RSA Conference 2009

San Francisco, CA, April 21, 2009: Protegrity Corporation, the leading provider of Data Security Management solutions, is pleased to announce that its Defiance Security Software Suite has won the “2009 Global Product Excellence - Database Security” Customer Trust award from Info Security Products Guide, a popular publication covering security-related products and technologies.

“In an interconnected world threats have no boundaries and security has to remain a prime requirement,” says Rake Narang, editor-in-chief of Info Security Products Guide. “We are pleased to honor Defiance Security Software Suite as winner for 2009.”

“We are delighted to have won the Database Security Customer Trust award,” said Gordon Rapkin, Protegrity’s president and CEO. “This reaffirms Protegrity’s longstanding commitment to developing solutions that enable organizations to protect their data and their business, comply with industry regulations, and realize a measurable return on their data security investments.”

Attacks on critical digital data are sharply on the rise. In mid-March the chief enterprise risk officer for Visa, Ellen Richey, said that common sense dictates that a challenging economy will produce increased data theft activity — sales of stolen data remains an exceptionally vibrant business despite the downturn. Richey added that “security and law enforcement experts have confirmed that cyber attacks on consumers and businesses have intensified in recent months.”

Protegrity’s Defiance Security Suite comprehensively supports enterprises in meeting their challenging data security management and compliance requirements, protecting data from collection to disposal. Defiance Security Suite secures data across geographically dispersed, technically diverse systems against new and established threats emanating from outside and inside the enterprise, with minimal impact on existing applications, operations, and processes.

Three core components, all key parts of the integrated solution, comprise the Defiance Security Suite. Defiance Threat Management System is a web application firewall that detects and blocks unwanted activity. Defiance Enterprise Security Administrator delivers alerting, reporting, and auditing for security events organization wide. Defiance Data Protection System provides encryption and hashing for applications, databases, and files.

The architecture of the Defiance Data Protection System (DPS) was designed to comprehensively protect the dynamic data flow necessary in a modern enterprise. Data is secured through highly granular column-level encryption, masking ensures users see only the information they need to see and all activity is monitored and logged. File Protectors safeguard both structured and unstructured data wherever it may reside, files placed in secured folders and directories are automatically encrypted.
DPS takes full advantage of the processing power offered by the database server, optimizing performance and enabling real scalability — each database accesses the full processing power of its accompanying server, ensuring that accessibility and performance aren’t sacrificed for security reasons. Policies can be centrally managed across the enterprise from one console, separation of duties between security and database administration is enforced. And DPS offers the broadest platform support — for both databases and operating systems — in the industry.

Protegrity’s focus on centrally managing data security across technology platforms and recognition that protecting data ultimately protects a company’s brand and its ongoing business have been key to the company’s success, even in challenging economic times. Over the past year the Defiance Security Suite has gained significant usage among large-scale retail outlets and enterprises around the world in all industries, particularly financial, government, manufacturing and education.

ABOUT PROTEGRITY
Protegrity delivers centralized data security management solutions that protect sensitive information from acquisition to deletion across the enterprise. Protegrity’s customers maintain complete protection over their data and business by employing software and solutions specifically designed to encrypt data, safeguard web applications, and manage and report on security policy.

The company’s singular focus is on developing solutions that protect data. Protegrity employees are security technology specialists with deep expertise in encryption, key management, web application firewalls and security policy in distributed environments. Maximize security with minimal business impact with Protegrity’s Defiance® Suite, the high performance, transparent solution optimized for the dynamic enterprise.

To learn more, visit www.protegrity.com or call 203.326.7200.

Protegrity and Defiance are either registered trademarks or trademarks of Protegrity Corporation. All other trademarks are the property of their respective owners

Bookmark to:
         

Partnership Delivers Consolidated Compliance Mapping Framework to Manage Regulatory Madness

RSA CONFERENCE, SAN FRANCISCO, April 20, 2009 – McAfee, Inc. (NYSE: MFE) and Network Frontiers, the leader in IT regulatory compliance management, announced today that McAfee has licensed Network Frontiers’ Unified Compliance Framework (UCF) to further help McAfee’s clients navigate the increasingly complex compliance maze.

The partnership between McAfee and Network Frontiers will enable large enterprises and heavily regulated industries such as utilities, healthcare, education, government, and finance to easily identify common control requirements across multiple regulations. Many organizations are unaware that there is currently a 70 percent or more commonality in regulation requirements. By identifying these commonalities, organizations can consolidate the time and IT investment required for compliance and audit activities – potentially realizing significant cost savings. This also enables businesses to leverage existing McAfee security technology investment and reduce policy processes into a unified plan to achieve and maintain continuous compliance across the enterprise.

“For the first time customers will be able to leverage their existing security technologies for compliance,” said George Kurtz, senior vice president and general manager of McAfee’s Risk and Compliance Business Unit. “McAfee is working with Network Frontiers to build this unique mapping tool in order deliver a truly comprehensive worldwide compliance matrix that will span McAfee’s enterprise product portfolio.”

Network Frontiers’ United Compliance Framework (UCF) harmonizes IT controls from over 400 international regulatory requirements, standards and guidelines into a single set of straightforward requirements that clearly show the many points where global, state and industry regulations overlap. McAfee will utilize the UCF data framework to deliver a comprehensive worldwide compliance matrix of over 3,000 regulations applied across a complete range of security technologies and into a matrix tool specifically mapped to McAfee customers’ needs.

“By taking a full view of compliance and a broad look at security McAfee is clearly taking a proactive leadership position in the security technology space. And they’re making it easy for customers looking for both security and compliance solutions to satisfy both requirements,” says Craig Isaacs, CEO of Network Frontiers.

Some of the most familiar regulations and guidelines harmonized by the UCF include: Sarbanes-Oxley Act (SOX), International Variants, Basel II, Gramm-Leach-Bliley, Payment Card Industry Data Security Standard (PCI DSS), EU Data Privacy Act, NASD Manual, HIPAA, TIPEDA, FERC Security Program, Uniform Electronic Transactions Act (UETA), FIPS 191, GAO Financial Audit Manual, IRS Revenue Procedure and Federal Rules of Civil Procedure.

About the UCF
By focusing on commonalities across regulations, standards-based development, and simplified architectures, the UCF supports a strategic approach to IT compliance that reduces cost, limits liability, and leverages the value of compliance-related technologies and services across the enterprise. The UCF’s content and methodology is the direct result of Network Frontiers deep understanding of IT regulations and standards and decades of experience consulting for clients, publications, and vendors in the mission-critical IT arena.

The UCF was created by Dorian Cougias and his research partner, Marcelo Halpern of the international law firm Latham and Watkins, which oversees all legal aspects of the UCF. More information can be found at www.unifiedcompliance.com.

About Network Frontiers
Since 1992 Network Frontiers has developed ground-breaking tools to support IT best practices with a special focus on regulatory compliance, metrics, systems continuity and governance. Dorian Cougias, founder and Lead Analyst, is a frequent speaker at technology conferences and has authored numerous articles and books, including The Compliance Book and the award-winning Backup Book: Disaster Recovery from Desktop to Data Center. Network Frontiers was recently cited by information technology research and advisory company Gartner as one of their five leading Cool Vendors in Risk Management and Compliance for 2009.

About McAfee, Inc.
McAfee, Inc., headquartered in Santa Clara, California, is the world’s largest dedicated security technology company. McAfee is relentlessly committed to tackling the world’s toughest security challenges. The company delivers proactive and proven solutions and services that help secure systems and networks around the world, allowing users to safely connect to the Internet, browse and shop the web more securely. Backed by an award-winning research team, McAfee creates innovative products that empower home users, businesses, the public sector and service providers by enabling them to prove compliance with regulations, protect data, prevent disruptions, identify vulnerabilities, and continuously monitor and improve their security. http://www.mcafee.com

###
NOTE: McAfee and any additional McAfee marks herein are registered trademarks of McAfee, Inc. and/or its affiliates in the U.S. and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners. (C) 2009 McAfee, Inc. All rights reserved.

Bookmark to:
         

Once upon a time, not too long ago, your employees’ odd little quirks and outright idiocies were blessedly unlikely to become part of your brand’s story.

Whether it was something as benign as collecting chewed gum for the world’s largest ball of pre-masticated matter or a rather more troubling proclivity towards wearing tin foil hats on Tuesday in order to block thought waves emanating from our soon-to-be new planetary overlords, brief lapses in sanity/good taste/basic intelligence was a private matter for personnel to manage.

But now, Linda from accounting is documenting her unrequited romance with Sasquatch on her blog, while Bob from sales is posting pictures of his golf buddies dressed in drag during the last golf retreat on his Facebook page — and did the world really need to know your head of sales harbors a secret desire to be Ethel Merman? Over on Twitter Mary the receptionist is yakking about how she fears for her job because business is so bad, and Greg from customer service, whose real name is Punja and is based in India, is sharing funny stories about how stupid your customers really are.

So, yeah, it’s not a good day. But as bad as it is, you’re having a much better time than those poor folks from Domino’s. As you’ve no doubt (http://www.nytimes.com/2009/04/16/business/media/16dominos.html?_r=2&scp=1&sq=twitter%20dominoes&st=cse) read/heard two of their employees decided to do truly disgusting things with food, and then — not content with grossing each other out by stuffing cheese up noses and then recycling the resulting mess as a sandwich topping — posted the evidence of their stupidity on YouTube.

The Domino’s dorks in question are now facing felony charges for “delivering prohibited foods” but the damage is done — their video has been viewed more than a million times. References to it dominate the first page of Google search queries for the fast food chain, and Twitter is all atweet with conversations about the incident. You have to assume that all of this is going to have an impact on where people opt to go for lunch today, tomorrow and next week.

USA Today posted a glowing story about how well Domino’s handled the PR crisis. I think it was bungled.

Domino’s didn’t understand the power of social media: The video was posted on Monday. A Domino’s spokesperson found out about it late Monday, and according to the New York Times on Tuesday the company “decided not to respond aggressively, hoping the controversy would quiet down. “What we missed was the perpetual mushroom effect of viral sensations,” Domino’s spokesman, Tim McIntyre, told the Times.

Lesson Learned: Companies cannot afford to ignore social media. Corporate communications and PR partners need to pay close attention to what is being said — Domino’s only found out about the videos because a blogger told them, according to the Times’ story. Don’t wait for a random blogger to alert you about stories that can impact your brand and know that duck and cover is no longer an effective PR strategy.

Companies should have a crisis communications plan in place for any situation including negative stories that appear in social media. There is no time to figure out the technology, the venues, open the social media accounts and get up to speed on how to effectively address a problem while that problem is occurring. Stage mock crisis and figure out what you’d do if your employees posted harmful information online, or one of your customers goes feral. And while you’re at it, devise a company policy that explains the impact of social media and outlines what employees can and cannot do in the social media world when they are identifying themselves as members of your team. (Executives should be especially cautious about private use of social media, as their personal views can easily be associated with their employer). One really has to wonder what the two Domino’s employees expected the outcome of their little YouTube show to be — did they really assume no one but their very best buddies would see it?

Fact is Domino’s didn’t move quickly enough: The Company didn’t respond in social media outlets until two days after the video was posted on YouTube. “We realized that when many of the comments and questions in Twitter were, ‘What is Domino’s doing about it’ ” Mr. McIntyre told the Times. “Well, we were doing and saying things, but they weren’t being covered in Twitter.” News flash: no one is going to do your work for you, Mr McIntyre.

Domino’s finally created a Twitter account, @dpzinfo, on Wednesday and then posted a video of its chief executive explaining what had happened and shared his feelings of disgust on YouTube Wednesday evening (http://www.youtube.com/watch?v=7l6AJ49xNSQ). Too little, too late. And believe me, a CEO saying that there is “nothing more sacred than customer trust” and how he is sickened by the impact to Domino’s “great system” isn’t likely to go viral. The problem is that any appropriate measured response is simply not as interesting to the public as the berserk behavior of clueless losers.

Lesson Learned:
You may not be able to post a YouTube video showing the CEO administering a sound thrashing to miscreants or a similar over-the-top response that would go wildly viral, so the best defense is an authentic, fast response to the problem posted in all the social media outlets where it is being discussed. Domino’s should have been twittering and YouTubing and blogging and reaching out to influencers in the blogging community within minutes after the initial YouTube video went live.

Additionally, companies who aren’t yet involved in social media should jump in now, rather than waiting until a crisis occurs. If Domino’s had already built an online community at least through a blog or Facebook page, they’d have had an immediate way to get their message out fast and an established readership to address and ask for help in spreading the news. After that, they could have quickly followed up on Twitter and YouTube. But amazingly the company still isn’t even using their own web site to communicate with consumers — as of this writing, there is no mention of the incident, no letter from the CEO, no link to their response video on YouTube, nothing.

Apparently, the importance of communicating honestly with consumers still hasn’t hit home at Domino’s.

Bookmark to:
         

OAKLAND, CA, April 14, 2009 – Network Frontiers, the leader in IT regulatory compliance management, is pleased to announce that NEMEA, a provider of on-demand software solutions for compliance, remediation, risk and governance, has licensed the Unified Compliance Framework (UCF) for use with NEMEA’s innovative web-based compliance solution.

NEMEA eliminates the need for costly compliance investments in management resources, infrastructure and consultants by providing a comprehensive suite of accessible-anywhere tools that deliver up-to-date information on regulatory demands and greatly ease the process of identifying, organizing, documenting and retrieving compliance, vulnerability, and control information across the enterprise.

NEMEA’s focus on providing rigorously up-to-date regulatory information is supported by Network Frontiers’ United Compliance Framework (UCF) which harmonizes IT controls from over 400 international regulatory requirements, standards, and guidelines into a single hierarchal framework. As a result, organizations can easily identify common control requirements across multiple regulations, enabling them to better leverage the policies, processes, and technology and to establish a single, streamlined cost-effective plan to achieve continuous compliance across the enterprise.

Some of the most familiar regulations and guidelines covered by the UCF include: Sarbanes-Oxley Act (SOX), Basel II, Gramm-Leach-Bliley, Payment Card Industry Data Security Standard (PCI DSS), NASD Manual, HIPAA, FERC Security Program, Uniform Electronic Transactions Act (UETA), FIPS 191, GAO Financial Audit Manual, IRS Revenue Procedure and Federal Rules of Civil Procedure.

“The UCF Framework has proven to be the single best source of harmonized requirements ever compiled and lends enormous strength and depth to the creation of solid, scalable compliance solutions for any enterprise,” says Gary Swindon, COO.

“We are pleased to partner with NEMEA and help further their mission to make GRC significantly less burdensome for businesses. As the cost and complexity of compliance demands continue to rise, so does the need for automated tools that streamline and simplify the entire compliance process,” says Craig Isaacs, CEO of Network Frontiers.

###

About the UCF
The Unified Compliance Framework is the first independent initiative to exclusively support IT compliance management by focusing on commonalities across regulations, standards-based development, and simplified architectures. Unified Compliance’s strategic approach to IT compliance reduces cost, limits liability. The UCF’s strategic approach simplifies compliance and standards, reduces cost, limits liability, and leverages the value of compliance-related technologies through a harmonized set of controls against which all regulatory standards and best practices can be mapped.

The UCF was created by Dorian Cougias and his research partner, Marcelo Halpern of the international law firm Latham and Watkins, which oversees all legal aspects of the UCF. More information can be found at www.unifiedcompliance.com.

About NEMEA
NEMEA provides on-demand software solutions for compliance, remediation, risk & governance. The fully automated survey creation, management and reporting capabilities of NEMEA’s Compliance Center® help you determine your compliance posture across all departments, compress audit time, and align departmental efforts. In addition, NEMEA’s Remediation Center® provides the capability to continually check & manage compliance remediation efforts and the program works in tandem with other project management tools to actively address resource allocation and project reporting. These unique SaaS tools support the use of over 35 authority documents simultaneously, including SOX, HIPAA, GLBA, FISMA, FFIEC, ISO/IEC 27001/27002, NIST, PCI DSS, and COBIT. Solutions are fully hosted and supported, subscription based and browser accessible 24/7 – and won’t impact valuable IT resources.

For more information visit www.nemea.us

Bookmark to:
         

Defiance Threat Management System Selected In Best Web Application Security Solution Category

Stamford, CT, April 16, 2009 - Protegrity Corporation, a leading provider of Data Security Management Solutions, is pleased to announce that it has been selected as a finalist in the 2009 SC Awards program for outstanding achievement in information technology security.

Protegrity’s Defiance Threat Management System, an advanced web firewall (WAF) for the enterprise, was named in the Best Web Application Security Solution category of the Reader Trust Award competition, which honors best-in-class security products and services.

The Defiance Threat Management System was selected from more than 600 entries submitted in more than 30 technology categories. Winners will be chosen by SC Magazine’s Readers’ Trust Voting Panel, comprised of a cross section of SC Magazine readership that is comprised of large, medium and small enterprises from all major vertical markets.

The annual SC Awards have recognized security’s key contributors and outstanding products for more than a decade. As the industry’s preeminent awards program, individuals, brands and products shortlisted address not only the challenges prominent today, but also the emerging threat landscape of tomorrow.

“Protegrity’s Defiance Threat Management System is among today’s most respected security products as chosen by our panel. Security is a key challenge for IT organizations and businesses worldwide and our readers recognize that companies such as Protegrity are helping them meet their security challenges,” said SC Magazine Editor-in-Chief Illena Armstrong.

The Defiance Threat Management System (Defiance TMS) is the first comprehensive threat management system to support large-scale deploy¬ment of Web application and Web services security for the distributed enter¬prise. Defiance TMS offers the broadest platform support in the industry and incorporates scalable intrusion detection and prevention systems that work seamlessly to detect threats, generate alerts, and block both internal and external attacks against critical corporate data without impacting day-to-day operations.

Featuring both out-of-the-box protection and highly granular configuration options, Defiance TMS provides Protegrity’s enterprise customers with easy deployment capabilities and the ability to easily deploy a data protection solution that dovetails with their individual business needs, compliance requirements and security information risk profile.

Web applications are becoming malicious hackers’ favored attack vector, and there is no lack of easily exploitable vulnerabilities for them to exploit — a recent report by the Web Application Security Consortium found that nearly 97 percent of sites harbor at least one critical vulnerability. Less than five percent of 100 million Web applications in the U.S. are tested for security vulnerabilities, according to the Cenzic Application Security Trends Report for Q2 2008, and attacks on vulnerabilities in web applications now outpace all other attack vectors, according to numerous studies,

“We are honored that Defiance TMS has been selected as a finalist in the 2009 SC Awards program, reaffirming the value of Protegrity’s commitment to provide data security solutions that meet real world enterprise needs,” said Gordon Rapkin, President and CEO of Protegrity. “Defiance TMS is an exceptionally flexible solution that provides outstanding security to shield enterprises from the risks associated with loss of sensitive information.”

Winners of this year’s SC Awards will be announced at a gala dinner and award ceremony to be held at RSA 2009 in San Francisco on April 21, 2009.

ABOUT PROTEGRITY
Protegrity delivers centralized data security management solutions that protect sensitive information from acquisition to deletion across the enterprise. Protegrity’s customers maintain complete protection over their data and business by employing software and solutions specifically designed to encrypt data, safeguard web applications, and manage and report on security policy.

The company’s singular focus is on developing solutions that protect data. Protegrity employees are security technology specialists with deep expertise in encryption, key management, web application firewalls and security policy in distributed environments. Maximize security with minimal business impact with Protegrity’s Defiance® Suite, the high performance, transparent solution optimized for the dynamic enterprise.

To learn more, visit www.protegrity.com or call 203.326.7200.

Protegrity and Defiance are either registered trademarks or trademarks of Protegrity Corporation. All other trademarks are the property of their respective owners.

Bookmark to:
         

Here’s a byline article we wrote for Protegrity CTO Ulf Mattsson which appears in the April edition of Global Security Magazine. The topic is “Doing More With Less: A Risk-Based, Cost-Effective Approach to Holistic Security.”

Bookmark to:
         

WPP is folding Enfatico, the agency it built for all of Dell’s advertising business, into its Young & Rubicam Brands firm.

Wasn’t it only a month or two ago when PR rag PRWeek sang the praises of Enfatico w/a big feature. Oh well. Hopefully, their new editor will do a better job of signing off on stories.

http://online.wsj.com/article/SB123931133565806313.html#mod=djemTECH

Bookmark to:
         

In addition to lecturing before corporations and groups about social media, part of my job is to find the signals in the social media noise — what is being said about the companies I work with, what’s new and interesting in their industries, and what their competitors are doing. Obviously the days when you could run a daily Google search for client’s names, set up a few news alerts, and pride yourself on being ahead of the information curve are long gone. Below are some tools that help me quickly locate the data I need now for BlinnPR’s social media management and outreach projects.

Scout Labs is a service that lets you run persistent searches on the keywords you opt to track, you then use the Scout Labs dashboard to view collated information from social networking sites and services — 12 million English language blogs, blog comments, news sites, message boards, social networking sites, photo and video sites and Twitter. All of this data is, thankfully, arranged into useful chunks: Blogs, Sentiment (an overview of the positive, negative and neutral things people are saying about a brand), Graphs, Photos, Videos, and Twitter.

Scout Labs is not a free service, you pay based on the number of keywords you want to be able to search for — five search terms a month on the $99 basic plan, $249 a month for 25 terms on the standard plan. There are also professional plans specifically for public relations agencies that come with the ability to set up “workspaces” for each of the agencies clients, who can also access their workspace (One pro plan includes 125 concurrent searches, five workspaces, and unlimited users for $749 a month). It’s a little pricey, but Scout is more than a news aggregator, it also summarizes the most newsworthy stories into an easy to skim digest, sends email alerts when something interesting is happening. You can also use it to communicate with team members, sending out email alerts about specific items, creating discussion threads, and organizing items for further analysis. Scout Labs offers a 30-day free trial, so check it out.

BizShark is a promising new entry in the social media aggregation world, and adds a new dimension by pulling in data from 50+ business databases, providing business profiles, news, financials, web analytics, social footprint, marketing strategies, and other information along with Twitter, Digg, Reddit and Delicious stats. BizShark also runs persistent competitive analysis searches across online discussion threads, dredging up very useful information. Moderately priced premium accounts ($19 to $69 per month) lets you access more data, such as SEO stats and in-depth revenue analysis.

So far I’m liking still-in-beta Trendpedia, a blog search engine that presents its competitive buzz results in a visual format — enter a single keyword and you get a chart showing how much online interest has been showed in that keyword over the past three months — click on the chart to read what was said on any specific date. You can also compare terms “myclient+their competitor+their other competitor” and see graphs illustrating the level of interest for each, with a pie chart to sum it all up. Trendpedia is not going to give you anywhere near a complete picture of everything everyone is saying about a particular brand yet, but it’s an interesting premise which will hopefully grow to include (many) more news sources. Meanwhile I still check Technorati to get a more complete picture of what’s happening in the blog world.

At BlinnPR we also use PostRank, an RSS analytics service, to measure engagement with social media content — specifically blog RSS feeds. PostRank shows me how many times someone wrote a blog post in response to another post, how many times a post or other piece of content is bookmarked, how many times it was Dugg, etc. It’s also a great way to get an overview of what matters to a targeted audience, what are people talking about? What should I be reading/researching/thinking about right now? PostRank is slated to release new tools within the next couple of quarters that the company says will make it even easier to discover topic experts and measure their influence and run social media analytics, and is looking to replace the once-great but now sadly flawed FeedBurner.

Even if you opt not to add your own tweets on a regular basis to Twitter you can’t afford to ignore the steady flow of market intelligence that flows from this microblogging tool. The simplest way to find conversations of importance to a business is search.twitter.com. You can also find your key influencers with Twellow, which combs through and categorizes the people behind the conversations — it’s a good way to find journalists, analysts and other experts. If you’re using Twitter more than casually, it’s a good idea to set up a Google alert for your user name.

What tools are you using to put social media to work for your clients?

Bookmark to:
         

At BlinnPR we combine the focus of a boutique consultancy—working smarter, faster and more effectively—with the senior level staff experience of a large agency.

Our people have counseled clients through financial and product communications crises; developed public relations campaigns that cut through marketplace clutter helping clients increase sales, and position companies to be innovative leaders in their space. In short, our public relations practitioners have a single-minded focus on ensuring the long-term success for our clients.

Here are a few examples of what we’ve done for our clients. Want us to do the same for you? Call.

Bookmark to:
         

Protegrity Awarded Patent on Advanced Encryption Key Rotation Method; Innovation Eases Compliance Chores, Provides Enhanced Database Security

Stamford, CT, March 25, 2009 - Protegrity Corporation, the leading provider of Data Security Management solutions to the enterprise, today announced that it has been awarded a patent for a powerful new way to secure databases, enabling enterprises to comply with data protection regulations and security best practices with no impact on essential business processes.

United States Patent 7,490,248, developed by Protegrity’s Chief Technology Officer Ulf Mattsson, delivers a continuous process for rotating encryption keys in relational databases, ensuring that initial encryption, real time updates and on-demand key changes will occur according to an enterprise’s specifications and without having to take business mission-critical systems offline.

“With this patented technology, Protegrity customers gain another practical layer of control over enterprise-wide data security and a powerful new way to secure their databases,” said Mattsson.

Key management is the foundation of any solid encryption implementation. Unless an organization establishes a systematic approach to generate, rotate and store its keys, its encryption activities will be largely futile. Unfortunately, while data encryption itself can be reasonably easy to achieve, efficient management of encryption keys across their lifecycle continues to be problem for many enterprises. A poorly implemented rotation process can create new data security vulnerabilities and may make critical data inaccessible even to authorized users.

Protegrity’s patented solution enables the process to be fully automated by way of metadata associated with each key’s ciphertext and supports both re-encryption of all historical data with the new key or the preference to leave historical data encrypted with previous keys untouched.

Encrypted items are assigned key life values which define the time period in which a key is valid. When the value expires the key is rotated and all associated data is either automatically re-encrypted — or any new data is automatically encrypted going forward — using the new key value.

Annual rotation of encryption keys is required by data security regulations such as PCI DSS while security best practices indicate that rotation should be performed far more frequently. (The PCI Security Standards Council has indicated more frequent rotations will be required in a soon-to-be released revision of the standard).

“Protegrity provides data security solutions for real world corporate needs. This new patent once again demonstrates our commitment to innovative technologies that reduce the cost and complexity of meeting data security challenges,” said Gordon Rapkin, Protegrity CEO.

###
ABOUT PROTEGRITY
Protegrity delivers centralized data security management solutions that protect sensitive information from acquisition to deletion across the enterprise. Protegrity’s customers maintain complete protection over their data and business by employing software and solutions specifically designed to encrypt data, safeguard web applications, and manage and report on security policy.

The company’s singular focus is on developing solutions that protect data. Protegrity employees are security technology specialists with deep expertise in encryption, key management, web application firewalls and security policy in distributed environments. Maximize security with minimal business impact with Protegrity’s Defiance® Suite, the high performance, transparent solution optimized for the dynamic enterprise.

To learn more, visit www.protegrity.com or call 203.326.7200.

Protegrity and Defiance are either registered trademarks or trademarks of Protegrity Corporation. All other trademarks are the property of their respective owners.

Bookmark to: