|
|
 |
The nightly news is filled with stories of major security breaches in which organizations have lost thousands of customer records. Public outrage over loss of identity information has led to calls for even more stringent legislation to be added to an already substantial body of regulation-the Gramm-Leach-Bliley Act, HIPAA, the Sarbanes-Oxley Act, and California SB 1386 (a model for pending national legislation)-impacting the management of enterprise data. These mandated requirements represent a real increase in fiscal and legal risk, and they are certain to seriously affect all moderate to large organizations.
Preventing Loss: Identification & Remediation
One out of every 500 email messages leaving a large enterprise contains confidential information, and nearly all high-cost security incidents occur because insiders have sent confidential data outside the company. The only practical solution is to identify all outgoing communication containing sensitive information and then route it to an encryption solution capable of safely delivering email to any destination.
PGP Corporation, the global customer standard for encryption and digital-signature solutions, has teamed with industry leaders that provide sophisticated content-filtering applications capable of identifying critical data before it leaves a company. Together, these highly integrated solutions provide for the identification and remediation of confidential communications and can form a major component in a corporate strategy to address the risks that attend these governmental regulations.

The CipherTrust/PGP Compliance Bundle is the only hardened gateway offering to integrate powerful email policy compliance and PGP® Universal encryption capabilities into an easy-to-deploy and manage solution. The solution combines the market-leading message-scanning and policy-enforcement technology within IronMail® with PGP Universal's world-class centrally managed encryption capabilities, enabling organizations to secure email traffic to and from employees, business partners, suppliers, and customers without altering employees' email experience. The bundle is standards-based and easily integrates into the existing email environment while providing customers a secure "last line of defense" to ensure sensitive and private information is protected and help businesses comply with government regulations.

Together, MailFrontier and PGP Corporation offer an email security solution that protects against spam, viruses, and fraud while also ensuring effortless compliance. PGP Universal is integrated with MailFrontier Gateway™, providing encryption with customized policies, content evaluation, LDAP integration, and compliance dictionary support. MailFrontier also provides its unique Disguised Text Identification, which recognizes misspelled or differently formatted text that bypasses standard compliance filters. MailFrontier's robust policy engine combined with proven PGP encryption helps meet regulatory compliance requirements quickly and easily.

PortAuthority Technologies™, the leader in Information Leak Prevention, develops security software that reliably and accurately controls the unauthorized communication of sensitive information in real time. PortAuthority solutions help customers prevent leaks of customer and financial information; reduce the cost of regulatory compliance with Gramm-Leach-Bliley, HIPAA, CA SB 1386/CC1798, PIPEDA, and Sarbanes-Oxley; enforce internal policies; and stop the loss of intellectual property. PortAuthority™ stops leaks of confidential information by monitoring outbound and internal communication channels and enforcing distribution policies effectively .

Proofpoint's messaging security software and appliances offer protection from both inbound and outbound message-borne threats. The Proofpoint Regulatory Compliance™ and Proofpoint Digital Asset Security™ modules mitigate risks associated specifically with outbound email, helping ensure compliance with privacy and data security regulations (such as HIPAA and Gramm-Leach-Bliley) while keeping confidential documents secure. Proofpoint provides powerful, policy-driven compliance and content security features, driven by an easy-to-use interface that gives both administrators and business users an easy way to define, monitor, and enforce outbound email policies. PGP Universal's secure-messaging and encryption features combined with Proofpoint's unique machine learning-based content analysis and policy management framework creates a highly effective, easy-to-deploy platform for policy-based encryption.

Vontu stops confidential and classified information from being sent via email and other Internet communications. Together, Vontu and PGP Corporation offer a secure-messaging solution that allows customers to define and enforce confidential information protection and encryption policies. For example, customer data and intellectual property sent over email can be automatically encrypted according to policy, with no user intervention. Customers benefit from reduced financial risk, protected brand reputation, and the ability to demonstrate compliance.
|
 |
 | "We sampled some email from our Exchange server, went through it page by page, and saw red flags everywhere. Inclusion of Social Security numbers was the most common problem, followed by various HIPAA and GLBA issues. This was the proof we needed to convince our executive council that we had a compliance issue." – Ken Juneau, AVP, Director of Distributed Systems, American National Insurance Company (ANICO) |  |
|