74 Questions
Encryption Made Simple for Lawyers
Encryption Made Simple for Lawyers By David G. Ries, Esq. and John W. Simek Encryption is a topic that most attorneys don t want to touch with a 10-foot pole, but it is becoming a more and more important
DECRYPTING ENCRYPTION: GAINING COMPETENCE ON ENCRYPTION FOR YOUR PRACTICE
DECRYPTING ENCRYPTION: GAINING COMPETENCE ON ENCRYPTION FOR YOUR PRACTICE Presented by the American Bar Association Legal Technology Resource Center, Law Practice Division and Center for Professional Development
Encryption is Now Cheap and Simple and May Be Ethically Required
Encryption is Now Cheap and Simple and May Be Ethically Required May 6, 2016 District of Columbia Bar Presenters: Sharon D. Nelson, Esq. and John W. Simek President and Vice President, Sensei Enterprises,
Mobile Security & Cybersecurity Issues for Physicians & Patients Across the Care Continuum
Mobile Security & Cybersecurity Issues for Physicians & Patients Across the Care Continuum 8th Annual NJ/DV Conference: IT - The Politics of Healthcare October 29, 2015 Atlantic City, NJ William Buddy
Keeping Data Safe. Patients, Research Subjects, and You
Keeping Data Safe Patients, Research Subjects, and You How do hackers access a system Hackers Lurking in Vents and Soda Machines By NICOLE PERLROTH APRIL 7, 2014 New York Times SAN FRANCISCO They came
Safe-Guarding Client Information Basic Data Security Training for Lawyers
Safe-Guarding Client Information Basic Data Security Training for Lawyers Sponsored by the Law Practice Management Committee of The New York State Bar Association John R. McCarron Jr, Esq. Partner, Montes
Using End User Device Encryption to Protect Sensitive Information
Using End User Device Encryption to Protect Sensitive Information April 29, 2015 Mel Jackob, CISSP, GSEC, eplace Solutions, Inc. William Ewy, CIPP/US, eplace Solutions, Inc. William Ewy, BSEE, CIPP/US
Certified Secure Computer User
Certified Secure Computer User Exam Info Exam Name CSCU (112-12) Exam Credit Towards Certification Certified Secure Computer User (CSCU). Students need to pass the online EC-Council exam to receive the
Encrypting Personal Health Information on Mobile Devices
Ann Cavoukian, Ph.D. Information and Privacy Commissioner/Ontario Number 12 May 2007 Encrypting Personal Health Information on Mobile Devices Section 12 (1) of the Personal Health Information Protection
Security Awareness. ITS Security Training. Fall 2015
Security Awareness ITS Security Training Fall 2015 Why am I here? Isn t security an IT problem? Technology can address only a fraction of security risks. You are a primary target, or rather, your data
COMPUTER SECURITY PRINCIPLES AND PRACTICES BY COREY@MARK5MINISTRIES.ORG
COMPUTER SECURITY PRINCIPLES AND PRACTICES BY COREY@MARK5MINISTRIES.ORG INTRODUCTION My Background Some questions for you Why computer security? Principle of Incarnation What this presentation covers (and
Cyber Self Assessment
Cyber Self Assessment According to Protecting Personal Information A Guide for Business 1 a sound data security plan is built on five key principles: 1. Take stock. Know what personal information you have
Symantec Encryption Solutions for Email, Powered by PGP Technology
Symantec Encryption Solutions for Email, Powered by PGP Technology Data Sheet: Encryption The Problem with Email Are you worried that users are emailing sensitive information openly? According to Osterman
Locked Down: Cybersecurity for Lawyers
Locked Down: Cybersecurity for Lawyers May 15, 2015 PRESENTERS: Sharon D. Nelson, and John W. Simek President and Vice President Sensei Enterprises, Inc. D.C. Bar Rule 1.1 Competence Rule 1.6 Confidentiality
Security. TestOut Modules 12.6 12.10
Security TestOut Modules 12.6 12.10 Authentication Authentication is the process of submitting and checking credentials to validate or prove user identity. 1. Username 2. Credentials Password Smart card
Research Information Security Guideline
Research Information Security Guideline Introduction This document provides general information security guidelines when working with research data. The items in this guideline are divided into two different
= AUDIO. The Importance of Mobile Device Management in HIT. An Important Reminder. Mission of OFMQ 12/9/2015
The Importance of Mobile Device Management in HIT Mario Cruz OFMQ Chief Information Officer An Important Reminder For audio, you must use your phone: Step 1: Call (866) 906 0123. Step 2: Enter code 2071585#.
The Ethical Implications of NSA Surveillance for Lawyers. David G. Ries Clark Hill Thorp Reed
The Ethical Implications of NSA Surveillance for Lawyers David G. Ries Clark Hill Thorp Reed 2 3 The June 2013 Headlines: NSA collecting phone records of millions of Verizon customers daily The Guardian,
EndUser Protection. Peter Skondro. Sophos
EndUser Protection Peter Skondro Sophos Agenda Sophos EndUser Solutions Endpoint Usecases Sophos Mobile Solutions Mobile Usecases Endpoint Sophos EndUser Solutions EndUser Protection AV Firewall Application
Mobile Device Management and Security Glossary
Mobile Device Management and Security Glossary February, 2011 MOBILE OS ActiveSync Exchange ActiveSync (EAS) is a Microsoft technology that allows mobile users to access their Microsoft Exchange mailboxes
Deciphering the Safe Harbor on Breach Notification: The Data Encryption Story
Deciphering the Safe Harbor on Breach Notification: The Data Encryption Story Healthcare organizations planning to protect themselves from breach notification should implement data encryption in their
User Guide FOR TOSHIBA STORAGE PLACE
User Guide FOR TOSHIBA STORAGE PLACE (This page left blank for 2-sided "book" printing.) Table of Contents Overview... 5 System Requirements... 5 Storage Place Interfaces... 5 Getting Started... 6 Using
Wireless Networks. Welcome to Wireless
Wireless Networks 11/1/2010 Wireless Networks 1 Welcome to Wireless Radio waves No need to be physically plugged into the network Remote access Coverage Personal Area Network (PAN) Local Area Network (LAN)
ONE Mail Direct for Mobile Devices
ONE Mail Direct for Mobile Devices User Guide Version: 2.0 Document ID: 3292 Document Owner: ONE Mail Product Team Copyright Notice Copyright 2014, ehealth Ontario All rights reserved No part of this document
School of Nursing Research Seminar. Data Security in The Academic Health Center. Presented By Jon Harper AHC Information Systems
School of Nursing Research Seminar Data Security in The Academic Health Center Presented By Jon Harper AHC Information Systems 1 Overview of AHC-IS and Supported Services Provide desktop support to ~8500+
Policy for Staff and Post 16 Student BYOD (Bring Your Own Device)
Policy for Staff and Post 16 Student BYOD (Bring Your Own Device) Date approved: 7 th May 2015 Review Schedule: Annual Reviewed: Next review: 1 Context Aims of this Policy Definitions CONTENTS 1. OVERVIEW...
Enterprise Mobility as a Service
Service Description: Insert Title Enterprise Mobility as a Service Multi-Service User Management for Mobility 1. Executive Summary... 2 2. Enterprise Mobility as a Service Overview... 3 3. Pricing Structure...
How To Encrypt Data With Encryption
USING ENCRYPTION TO PROTECT SENSITIVE INFORMATION Commonwealth Office of Technology Security Month Seminars Alternate Title? Boy, am I surprised. The Entrust guy who has mentioned PKI during every Security
Certified Secure Computer User
Certified Secure Computer User Course Outline Module 01: Foundations of Security Essential Terminologies Computer Security Why Security? Potential Losses Due to Security Attacks Elements of Security The
End User Devices Security Guidance: Apple ios 8
GOV.UK Guidance End User Devices Security Guidance: Apple ios 8 Published Contents 1. Changes since previous guidance 2. Usage scenario 3. Summary of platform security 4. How the platform can best satisfy
Whitepaper Enhancing BitLocker Deployment and Management with SimplySecure. Addressing the Concerns of the IT Professional Rob Weber February 2015
Whitepaper Enhancing BitLocker Deployment and Management with SimplySecure Addressing the Concerns of the IT Professional Rob Weber February 2015 Page 2 Table of Contents What is BitLocker?... 3 What is
This session was presented by Jim Stickley of TraceSecurity on Wednesday, October 23 rd at the Cyber Security Summit.
The hidden risks of mobile applications This session was presented by Jim Stickley of TraceSecurity on Wednesday, October 23 rd at the Cyber Security Summit. To learn more about TraceSecurity visit www.tracesecurity.com
Guidelines on use of encryption to protect person identifiable and sensitive information
Guidelines on use of encryption to protect person identifiable and sensitive information 1. Introduction David Nicholson, NHS Chief Executive, has directed that there should be no transfers of unencrypted
1. Our staff would like to exchange files with outside parties (clients, attorneys) using a web service (such as Dropbox ). Is this safe?
1. Our staff would like to exchange files with outside parties (clients, attorneys) using a web service (such as Dropbox ). Is this safe? The key is to do your "due diligence. Make sure that you fully
Information Security It s Everyone s Responsibility
Information Security It s Everyone s Responsibility Developed By The University of Texas at Dallas (ISO) Purpose of Training As an employee, you are often the first line of defense protecting valuable
THE AMERICAN LAW INSTITUTE Continuing Legal Education Android Apps for Lawyers. December 13, 2012 Telephone Seminar/Audio Webcast
1 THE AMERICAN LAW INSTITUTE Continuing Legal Education Android Apps for Lawyers Cosponsored with the ABA Law Practice Management Section December 13, 2012 Telephone Seminar/Audio Webcast Android Apps
Vs Encryption Suites
Vs Encryption Suites Introduction Data at Rest The phrase "Data at Rest" refers to any type of data, stored in the form of electronic documents (spreadsheets, text documents, etc.) and located on laptops,
CHAPTER 1 Exploring Mobile Devices with IMail 1
Contents CHAPTER 1 Exploring Mobile Devices with IMail 1 CHAPTER 2 Windows Mobile... 2 Configuring Microsoft Exchange ActiveSync... 2 Setting up Mail Account... 8 CHAPTER 3 BlackBerry... 13 Configuring
Disk Encryption. Aaron Howard IT Security Office
Disk Encryption Aaron Howard IT Security Office Types of Disk Encryption? Folder Encryption Volume or Full Disk Encryption OS / Boot Volume Data Volume Managed or Unmanaged Key Backup and Data Assurance
FileCloud Security FAQ
is currently used by many large organizations including banks, health care organizations, educational institutions and government agencies. Thousands of organizations rely on File- Cloud for their file
Exchange 2010 ActiveSync: Connection
Westlands School Exchange 2010 ActiveSync: Connection Staff mobile phone email access Exchange 2010 ActiveSync provides Westlands School Staff with external access to their school email account from a
When enterprise mobility strategies are discussed, security is usually one of the first topics
Acronis 2002-2014 Introduction When enterprise mobility strategies are discussed, security is usually one of the first topics on the table. So it should come as no surprise that Acronis Access Advanced
Sophos Mobile Control User guide for Apple ios. Product version: 4
Sophos Mobile Control User guide for Apple ios Product version: 4 Document date: May 2014 Contents 1 About Sophos Mobile Control...3 2 About this guide...4 3 Login to the Self Service Portal...5 4 Set
Mobile Device Security and Encryption Standard and Guidelines
Mobile Device Security and Encryption Standard and Guidelines University Mobile Computing and Device best practices are currently defined as follows: 1) The use of any sensitive or private data on mobile
Security. Mobile Device FOR. by Rich Campagna, Subbu Iyer, and Ashwin Krishnan. John Wiley & Sons, Inc. Foreword by Mark Bauhaus.
Mobile Device Security FOR by Rich Campagna, Subbu Iyer, and Ashwin Krishnan Foreword by Mark Bauhaus Executive Vice President, Device and Network Systems Business Group, Juniper Networks WILEY John Wiley
MaaS360 Mobile Enterprise Gateway
MaaS360 Mobile Enterprise Gateway Administrator Guide Copyright 2014 Fiberlink, an IBM Company. All rights reserved. Information in this document is subject to change without notice. The software described
INFORMATION SECURITY POLICY
INFORMATION SECURITY POLICY Rev Date Purpose of Issue/ Description of Change Equality Impact Assessment Completed 1. June 2011 Initial Issue 2. 29 th March 2012 Second Version 3. 15 th April 2013 Third
Data Loss Prevention Whitepaper. When Mobile Device Management Isn t Enough. Your Device Here. Good supports hundreds of devices.
Data Loss Prevention Whitepaper When Mobile Device Management Isn t Enough Your Device Here. Good supports hundreds of devices. Contents Shifting Security Landscapes 3 Security Challenges to Enterprise
DSHS CA Security For Providers
DSHS CA Security For Providers Pablo F Matute DSHS Children's Information Security Officer 7/21/2015 1 Data Categories: An Overview All DSHS-owned data falls into one of four categories: Category 1 - Public
Keeping Agency Data Secure
Keeping Agency Data Secure By Kate Gluck & Paul Fuller, Strategic Insurance Software An Introduction from Jeff Yates, Executive Director, ACT About this article: The authors provide nine great tips for
Technology Services Group Procedures. IH Anywhere guide. 0 P a g e
VDI Pilot Technology Services Group Procedures IH Anywhere guide 0 P a g e Installation Disable Apple Security Table of Contents IH Anywhere for Apple OSX (MAC)... 2 1. Installation... 2 Disable Apple
Mobile Iron User Guide
2015 Mobile Iron User Guide Information technology Sparrow Health System 9/1/2015 Contents...0 Introduction...2 Changes to your Mobile Device...2 Self Service Portal...3 Registering your new device...4
Why you need. McAfee. Multi Acess PARTNER SERVICES
Why you need McAfee Multi Acess PARTNER SERVICES McAfee Multi Access is an online security app that protects all types of devices. All at once. The simple monthly subscription covers up to five devices
Pryvate App User Manual
Pryvate App User Manual 2.0 Powered by Criptyque Pryvate is the most secure voice, email & chat app for business people & individuals that require a high level of communications encryption to protect their
VPN: Virtual Private Network Setup Instructions
VPN: Virtual Private Network Setup Instructions Virtual Private Network (VPN): For e-journals and web-based databases, plus applications like EndNote's Online Search (formerly "Connect") and business systems.
iphone in Business How-To Setup Guide for Users
iphone in Business How-To Setup Guide for Users iphone is ready for business. It supports Microsoft Exchange ActiveSync, as well as standards-based services, delivering email, calendars, and contacts over
Identity Theft - Problems and Prevention Steps
Identity Theft and the Tax Practice Edward K. Zollars, CPA www.cperesources.com www.currentfederaltaxdevelopments.com New Mexico Tax Conference Today s Session Identity Theft in General Size of the Problem
Where are Organizations Today? The Cloud. The Current and Future State of IT When, Where, and How To Leverage the Cloud. The Cloud and the Players
The Current and Future State of IT When, Where, and How To Leverage the The and the Players Software as a Service Citrix VMWare Google SalesForce.com Created and Presented by: Rand Morimoto, Ph.D., MCITP,
Microsoft Outlook 2013 & 2010. Microsoft Outlook 2007. Microsoft Outlook 2003. Windows Live Mail 2012 & 2011. MAC Mail. Mozilla Thunderbird
How to configure your WorldPath email address in various mail applications Microsoft Outlook 2013 & 2010 Microsoft Outlook 2007 Microsoft Outlook 2003 Windows Live Mail 2012 & 2011 MAC Mail Mozilla Thunderbird
Wireless Network Best Practices for General User
Wireless Network Best Practices for General User I n Hong Kong, the number of Wi-Fi access points (hotspots) has reached 31,000 in 2015 1. Unfortunately, not all of them are well-protected. In fact, wireless
Encryption Policy Version 3.0
Version 3.0 This policy maybe updated at anytime (without notice) to ensure changes to the HSE s organisation structure and/or business practices are properly reflected in the policy. Please ensure you
Ensuring the security of your mobile business intelligence
IBM Software Business Analytics Cognos Business Intelligence Ensuring the security of your mobile business intelligence 2 Ensuring the security of your mobile business intelligence Contents 2 Executive
Security Guide. BlackBerry Enterprise Service 12. for ios, Android, and Windows Phone. Version 12.0
Security Guide BlackBerry Enterprise Service 12 for ios, Android, and Windows Phone Version 12.0 Published: 2015-02-06 SWD-20150206130210406 Contents About this guide... 6 What is BES12?... 7 Key features
The Deplorable State of Law Firm Information Security: Preventing Law Firm Data Breaches
The Deplorable State of Law Firm Information Security: Preventing Law Firm Data Breaches by Sharon D. Nelson, Esq. and John W. Simek 2011 Sensei Enterprises, Inc. Another day, another data breach. Data
Why Email Encryption is Essential to the Safety of Your Business
Why Email Encryption is Essential to the Safety of Your Business What We ll Cover Email is Like a Postcard o The Cost of Unsecured Email 5 Steps to Implement Email Encryption o Know Your Compliance Regulations
MaaS360 Mobile Enterprise Gateway
MaaS360 Mobile Enterprise Gateway Administrator Guide Copyright 2013 Fiberlink Communications Corporation. All rights reserved. Information in this document is subject to change without notice. The software
Two Factor Authentication (TFA; 2FA) is a security process in which two methods of authentication are used to verify who you are.
Two Factor Authentication Two Factor Authentication (TFA; 2FA) is a security process in which two methods of authentication are used to verify who you are. For example, one method currently utilized within
Department of Veterans Affairs Two-Factor Authentication MobilePASS Quick Start Guide November 18, 2015
Department of Veterans Affairs Two-Factor Authentication Quick Start Guide November 18, 2015 Introduction: This guide provides instructions for installation of the soft token on your non-piv enabled or
Cyber Security Best Practices
Cyber Security Best Practices 1. Set strong passwords; Do not share them with anyone: They should contain at least three of the five following character classes: o Lower case letters o Upper case letters
Two-Factor Authentication (2FA) Registration Instructions Symantec VIP Access
Two-Factor Authentication (2FA) Registration Instructions Symantec VIP Access To strengthen KBR information security and safeguard company data, Information Technology will implement two-factor authentication
How To Use Truecrypt For Free On A Pc Or Mac Or Mac (For A Laptop) For A Long Time (For Free) For Your Computer Or Ipad Or Ipa (For Mac) For Free (For Your Computer) For Long
Advanced Open-Source /Free Solutions for Home and Small Business Owners Robert Baldi, CISSP- ISSEP TOPICS Encryption Backups Audits Wireless Security Network Security Open Source Goodness ENCRYPTION Encryption
Setting up SJUMobile (Wireless Internet Access for personal devices)
Setting up SJUMobile (Wireless Internet Access for personal devices) St. John s University provides wireless internet access to personal devices for all current registered students. To setup a connection,
The Need for BYOD Mobile Device Security Awareness and Training
The Need for Awareness and Training Completed Research Paper Mark A. Harris University of South Carolina maharris@hrsm.sc.edu Karen Patten University of South Carolina pattenk@hrsm.sc.edu Elizabeth Regan
Mobile Devices: Know the RISKS. Take the STEPS. PROTECT AND SECURE Health Information.
Mobile Devices: Know the RISKS. Take the STEPS. PROTECT AND SECURE Health Information. Mobile Devices: Risks to Health Information Risks vary based on the mobile device and its use. Some risks include:
Q. I use a MAC How do I change my password so I can send and receive my email?
Password Change FAQ Q. I use a MAC How do I change my password so I can send and receive my email? A. First point a browser to http://www.redlands.edu/passwordmanager and change your password. Afterward,
Encryption: Ensuring Information Security
Encryption: Ensuring Information Security Colin Chisholm CISSP, GCIH Information Security Analyst Associate Information Security & Systems / Compliance cchisholm@northwestern.edu Agenda Encryption - Explanation
Systems Manager Cloud Based Mobile Device Management
Datasheet Systems Manager Systems Manager Cloud Based Mobile Device Management Overview Meraki Systems Manager provides cloud-based over-the-air centralized management, diagnostics, and monitoring of the
Configuring the wireless security of your Linksys Wireless-N router through the web-based setup page
Contents Configuring the wireless security of your Linksys Wireless-N router through the web-based setup page.. 2 Checking the Linksys router s wireless settings through the web-based setup page and adding
2014 All Rights Reserved ecfirst. An ecfirst Case Study: Encryption
2014 All Rights Reserved ecfirst An ecfirst Case Study: Encryption TABLE OF CONTENTS EXECUTIVE SUMMARY... 4 MCAFEE TOTAL PROTECTION... 6 PRODUCT OVERVIEW... 6 STRENGTHS... 6 FEATURES... 6 REFERENCES...
efolder White Paper: HIPAA Compliance
efolder White Paper: HIPAA Compliance October 2014 Copyright 2014, efolder, Inc. Abstract This paper outlines how companies can use certain efolder services to facilitate HIPAA and HITECH compliance within
The Hidden Dangers of Public WiFi
WHITEPAPER: OCTOBER 2014 The Hidden Dangers of Public WiFi 2 EXECUTIVE SUMMARY 4 MARKET DYNAMICS 4 The Promise of Public WiFi 5 The Problem with Public WiFi 6 MARKET BEHAVIOR 6 Most People Do Not Protect
Adams County, Colorado
Colorado Independent Consultants Network, LLC Adams County, Colorado Bring-Your-Own-Device Policy Prepared by: Colorado Independent Consultants Network, LLC Denver, Colorado March 20, 2014 Table of Contents
BYOD: End-to-End Security
BYOD: End-to-End Security Alen Lo MBA(CUHK), BSc(HKU), CISA, CCP, CISSP, CISM, CEH IRCA Certified ISMS Lead Auditor, itsmf ISO 20000 Auditor Principal Consultant i-totalsecurity Consulting Limited alenlo@n2nsecurity.com
Intermedia Cloud Softphone. User Guide
Intermedia Cloud Softphone User Guide FOR MORE INFO VISIT: CALL US EMAIL US intermedia.net +1.800.379.7729 sales@intermedia.net 1 Contents 1 Introduction... 3 1.1 Cloud Softphone Features... 3 2 Installation...
EnCase Forensic Product Overview
GUIDANCE SOFTWARE EnCase Forensic EnCase Forensic Product Overview The Standard in Digital Investigations GUIDANCE SOFTWARE EnCase Forensic EnCase Forensic Version 7 The mission of Guidance Software has
Mobile Devices: Know the RISKS. Take the STEPS. PROTECT AND SECURE Health Information.
Mobile Devices: Know the RISKS. Take the STEPS. PROTECT AND SECURE Health Information. Mobile Devices: Risks to to Health Mobile Information Devices: Risks to Health Information Risks vary based on the
Data Security in a Mobile, Cloud-Based World
Data Security in a Mobile, Cloud-Based World Jacob Buckley-Fortin CEO ehana What we ll cover Trends Risks Recommendations 1 Trends Mobile Has Taken Over Trend #1 2 3 450 million users worldwide Adopted
Troubleshooting BlackBerry Enterprise Service 10 version 10.1.1 726-08745-123. Instructor Manual
Troubleshooting BlackBerry Enterprise Service 10 version 10.1.1 726-08745-123 Instructor Manual Published: 2013-07-02 SWD-20130702091645092 Contents Advance preparation...7 Required materials...7 Topics
HP eprint Enterprise. Installation Checklist. Release 4.2
HP eprint Enterprise Installation Checklist Release 4.2 Copyright and License Copyright 2015 HP Development Company, L.P. Reproduction, adaptation, or translation without prior written permission is prohibited,
1. Introduction... 1. 2. Activation of Mobile Device Management... 3. 3. How Endpoint Protector MDM Works... 5
User Manual I Endpoint Protector Mobile Device Management User Manual Table of Contents 1. Introduction... 1 1.1. What is Endpoint Protector?... 2 2. Activation of Mobile Device Management... 3 2.1. Activation
9 Simple steps to secure your Wi-Fi Network.
9 Simple steps to secure your Wi-Fi Network. Step 1: Change the Default Password of Modem / Router After opening modem page click on management - access control password. Select username, confirm old password
Information Systems. Connecting Smartphones to NTU s Email System
Information Systems Connecting Smartphones to NTU s Email System Connecting Smartphones to NTU s Email System Contents Things to be aware of before you start 3 Connecting a Windows Mobile 6 (6.0-6.5) Phone
Mobile Security Attacks
AppSec IL 2014 Mobile Security Attacks A Glimpse From the Trenches Yair Amit CTO & Co-Founder Skycure @YairAmit Adi Sharabani CEO & Co-Founder Skycure @AdiSharabani About the Presenters Adi Sharabani Yair
INFORMATION SECURITY GUIDE. Employee Teleworking. Information Security Unit. Information Technology Services (ITS) July 2013
INFORMATION SECURITY GUIDE Employee Teleworking Information Security Unit Information Technology Services (ITS) July 2013 CONTENTS 1. Introduction... 2 2. Teleworking Risks... 3 3. Safeguards for College
Data Managers Interest Group. Research. April 17, 2012
Data Managers Interest Group Institute of Clinical and Translational Research April 17, 2012 Privacy & Security Contacts hipaa@jhmi.edu network.security@jhmi.edu IT Help Desk 410.735.4357 3 Or you can
Telework and Remote Access Security Standard
State of California California Information Security Office Telework and Remote Access Security Standard SIMM 5360-A (formerly SIMM 66A) September 2013 REVISION HISTORY REVISION DATE OF RELEASE OWNER SUMMARY
INFORMATION SECURITY FOR YOUR AGENCY
INFORMATION SECURITY FOR YOUR AGENCY Presenter: Chad Knutson Secure Banking Solutions, LLC CONTACT INFORMATION Dr. Kevin Streff Professor at Dakota State University Director - National Center for the Protection
Secure Email Frequently Asked Questions
Secure Email Frequently Asked Questions Frequently Asked Questions Contents General Secure Email Questions and Answers Forced TLS Questions and Answers SecureMail Questions and Answers Glossary Support
Secure Email User Guide
Secure Email User Guide Transport Layer Security (TLS) Pretty Good Privacy (PGP) PDF Messenger 1 Contents 1 Introduction... 3 2 Transport Layer Security (TLS).4 3 Pretty Good Privacy (PGP).5 4 PDF Messenger...
2 0 1 4 F G F O A A N N U A L C O N F E R E N C E
I T G OV E R NANCE 2 0 1 4 F G F O A A N N U A L C O N F E R E N C E RAJ PATEL Plante Moran 248.223.3428 raj.patel@plantemoran.com This presentation will discuss current threats faced by public institutions,