Home > IT Answers > Security > SMB encryption options and vendor vetting
SearchMidmarketSecurityATE
150 pts.
 SMB encryption options and vendor vetting
Encryption, Encryption key management, Midmarket security
From a reader: With the Nevada data protection regulation and upcoming Massachusetts data protection law, we're looking for a checklist of encryption issues we should raise as we begin to look at vendors. Also: What are some red flags to look for as we talk/negotiate with vendors? What are reasonable service/support demands that we can make? Any other help?

Software/Hardware used:
ASKED: July 10, 2009  7:11 PM
UPDATED: July 13, 2009  1:24 PM
RELATED QUESTIONS
Answer Wiki:
Generally speaking you need to find out where your sensitive information is and then determine the best fit solution(s) for encrypting it when it's at risk. Here are some <a href="http://securityonwheels.blogspot.com/search/label/encryption">thoughts I have on encryption</a> and some <a href="http://searchwindowsserver.techtarget.com/tip/0,289483,sid68_gci1237913_mem1,00.html">questions to ask your security vendors</a>. The important thing to keep in mind is that encryption does not automatically equal security...it's also the people, the processes, and the other compensating controls you have around it. Compliance doesn't equal security either. Here are some recent thoughts I had on <a href="http://searchcompliance.techtarget.com/tip/0,289483,sid195_gci1360925,00.html">why compliance as we know it and do it today is a joke</a>. I hope this helps!
Last Wiki Answer Submitted:  July 13, 2009  1:24 pm  by  KevinBeaver   10,860 pts.
All Answer Wiki Contributors:  KevinBeaver   10,860 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _