State Security Breach Disclosure Laws

Forty-six US states, the District of Columbia, Puerto Rico and the Virgin Islands have enacted legislation requiring notification of security breaches involving personal information.

States with no security breach law: Alabama, Kentucky, New Mexico, and South Dakota.

Limiting Access to Sensitive Data

The Vormetric Data Security Manager (DSM) from Thales e-Security can enforce strong separation of duties by requiring the assignment of key and policy management to more than one data security administrator. In this manner, no one person has complete control over security activities, encryption keys, or administration. In addition, the DSM supports two-factor authentication for administrative access.

Encrypting Sensitive Data

• Vormetric Transparent Encryption protects the environment at the OS and file system level with encryption, access controls and security intelligence information required for compliance and protection for malicious insiders and advanced malware such as advanced persistent threats (APTs).
• Vormetric Application Encryption enables organizations to easily build encryption capabilities into internal applications at the field and column level.

Monitoring and Reporting User Access Patterns to Identify Potential Data Breaches

The Vormetric Data Security Platform produces detailed security event logs that are easy to integrate with SIEM systems to produce compliance and security reports. These security information logs produce an auditable trail of permitted and denied access attempts from users and processes, delivering unprecedented insight into file access activities. These security information logs can report unusual or improper data access and accelerate the detection of insider threats, hackers and the presence of advanced persistent threats (APT) that are inside the perimeter security.

Quick to Install

Thales e-Security can work with you to install its Vormetric Data Security solutions in weeks rather than months. Thales e-Security solutions work with most major operating systems, including Linux, UNIX and Windows servers in physical, virtual, cloud and big data Cardholder Data Environments (CDE).

Easy to Use

Vormetric Data Security makes it simple to solve security and compliance concerns by simultaneously protecting data in databases, files and Big Data nodes across public, private, hybrid clouds and traditional infrastructures. Central management of the entire data security platform makes it easy to extend data security protection and satisfy compliance requirements across the entire enterprise, growing as required, without adding new hardware or increasing operational burdens.

Won’t Hurt System Performance

Customers typically report no perceptible impact to end-user experience when using Thales e-Security solutions. Vormetric Transparent Encryption performs encryption and decryption operations at the optimal location of the files system or volume manager taking advantage of hardware cryptographic acceleration, such as Intel® Advanced Encryption Standard-New Instructions (Intel® AES-NI) and SPARC Niagara Crypto, to speed the encryption and decryption of data.