Striking the Right Balance for

Transcription

1 Striking the Right Balance for Laptop Data Protection ti Matthew Seeley EVault Systems Engineer 2012 ISACA Webinar Program ISACA. All rights reserved.

2 Welcome Type in questions using the Ask A Question button All audio is streamed over your computer Having technical issues? Click the? button Download the slide deck from the Event Home Page After viewing the webinar, ISACA Members may earn 1 CPE credit. To earn 1 CPE, click the CPE Quiz link on the Event Home Page. Once you pass the quiz, you will receive a printable CPE Certificate. t Question or suggestion? them to elearning@isaca.org 2012 ISACA Webinar Program ISACA. All rights reserved. 2

3 Agenda Striking the Industry Key Drivers Right Balance Business Challenges for Laptop Data Protection Best Practices Endpoint Protection 2012 ISACA Webinar Program ISACA. All rights reserved. 3

4 Key Drivers for Endpoint Protection PCs hold valuable corporate data. What happens to that data when a laptop is lost or stolen? Mobile Data: IDC estimates that at least 60% of important company data is stored on laptops and desktops Valuable Data: The estimated average value of a lost laptop is $49,246 Theft/Loss: Each week >12,000 laptops are lost in US airports alone; worldwide numbers are unknown Incidents: The FBI s Computer Crime Survey estimated cost of computer security incidents = $67.2 billion annually 2012 ISACA Webinar Program ISACA. All rights reserved. 4

5 Business Challenges More mobile workers. More distributed operations. Increasing threats to sensitive corporate data Meeting IT compliance mandates Data leakage 2012 ISACA Webinar Program ISACA. All rights reserved. 5

6 IT Challenges IT administrators within the mid market are asking: How do we ensure laptop data is being backed up consistently and securely? When a laptop is lost or stolen, who has access to our valuable data? What is our regulatory and financial exposure? How can we implement a PC backup solution without overburdening IT? 2012 ISACA Webinar Program ISACA. All rights reserved. 6

7 Best Practices 2012 ISACA Webinar Program ISACA. All rights reserved.

8 Keep Data Locked Down Encrypt information on the local drive Traditional method: Cons: Dual authentication followed by complete decryption Performance End user friction Difficult deployment Advanced method: File/folder encryption Encrypts data as it is stored Decrypts file as it is opened Granular policy-based control & enforcement 2012 ISACA Webinar Program ISACA. All rights reserved. 8

9 Lock Down Endpoint Data Keep data safe: Disk encryption and port access control shuts down data leakage Encryption over the wire and at rest Wipe it clean: Remote data deletion permanently shreds sensitive information if a laptop p has been lost or stolen (on command or by policy) Track it down: TCP/IP device tracing monitors laptop communication with the protection ti server 2012 ISACA Webinar Program ISACA. All rights reserved. 9

10 Laptop Security Best Practices File- and folder-based encryption Data protected when laptop is on or off Decrypts upon file opening No user password to remember Device control Define read/write permissions Encryption on ports used to transfer data SSL for backup Encryption during backup and recovery Generate random keys Destroy key on stolen/lost laptop 2012 ISACA Webinar Program ISACA. All rights reserved. 10

11 Laptop Security Best Practices (cont.) Encryption and data de-duplication Encryption and data de-duplication work together De-duplication on encrypted data using secure key escrow system Easily managed solution Easily deployed end-to-end solution Integrate with existing infrastructure Minimize need for passwords, etc ISACA Webinar Program ISACA. All rights reserved. 11

12 Encourage User Adoption Conduct a pain-point p audit with mobile users Document laptop backup and security policies Eliminate constraints Enable end-user independence 2012 ISACA Webinar Program ISACA. All rights reserved. 12

13 Keep IT Costs in Check Centralize management Integration with existing infrastructure Support for Windows and Mac OS Granular policy-based management Self-service user recovery Reduce network congestion Global deduplication Leverage the cloud Scalability and cost effective Security and redundancy d Encryption key management for end-users 2012 ISACA Webinar Program ISACA. All rights reserved. 13

14 Endpoint Protection 2012 ISACA Webinar Program ISACA. All rights reserved.

15 Endpoint Protection Control data across mobile workforces. Cloud-based protection 2012 ISACA Webinar Program ISACA. All rights reserved. 15

16 How Endpoint Protection Works 2012 ISACA Webinar Program ISACA. All rights reserved. 16

17 Data Transfer Process: WAN-Optimized Performance Efficient process. Substantially reduced backup window. Agents on Protected Systems Destination Vault LAN/WAN Changed files Front-end deduplication Compression Backend (Delta Pro) Encryption deduplication Front-end deduplication reduces storage footprint up to 99% Compression and Encryption Front-end encryption using NIST 256-bit Advanced d Encryption Standard d Over-the-wire encryption using SSL authentication At-rest encryption in SAS 70 Type II-certified datacenters Back-end deduplication further reduces storage footprint Bandwidth throttling 2012 ISACA Webinar Program ISACA. All rights reserved. 17

18 Questions? 2012 ISACA Webinar Program ISACA. All rights reserved.

19 Take the Next Step To learn more about EVault cloud-connected backup and recovery services and to get a 30-day free trial of EVault Endpoint Protection, call us at DATA (3282), us at concierge@evault.com, com or visit us at Thanks for joining i us today! 2012 ISACA Webinar Program ISACA. All rights reserved. 19