What should you do if you can't realistically encrypt everything, like many people are interpreting

What should you do if you can't realistically encrypt everything, like many people are interpreting

Storage security information
Why and how your storage environment will be attacked

Five must-have storage security testing tools

Protect your data from hidden threats
Bottom line: Don't do it. You have to look at the security vulnerabilities in your own environment, determine what is at risk, decide just what you're trying to protect and follow the security/compliance laws and regulations pertaining to your own

    Requires Free Membership to View

    Login

    When you register for SearchDataBackup.com, you’ll also receive targeted emails from my team of award-winning editorial writers. Because your job never seems to get any easier, it’s our goal to keep you up-to-date on the latest backup tips, trends and technologies that will help you get the job done.

    Rich Castagna, Editorial Director

    By submitting your registration information to SearchDataBackup.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchDataBackup.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

industry. Then, make informed decisions based on your specific needs and situation. Don't encrypt just because some auditor tell you that it's a best practice. Don't encrypt because a compliance manager says that it's the only way to secure everything. We all know that's not true, especially in back-end storage, such as large SAN/NAS environments -- you can typically encrypt some key storage assets, but it's just not realistic to encrypt everything.

When I'm performing security assessments, I do see several situations where storage systems or devices are at risk; mainly with laptops and mobile storage devices. We've all heard stories about laptops being stolen where the hard drive wasn't encrypted. Then the information is compromised. Passwords (if they're used) can be reset or circumvented easily enough with readily available hacking tools. Ultimately, laptops are often one of the biggest security problems that an organization must face, along with PDAs, smart phones and other external drives. Encryption at the laptop or mobile device level can prevent a security breach even when the storage device is lost or stolen.

Listen to the Storage Security FAQ audiocast here.

Go to the beginning of the Storage Security FAQ Guide.


This was first published in March 2007

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top