Data breaches, regulations fueling data encryption

US Government agencies, banks at forefront of data encryption usage

Although data encryption adds cost and complexity, business and government sectors are becoming wedded to it -- even though at times it's like an arranged marriage driven by regulatory compliance and fear of data-breach fiascos.

"We now require encryption for data at rest on laptops in the Air Force," says Greg Garcia, member of the senior executive service of the US Air Force and director of the 754th Electronic Systems Group at Gunter Air Force Base. The group sets security policy for the 500,000 laptops used by the Air Force.

"The contract we awarded for this grew out of what happened at Veterans Affairs," Garcia points out, alluding to the data-breach fiascos of this year and last that led to millions of veterans' personal information being exposed on lost and stolen laptops.

The VA data-breach incidents spurred the White House Office of Management and Budget, the Department of Defense and the civilian-side General Services Administration to look at governmentwide approaches for "data at rest" encryption.

The outcome was the US government's first-ever blanket purchasing agreements (BPAs) for data-at-rest encryption products to protect sensitive but unclassified data on government laptops and removable storage devices.

BPAs were awarded in June to eleven resellers, including Intelligent Decisions, MTM Technologies and GovBuys.

The encryption products on the lists include Mobile Armor's Data Armor, SafeBoot's (acquired by McAfee for US$350 million in October) SafeBoot Device Encryption, Information Security's Secret Agent, SafeNet's SafeNet protectDrive,

Encryption Solutions' Skylock At-Rest, Pointsec Mobile Technologies' Pointsec, Syprus' Talisman/DS Data Security Suite, WinMagic's SecureDoc, Credant Technologies' CredantMobile Guardian and GuardianEdge Technologies' GuardianEdge.

State and local government viewpoint

What's known as the data-at-rest encryption BPAs are also available for use by state and local governments. The Tennessee Department of Revenue is going its own way in adding encryption to its mobile laptops by deploying Entrust encryption software this fall.

"Our data is very confidential, and we have a mobile workforce of about 300 auditors and revenue officers who travel across the country as well as the state," says Don Derrick, director of information technology resources. "Our strategy is to encrypt these devices first."

The two Entrust software products, Entrust Entelligence Disk Security and Media Security, costs US$149 and US$28 per licensee, respectively. The department cannot afford to give encryption software to all its employees, although the department now requires encryption to keep personal financial information protected on a mobile computers carried from place to place.

"This is our policy now, and if you're writing to a DVD or CD to be given to a citizen, any confidential data has to be encrypted there too," says Derrick. The citizen would get a password courtesy of Tennessee to decrypt the data.

While the agency didn't decide to deploy encryption specifically because of the VA data-breach incidents, Derrick acknowledges it's hard to forget them.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Ellen Messmer

Network World
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?