Design an encryption Strategy
Richman Investments is investment and consulting firm. Richman wants to expand its business operation both in the U.S. and in foreign countries. Richman intends to eventually have 10,000 employees in 20 countries.
The Richman corporate headquarters is located in Phoenix, Arizona. Currently there are eight branch offices in:
* Atlanta, Georgia
* Chicago, Illinois
* Cincinnati, Ohio
* Denver, Colorado
* Los Angeles, California
* Montreal, Canada
* New York City, New York
* Washington, D.C
The North American offices have a total of 5,000 employees who use desktop, laptops, and wireless devices. All offices deal with several sensitive applications. Management from each office shares application information hosted at the corporate office.
Database research and industry, and there has also been increasing interest in the problem of building accurate data mining models over aggregate data, while protecting privacy at the level of individual records. Instead of building walls around servers or hard drives, a protective layer of encryption is provided around specific sensitive data-items or objects. This prevents outside attacks as well as infiltration from within the server itself.
This also allows the security administrator to define which data stored in databases are sensitive and thereby focusing the protection only on the sensitive data, which in turn minimizes the delays or burdens on the system that may occur from other bulk encryption methods. Encryption can provide strong security for data at rest, but developing a database encryption strategy must take many factors into consideration.
Design an enterprise encryption strategy –a public key infrastructure (PKI) that supports internal employees, external business partners, and clients. Include the design and reasoning for using the select encryption strategy.
The strategy for encryption in a Public key Infrastructure (PKI) to support employee’s internal security requires:
* Privacy- privacy keeping information readable only by authorized people. It keeps that data away from those who are unauthorized.
* Integrity-integrity ensures that no one has changed or deleted data.
* Authorization-approving someone to do a specific task or access certain data.
* Time-stamping- a trusted device can issue timestamps that attackers cannot forge, this provides an exact time when a producer creates or sends information
* Access Control - access control involves restricting information to the right people. This involves encrypting privileged resources or data so that only authorized people can decrypt them and enforce access to them
* Revocation- Retract certification or authorization
The strategy for encryption in a Public key Infrastructure (PKI) to support business partners and clients’ external security requires:
* Message authentication- Message authentication confirms the identity of the person who started a correspondence.
* Signature- A digital signature binds a message or data to a specific entity.
* Receipt and confirmation – Receipt verifies that an entity acknowledges has arrived. Confirmation acknowledges that the provider has provided a service.
* Nonrepudiation – agreed to as part of a business relationship, the person who sends a message cannot later deny it.
* Time-stamping- a trusted device can issue timestamps that attackers cannot forge, this provides an exact time when a producer creates or sends information.
* Ownership- this associates a person with information to claim legal right.
* Certification- A trusted entity can certify a message or data by adding a cryptographic checksum and digital signature.
* Access Control- access control involves restricting information to the right people. This involves encrypting privileged resources or data so that only authorized people can decrypt them and enforce access to them
* Entity authentication-Corroborate the identity of an entity (that is, a person, a computer terminal, credit card, etc.)If a business relationship required that this key remain secret, possession is proof of valid identity.
Encryption is now viewed as a strategic issue with business leaders gaining greater influence over their organization’s encryption strategy. The study shows that the CIO, CTO or IT leader still tends to be the most important figure in deciding encryption strategy (39% of respondents), but non-IT business managers have an increasing role in determining that strategy (more than doubling since 2005 to 21% of respondents), demonstrating that encryption is no longer seen as just an IT issue but one that affects an entire organization.
The main drivers for deploying encryption solutions are to protect brand reputation (45%) and lessen the impact of data breaches (40%). Compliance is also a major driver for using encryption with 39% of respondents saying it is to comply with privacy or data security regulations and requirements. Compliance is also driving increased budgets with the highest IT security spend dedicated to data protection in countries that rank compliance as the most important driver for encryption. Compliance is in fact the number one driver for using encryption in the US, UK and France.
The strategy for encryption in a Public key Infrastructure (PKI) to support business partners and clients’ external Global security requires: (Montreal, Canada) and other countries.
* Privacy- privacy keeping information readable only by authorized people. It keeps that data away from those who are unauthorized.
* Integrity-integrity ensures that no one has changed or deleted data.
* Authorization-approving someone to do a specific task or access certain data.
* Access Control- access control involves restricting information to the right people. This involves encrypting privileged resources or data so that only authorized people can decrypt them and enforce access to them
* Confirmation- Acknowledge that the provider has provided services.
* Validation- Provide timely authorization to use or manipulate information or resources.
* Certification- A trusted entity can certify a message or data by adding a cryptographic checksum and digital signature.
* Ownership- cryptographic hash created by an owner and added to the data and then submitted to a trusted third party for corroboration. This associates a person with information to claim legal right.
* Nonrepudiation – agreed to as part of a business relationship, the person who sends a message cannot later deny it.
* Message authentication- Message authentication confirms the identity of the person who started a correspondence.
Works Citedsales@thalesesec.com. (2012, February 28). Study reveals that encryption is critical to increase security posture, report thales and