Encryption Services

Transcription

1 Services ZixCorp provides easy-to-use encryption services for privacy and regulatory compliance. As the largest encryption services provider, ZixCorp protects tens of millions of members in our ZixDirectory, and approximately 100,000 new members are being added every week. ZixCorp provides transparent, seamless secure communications with your customers, partners and regulators.

2 The Importance of Easy, secure communication is a valuable asset. Sensitive information is circulating on a day-to-day basis to customers and patients, third-party organizations and business associates, strategic partners and regulators. One communication tool emerges above the rest when exchanging sensitive personal information encrypted . The Radicati Group estimated business users sent 41 messages and received 100 messages per day in Further demonstrating the importance of , Osterman Research found has become a popular file-transfer method, estimating percent of all messages contain attachments 2. With the convenience of as a communication and filetransfer method, it s easy for users to be unfamiliar with the risks; however, IT security and compliance professionals cannot afford to overlook the vulnerabilities associated with this essential business tool. Employee Behavior Risks Companies can implement policies and offer employee training to prevent employees from leaking sensitive information, but a Ponemon Institute study 3 found this method to be insufficient. Of respondents surveyed: 59 percent believe insecure by employees is one of the main sources of data leaks in their organizations 69 percent believe employees ignore policies about ing unencrypted sensitive or confidential documents through insecure channels 61 percent believe employees send unencrypted confidential information through insecure channels, such as personal Web-based 59 percent believe insecure by employees is one of the main sources of data leaks in their organizations. 69 percent believe employees ignore policies about ing unencrypted sensitive or confidential documents through insecure channels. 61 percent believe employees send unencrypted confidential information through insecure channels, such as personal Web-based . No 41% Yes 59% No 31% Yes 69% No 39% Yes 61% 1 Survey: Corporate , by The Radicati Group, September Educating Decision Makers about the Need for Encryption by Osterman Research, August The State of Encryption by Ponemon Institute, September

3 Mobility Concerns Business is no longer conducted behind a desk. Mobile phones have expanded the workplace and work hours, and more users spend time on than any other internet-enabled activity. According to a study 4 conducted by The Nielsen Company, users spend an average of 42 percent of their mobile time using . With increasing dependence on mobile devices for access to data whenever, wherever, mobile is a major threat. Of respondents in a Ponemon Institute study 3, 70 percent stated concern about the loss of information via on mobile devices. Government Regulations Securing sensitive information in isn t just a best practice it s often the law. HIPAA, HITECH, GLBA, SOX, state data security laws and guidance from FFIEC agencies make it clear that protecting sensitive information is no longer optional. Organizations in healthcare, financial services and government face a heavy burden, and as a result of expanding federal laws and state data security laws, many organizations beyond these three industries are beginning to feel the stress as well. Despite the challenges of government regulations, employee behavior and mobility, is a necessary tool that can be conveniently secured with next generation encryption. The Leader in Encryption Services ZixCorp has built a trusted reputation with the nation s most influential institutions through our easy-to-implement, -use and -maintain solutions. ZixCorp Encryption Services are based on Software-as-a-Service (SaaS) architecture, and ZixCorp distinguishes itself with convenient delivery methods that focus on both the sender and receiver experience. Our solutions integrate seamlessly with existing applications, and encryption keys are managed automatically. The most complicated and costly aspect of encryption is key management. To eliminate the customers need to build their own directory of encryption keys, ZixCorp has developed the world s largest, shared repository for automatic key exchange ZixDirectory. ZixDirectory includes tens of millions of members and increases at approximately 100,000 members per week. Its automated key management reduces the typical cost and complexity associated with encryption solutions and saves wasted hours spent setting up and exchanging keys. The ZixDirectory also safeguards against expired keys and certificates by providing centralized distribution among all members. 3 The State of Encryption by Ponemon Institute, September How Americans Spend Mobile Internet Time: A New Look by The Nielsen Company, May

4 Features FIPS solutions Hosted key management Customizable policy engines for regulatory compliance Centralized policy management Custom branding Flexible delivery options Benefits Instant secure connection to regulators and partners Low fixed total cost of ownership Guaranteed service levels Transparent, send-to-anyone capability Seamless integration with your existing network Fast and easy to deploy The Industry s Only Fully Transparent Encryption ZixCorp provides the industry s only fully transparent delivery by leveraging ZixDirectory with ZixGateway. When a ZixGateway customer sends encrypted to another ZixGateway customer, the message is sent transparently. With transparent delivery, users send and receive encrypted as they would conventional . Workflow is not interrupted, and no extra steps are required. On average, more than one third of our customers recipients receive their encrypted messages transparently, so that not even a password is needed. ZixGateway is a policy-based encryption service that automatically scans and encrypts outbound if sensitive information is included within the subject line, body or attachments. Through automatic encryption, employees are alleviated of security burdens, and companies can ensure customer protection and regulatory compliance. In addition, ZixGateway offers superior TLS that features simplified configuration; secure, bidirectional transparency through S/MIME delivery; increased control with policy management; increased visibility and compliance with report capabilities; and unique branding embedded at the end of the message that provides your recipients with added confidence. None of these features are available in competing TLS solutions. As an alternative to ZixGateway, companies can offer employees the option to encrypt through ZixMail. This desktop solution provides employees the choice to secure with the convenience of a single click. Whether is encrypted through ZixMail or ZixGateway, ZixCorp uses encryption standards, such as S/MIME, OpenPGP and TLS, to deliver secure to anyone, anywhere. Encrypt and Send to Anyone No matter the recipient s encryption capabilities, ZixCorp Encryption Services deliver encrypted messages to anyone using the manner that works best for the end-user through our Best Method of Delivery SM. For users without encryption, ZixCorp provides two different methods, including a secure portal, or pull, method and a direct delivery, or push, method.

5 Certifications of the ZixData Center ZixData Center SysTrust certified SOC 2 accredited (formally SAS 70 Type II) PCI Level 1 DSS V2.0 compliant Proven > % percent reliability Who Uses ZixCorp Encryption Services? Federal banking regulators, including FFIEC The Securities and Exchange Commission More than 1,800 financial institutions More than 30 Blue Cross Blue Shield organizations Nearly one in five, or 1,500, U.S. hospitals The state of the art ZixData Center enables ZixCorp to offer unrivaled encryption services with proven > % availability. The ZixData Center has the capacity, scalability and infrastructure to easily support encryption keys for every address in the world. The ZixData Center is SysTrust/SOC3 certified and SOC2 accredited in the areas of security, confidentiality, availability and integrity. The center is also PCI Level 1, DSS V2.0 certified. The facility is staffed 24 hours a day with operations personnel constantly monitoring the facilities, networks, systems and applications. The ZixData Center has satellite data centers in Austin, Texas and the United Kingdom. These facilities share service back-up and distributed service delivery roles with the main facility. ZixDirectory ZixCorp distinguishes its encryption services from other solutions by focusing on both the sender and recipient experience. This is accomplished through the world s largest and shared encryption community called the ZixDirectory. The ZixDirectory enables transparent communication between all ZixCorp customers and eliminates the complexity of managing encryption keys. The ZixDirectory currently includes tens of millions of members, and increases by 100,000 new members a week.

6 About Zix Corporation Zix Corporation (ZixCorp) provides the only encryption services designed with your most important relationships in mind. The most influential companies and government organizations use the proven ZixCorp Encryption Services, including WellPoint, FINRA the SEC and more than 1,500 hospitals and 1,800 financial institutions. ZixCorp Encryption Services are powered by ZixDirectory, the largest encryption community in the world. The tens of millions of ZixDirectory members can feel secure knowing their most important relationships are protected. ZixCorp Encryption Services ZixCorp Encryption Services have several optional components to meet the needs of any organization. Customers have the choice of a fully hosted solution or an appliance in their facility. ZixMail is the desktop encryption solution that provides individuals with a high level of security in their communications. It s an easy-to-use service that lets users encrypt and decrypt and attachments with a single click. ZixGateway is a policy-based encryption appliance that delivers simple, secure management of ZixCorp Encryption Services. Sitting on the edge of your network, ZixGateway inspects all outbound to ensure they adhere to your chosen policies. With full content scanning of the subject line, message body and attachments, ZixGateway can encrypt, route, block or brand outbound based on corporate policies. Just as ZixGateway automatically scans , it also automatically determines the most efficient way to securely deliver messages using the ZixCorp Best Method of Delivery. Zix Corporation 2711 N. Haskell Ave. Suite 2300, LB 36 Dallas, TX sales@zixcorp.com ZixPort is a pull delivery method for ZixGateway or ZixMail that offers users convenient and secure send and receive capabilities. When an encrypted is delivered via ZixPort, the user receives a notification that links and pulls them to the secure messaging portal. After signing in, the user views the message and any attachments over a Secure Sockets Layer (SSL) connection. ZixPort offers a unique mobile-friendly feature, ZixMobility, which allows recipients to access encrypted with one convenient click. ZixMobility skips the cumbersome steps, distorted layouts and frustration of other solutions to provide simple encryption to anyone, anywhere and on any mobile device. To learn more about ZixCorp Encryption Services, sign up for our next product webinar: