Category: Uncategorized

Encryption is a staple security control for most organizations. In a recent Ponemon study, enterprise use of encryption hit an all-time high this year with 45 percent of organizations now having a comprehensive encryption policy in place. Conversely, just 13 percent of organizations have no encryption capabilities. What is the biggest challenge organizations face in implementing their encryption policy? Simply having visibility into their data and knowing which needs to be protected.

WHAT IS ENCRYPTION?

According to Techopedia, Encryption is the process of algorithmically transforming information to make it unreadable for unauthorized users. The encoded data may only be decrypted or made readable with a key and while it can be used to protect data at rest, it’s most often used during the transfer of information. In 2018, encrypted traffic reached 72 percent of all network traffic – a 20 percent increase over the year prior.

Encryption means data is only readable by senders and receivers, not third parties who may be trying to get their hands on it. In the age of big data, where organizations collect and share information at unprecedented rates, encryption is a critically important tool.

Most CSOs today will tell you, the concept of Zero Trust is an important cornerstone of their data security strategies. In the last few years, the idea has gained popularity – for good reason. With the number of data records being stolen each year now numbering in the billions, it’s time to re-evaluate our approach. There are important benefits to Zero Trust – starting with the baseline assumption that flips conventional wisdom on its head and demands continuous authentication before access to data is ever granted, with each and every step.

Historically, we’ve put networks, devices, data, apps and users in a ‘trust’ relationship. For example: this is Sarah’s machine. It runs these apps and she and the machine has access to this data. In this environment, these relationships are trusted, with little verification after it’s first granted. That automatic trust is often where cyber criminals find their way to their prize

So rather than assume trust, consider it a vulnerability.

TRUST IS A VULNERABILITY

With a mass exodus from corporate data centers to cloud-based everything, network perimeters are all but extinct. Countless mobile devices, reliance on a distributed workforce and other remote work trends have widened the threat landscape and pushed traditional security approaches to their breaking point.

The idea of not trusting all of those exploited apps, missing devices and unsuspecting users makes a lot of sense. Continuous verification helps keep the bad guys out certainly, and it brings 3 additional benefits to the organizations who employ it:

.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Mauris non laoreet dui. Morbi lacus massa, euismod ut turpis molestie, tristique sodales est. Integer sit amet mi id sapien tempor molestie in nec massa. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Mauris non laoreet dui. Morbi lacus massa, euismod ut turpis molestie, tristique sodales est. Integer sit amet mi id sapien tempor molestie in nec massa. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Mauris non laoreet dui. Morbi lacus massa, euismod ut turpis molestie, tristique sodales est. Integer sit amet mi id sapien tempor molestie in nec massa.