Untitled Document
For those of you who may be complaining that the postal service stinks I may
have the answer: smoked salmon. Three years ago my mother sent me a smoked salmon
through the post as a Christmas present and it still hasn't arrived. Now before
you say this all sounds a bit fishy, it's not the first time either. And before
the whole postal service goes on strike because they think I'm insinuating something,
the reality is that today most of us think twice about sending anything that
is valuable through the post. Mind you there are still a few diehards as our
recent Cyber-Ark survey discovered. Apparently 12 percent of those surveyed
stated that they would send cash through the post!
And yet many of those who would laugh at the 12 percent and consider them old
relics since we're all ultra modern and use internet banking and other sophisticated
tools. And yet the vast majority of us are still sending highly sensitive information
via email and a variety of other antiquated methods that might have been state
of the art thirty years ago, but today are less secure than the good old postal
service.
Over the past few months DLP has become the latest IT security buzz term. If
you haven't heard about DLP, it simply stands for data leakage prevention or
data loss prevention (they can't seem to decide). Add to this endpoint security,
or as I heard it referred to recently, "the stupidity patch" for those
users who tend to forget things like mobiles, notebooks, etc. after a night
in the pub. But the problem with most DLP solutions is that they're all about
protecting the perimeter or the endpoint. In other words, if I had a better
security system in my house, or if the post office had better security to control
what left their premises, my salmon would have arrived!
The problem for today's enterprise is that the transfer of information is increasingly
time-critical, like my salmon, and the traditional approaches such as file transfer
protocol and secure email simply lack the security mechanisms that sensitive
data demands, thus making the risk of leakage very possible. And where it becomes
really challenging is when you need to share information with business partners.
So here are a few suggestions:
-1-