SMB encryption options and vendor vetting
0
Q:
SMB encryption options and vendor vetting
From a reader:

With the Nevada data protection regulation and upcoming Massachusetts data protection law, we're looking for a checklist of encryption issues we should raise as we begin to look at vendors.

Also:

What are some red flags to look for as we talk/negotiate with vendors?
What are reasonable service/support demands that we can make?

Any other help?
ASKED: Jul 10 2009  7:11 PM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
0
7610 pts.
0
A:
 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0
  • AddThis Social Bookmark Button
Generally speaking you need to find out where your sensitive information is and then determine the best fit solution(s) for encrypting it when it's at risk. Here are some thoughts I have on encryption and some questions to ask your security vendors. The important thing to keep in mind is that encryption does not automatically equal security...it's also the people, the processes, and the other compensating controls you have around it. Compliance doesn't equal security either. Here are some recent thoughts I had on why compliance as we know it and do it today is a joke.

I hope this helps!
Last Answered: Jul 13 2009  1:24 PM GMT by KevinBeaver   7610 pts.
0
0
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

SMB encryption options and vendor vetting   0 pts.  |   Jul 11 2009  1:30AM GMT

[...] Read the original post: SMB encryption options and vendor vetting [...]

 
0