Data Security Solutions for Business Services

To keep current clients and win new ones, business service providers need an enterprise-wide security platform that not only addresses today’s security challenges and demands but is flexible enough to meet tomorrow’s. Under constant pressure from both current and prospective customers to enhance their data security, business service providers are seeing RFPs and RFIs that include more and more data security questions that are more and more challenging to answer. In addition, clients and prospects are calling for real accountability.

These providers have both contractual obligations and general compliance needs to protect customer data while maintaining service levels. The contractual obligation for transparent encryption is today a cost of entry. And, depending on the customer, business service providers may need to meet PCI-DSS, HIPAA/HITECH, FedRAMP, NIST 800-53, FIPS 200, FISMA, GLBA, SOX, Data Privacy, Data Residency, and other security standards.

Business services organizations require enterprise-level data security that provides multiple levels of security while making the data itself easy for customers to access.

The Vormetric Data Security Platform is an extensible infrastructure that delivers centralized key and policy management for a suite of data security solutions that secure your organization’s sensitive and regulated data wherever it resides. The result is low total cost of ownership, as well as simple, efficient deployment and operation.

Vormetric Transparent Encryption provides file and volume level data-at-rest encryption, secure key management and access controls required by regulation and compliance regimes.

Vormetric Data Security Intelligence provides another level of protection from malicious insiders, privileged users, APTs and other attacks that compromise data by delivering the access pattern information that can identify an incident in progress.

Vormetric Application Encryption enables enterprises to easily build encryption capabilities into internal applications at the field and column level.

Vormetric Key Management enables centralized management of encryption keys for other environments and devices including KMIP compatible hardware, Oracle and SQL Server TDE master keys and digital certificates.

Vormetric Tokenization with Dynamic Masking lets administrators establish policies to return an entire field tokenized or dynamically mask parts of a field. With the solution’s format-preserving tokenization capabilities, administrators can restrict access to sensitive assets, yet at the same time, format the protected data in a way that enables many users to do their jobs.

Vormetric security solutions are designed to help you comply with:

• Payment Card Industry Data Security Standard (PCI DSS)
• HIPAA/HITECH
• State Data Breach Notification Laws
• National Data Protection and Privacy Laws
• Sarbanes-Oxley, GLBA, Basel III
• Data Residency/Data Sovereignty
• Major standards and regulations such as FedRAMP, NIST 800-53, FIPS (up to level 3) and FISMA
• GDPR
• Common Criteria
• South Korea’s PIPA
• Others that will arise

Thales eSecurity can work with you to install Vormetric Data Security solutions in weeks rather than months. Thales eSecurity solutions work with most major operating systems, including Linux, UNIX and Windows servers in physical, virtual, cloud and big data Cardholder Data Environments (CDE).

Vormetric Data Security makes it simple to address security and compliance concerns by simultaneously defending data in databases, files and Big Data nodes across public, private, hybrid clouds and traditional infrastructures. Central management of the entire data security platform makes it easy to extend data security protection and satisfy compliance requirements across the entire enterprise, growing as required, without adding new hardware or increasing operational burdens.

Customers typically report no perceptible impact on end-user experience when using Thales eSecurity solutions. Vormetric Transparent Encryption performs encryption and decryption operations at the optimal location of the files system or volume manager taking advantage of hardware cryptographic acceleration, such as Intel® Advanced Encryption Standard-New Instructions (Intel® AES-NI) and SPARC Niagara Crypto, to speed the encryption and decryption of data.