Focus on encryption policy warns expert

Encryption expert says that encryption key management costs could "explode" without proper controls.

Policies and practices need to be focused on by business as far as encrypting data is concerned, according to a cryptography expert.

Talking to IT PRO, Nicko van Sommeren, chief technology officer of encryption company nCipher, said that without proper controls on key management costs would "explode".

"While enterprises increasingly need to deploy a strong cryptographic foundation for data security, the focus is less on detail, such as algorithms and key lengths, and more on practices and policies," he said.

"It is just as important to manage the distribution and recovery of cryptographic keys, and control the rights to access those keys to secure the data they protect."

He said if companies get that wrong then "management costs will explode".

"Worse still, lose the keys and there is the potential for creating the equivalent of a giant electronic document shredder since the encrypted data can effectively never be recovered without the correct key," van Sommeren said.

He said that data is no more sensitive than it was ten years ago when the company started but nowadays there is much more of it and "even more people want access to it anytime and from any location, so business agility has become the name of the game."

"The challenge now for many companies is to open up their internal systems for greater flexibility, while at the same time recognising the extremely high level of scrutiny and regulatory pressure around the privacy and integrity of personal and corporate information," said van Sommeren.

He said that traditional boundaries are now disappearing and a more data-centric approach to security means that critical information needs protecting wherever it is.

Featured Resources

Five lessons learned from the pivot to a distributed workforce

Delivering continuity and scale with a remote work strategy

Download now

Connected experiences in a digital transformation

Enable businesses to meet the demands of the future

Download now

Simplify to secure

Reduce complexity by integrating your security ecosystem

Download now

Enhance the safety and security of your people, assets and operations

Enable a true vision of security with an engineered solution based on hyperconverged and storage platforms

Download now

Recommended

'Largest ever' Magecart hack compromises 2,000 online stores
hacking

'Largest ever' Magecart hack compromises 2,000 online stores

15 Sep 2020
Infocyte integrates with Palo Alto Networks Cortex XSOAR
cyber security

Infocyte integrates with Palo Alto Networks Cortex XSOAR

19 Aug 2020
Andrew Daniels joins Druva as CIO and CISO
Cloud

Andrew Daniels joins Druva as CIO and CISO

22 Jul 2020
University of California gets fleeced by hackers for $1.14 million
ransomware

University of California gets fleeced by hackers for $1.14 million

30 Jun 2020

Most Popular

Google Pixel 4a review: A picture-perfect package
Google Android

Google Pixel 4a review: A picture-perfect package

18 Sep 2020
Accenture ploughs $3 billion into cloud migration support group
digital transformation

Accenture ploughs $3 billion into cloud migration support group

17 Sep 2020
16 ways to speed up your laptop
Laptops

16 ways to speed up your laptop

16 Sep 2020