CipherCloud - Cloud Data Security

CipherCloud, the leader in cloud information protection, enables organizations to securely adopt cloud applications by overcoming data privacy, residency, security, and regulatory compliance risks.

[ciphercloud]

Press Release - Ciphercloud Extends Visibility And Data Controls For Cloud Content Collaboration

Partners with Oris4 and mxHero to help extend new use cases for Box in the enterprise

SAN JOSE, Calif., Sept. 2, 2014 – Today, CipherCloud, the leader in cloud information protection, extends the reach of its CipherCloud for Box solution by enabling enterprises to centralize their sensitive content inside Box through technology partnerships with Oris4 and mxHero. Oris4 and CipherCloud are also partnering to enable customers to connect into all cloud and in-house storage services to track, analyze and centrally manage their files.

CipherCloud enables users to access powerful cloud discovery and data loss prevention (DLP) tools that help enterprises align data controls with industry and government specific privacy requirements. CipherCloud for Cloud Discovery provides the first step to mitigating shadow IT by identifying and analyzing cloud applications and usage. The solution enables companies to identify applications that pose security risks to sensitive data and through Oris4 or mxHero send data to more secure environments, such as Box. Then, CipherCloud for Box provides enterprises a cloud DLP engine to set granular policies around data access. Users can enforce a range of actions including alert, block, restrict sharing, or quarantine sensitive files to ensure compliance while preserving functionality within Box.

In partnership with Oris4, CipherCloud provides the ability for companies to connect into all online and in-house storage services to track, analyze and manage its vast array of files and documents. “We give you the power to find any digital information in your business and work with it immediately,” said Reza Kazemipour, CEO, Oris4. “With CipherCloud and its DLP capabilities, organizations can classify their content and leverage Box as their central repository and collaboration platform.”

“Our mail2Cloud solution combines email tracking and cloud storage with any email system,” said Alex Panagides, CEO of mxHero. “Together with CipherCloud, we enable employees to be even more productive by storing their emails and e-mail attachments in Box that can then be closely monitored and secured.” Combined with mxHero, CipherCloud’s powerful tools can scan Box repository for e-mails and attachments based on DLP rules to determine proper handling in Box. With mxHero, employees can then securely send files as Box links instead of email attachments.

 “Increasingly, enterprises are relying on enterprise cloud collaboration solutions such as Box to connect with internal and external constituents,” said Dev Ghoshal, SVP of Global Alliances, CipherCloud. “Today’s announcement reflects the need we see in the market for extending compliance and privacy policy settings for various cloud collaboration scenarios. Technology partners such as Oris4 and mxHero enable us to go broader across applications with greater depth of controls and use cases.”

CipherCloud will be at booth #18 at BoxWorks 2014 (Moscone North Hall) in San Francisco, CA.

Originally posted on www.ciphercloud.com

[ciphercloud]

Press Release: Ciphercloud Partners With Sliced Tech To Extend Cloud Information Protection In Australia

Extends choice in hosted model for trust in the cloud to Australian businesses

  SYDNEY, Australia, September 2, 2014 – The rapid adoption of cloud has spurred stricter treatment for data privacy and protection under the Australia Privacy Principles (APPs), the basis for the updated Privacy Amendment Act. Given the mandate to prevent “unauthorised access, modification and disclosure” of personal data, robust protection is critical for cloud providers and customers operating in Australia.

To provide more options for bridging these mandates, CipherCloud, the leader in cloud information protection, announces its collaboration with Sliced Tech, a managed services partner, to provide visibility and control of sensitive, customer data in the cloud. Now, mutual customers can leverage Sliced Tech’s infrastructure and expertise for an expanded set of cloud services and data controls, including having their encryption gateway delivered as a managed service. Already, the partnership has enabled a major Australian government department to accelerate their cloud services journey while complying with the data privacy and security standards of the law.

“This partnership enables us to extend CipherCloud’s innovative cloud information protection platform to customers who have been searching for the right solutions to satisfy the updated Australian Privacy Amendment and their own internal requirements for data controls,” said Jason McClure, Managing Director of Sliced Tech. “As an Australian company, we are providing more choices to make it easier for customers to comply with the data privacy, regulatory compliance and data residency requirements.”

“At the heart of stricter data privacy is protection of personal information whether that information resides on premises or in the cloud,” noted Geoff Noble, Regional Director, CipherCloud Asia-Pacific. “Since our inception, CipherCloud has delivered robust security controls that enable organisations to trust the cloud. Our Sliced Tech partnership reflects this mission by delivering more options to help businesses operating in Australia to protect sensitive data in the cloud.”

To celebrate this partnership, CipherCloud and Sliced Tech will host a panel, Addressing the Privacy Act and Government Security Policies, with former Privacy Commissioner Malcolm Crompton to help businesses navigate the security, privacy and residency requirements of the Australian Privacy Principles (APPs).

DATE: Wednesday, September 10, 2014

TIME: 8:00-10:00 am (7:30 am registration; more details)

LOCATION: National Portrait Gallery, King Edward Terrace, Parkes, Canberra

About CipherCloud

  CipherCloud, the leader in cloud information protection, enables organizations to accelerate their adoption of cloud applications while ensuring visibility and control of their data. CipherCloud delivers data privacy, regulatory compliance, and data residency in the Cloud through an open platform that provides comprehensive cloud application and data discovery, protection – strong encryption, tokenization, data loss prevention, key management and malware detection – and activity and anomaly monitoring services.

CipherCloud has experienced exceptional growth and success with over 2.6 million business users, across 25 countries, and in more than 11 industries.

The CipherCloud product portfolio protects popular cloud applications out-of-the-box such as Salesforce, Box, and Microsoft Office 365.

CipherCloud, named as SC Magazine’s 2013 Best Product of the Year, is backed by premier venture capital firms Andreessen Horowitz, Index Ventures, and T-Venture, the venture capital arm of Deutsche Telekom. For more information, visit www.ciphercloud.com and follow us on Twitter @ciphercloud.

Originally posted on www.ciphercloud.com

[ciphercloud]

CipherCloud Live Webinar: Taking a Data-Centric Approach to Security in the Cloud

Date: Tuesday, August 19th

Time: 10:00 a.m. AEST

As organizations move business-critical applications from legacy on-premises systems to the Cloud, they need to fully evaluate their approach to security. Traditionally, IT security has focused on strong perimeter security – “keeping the good stuff in and the bad guys out.” But moving to the cloud – where business-critical data may be stored by cloud service providers in distributed locations – necessitates companies to rethink how to provide security, compliance, and peace-of-mind. 

This webinar will cover:

Principles and advantages of a data-centric approach to cloud security

Considerations when assessing and deploying security for varying types of cloud data and applications

Encryption and tokenization – what, when and how, including requirements such as access controls,  key management and searchability

Originally posted on pages.ciphercloud.com

[ciphercloud]

Join CipherCloud for a Live Twitter Chat on 9th July 2014, Wednesday 10 AM PDT/1:00 PM EDT. Join in for a chance to win a free JamBox #CipherCloudChat

[ciphercloud]

CipherCloud Recommends Cloud Encryption Best Practices for Financial Services

In many industries, cloud computing is now vital to remaining competitive. The cloud typically offers superior flexibility, scalability, accessibility, and high availability, enabling businesses to grow more agile and responsive. Regulatory compliance concerns often make banks and other financial service providers slower to adopt the cloud, but even in the financial services industry, the cloud will soon become a necessity.

Banks are already seeing attractive use cases for cloud computing, as Bank Systems & Technology's Bryan Yurcan and Jonathan Camhi pointed out late last year. Cloud-based payment processing is one hot topic. Cloud-based document management is another. Analytics for business insight and fraud detection are also growing popular. However, all of these applications will require a thorough understanding of the regulatory restrictions and how to comply with them.  One of the most essential tools to make sure your cloud adoption meets regulatory requirements is cloud data encryption.

What to Protect PCI DSS mandates the protection of customer account data, which you'll need in order to process payments in the cloud. Per PCI DSS 3.0, that data includes:

Primary Account Number (PAN)

Cardholder name

Expiration date

Service code

Full track data from cards' magnetic stripes or chips

CAV2/CVC2/CVV2/CID

PINs or PIN blocks

PCI DSS requires organizations to "use strong cryptography and security protocols" for the transmission of sensitive cardholder information. Some of these fields are more sensitive than others, however. PANs are more sensitive than expiration dates, for example, while verification codes and PINs are so sensitive that PCI DSS outright forbids the storage of them after the transaction is completed. Your cloud data encryption strategy should include the ability to apply varying strengths of encryption at a granular, policy-based level so that you can apply the appropriate amount of protection to each data type.

Here are some best practices that can help you use cloud data encryption to safely make the most of the cloud.

Cloud Data Encryption Best Practices

Identify every piece of sensitive data you're sending to your cloud applications and develop policies to apply appropriate levels of encryption to them. You'll need to work with all lines of business using the cloud to determine their exact uses for it and their cloud encryption needs.

Encrypt or otherwise protect all sensitive data you handle before it leaves your premises.

Encrypt and do not store the most sensitive cardholder and authentication data: full track data, card verification codes, and PINs and PIN blocks.

Integrate your cloud encryption solution with DLP tools that can detect and generate alerts on activity around sensitive data to prevent the unauthorized access or sharing of data and documents that contain protected information.

[ciphercloud]

This video depicts the secure mechanism followed by CipherCloud in protection your data in the cloud. 

[ciphercloud]

FierceCIO's chat with CipherCloud's Chief Trust Officer - Bob West

FierceCIO makes a regular point of examining hot and emerging job roles in the IT ranks, but every now and then an especially unique job title crosses our path. One of these is the chief trust officer, a role that may find itself gaining favor at IT vendor organizations--especially those in the cloud computing space.

We spoke with Bob West, chief trust officer at CipherCloud, about this position, what it's all about, and what the career implications are for those who succeed in the role.

FierceCIO: How long have you been in the role of chief trust officer and are you the first in that role at your company?  West: I joined CipherCloud in February and am the first person in this role at CipherCloud.

FierceCIO: What exactly are the responsibilities of that role?

West: The chief trust officer is an advocate for the customer. It's my job to make sure there is proper support and alignment between the customer and CipherCloud.

FierceCIO: What was behind the initial creation of the role? West: The idea was to extend CipherCloud's commitment to delivering trust in the cloud by bringing in someone with a strong track record in a customer industry--in my case, the financial sector. That person would understand the security, privacy and compliance challenges our customers face and be able to advise these organizations on how to mitigate these risks.

FierceCIO: What background did you have that played a role in you getting the position? West: I worked in technology and security at major banks for about 20 years and consulted for almost 10 years. During this time, I was the CISO at Fifth Third Bank and Bank One.

FierceCIO: What are the mandates or marching orders being given to you in this role?  West: My mandate is to spend the majority of my time with customers so I can listen to their needs and counsel them on how to best adopt the cloud. 

FierceCIO: How common is this position, and who does someone with this title traditionally report to?  West: The position typically reports to the CEO. It's a relatively new role that we're predominantly seeing at cloud service provider companies, like Salesforce and Box. In our case, we are a software provider, but we partner deeply and broadly across many cloud applications, so it makes perfect sense for us to have this "other" CTO role.

FierceCIO: What current and pending trends in business and technology or with your customers and partners are likely to impact or change your role in the near future?  West: The vast majority of businesses are moving to the cloud aggressively, and we don't see that trend changing in the foreseeable future. 

FierceCIO: What would the ideal chief trust officer candidate look like to a recruiter? West: Key is someone with a background that can build trust inside the company as well as with its external ecosystem of customers and partners. 

FierceCIO: Assuming that ideal candidate isn't available, what Plan B should a recruiter have? West: Like for any other c-suite role, don't settle.

FierceCIO: What are the career opportunities for individuals that are successful in this role?  West: Given the chief trust officer's work with the rest of the executive team, other leadership roles--such as CEO or head of corporate strategy--could make sense as a next step.

Read more: A look inside the role of chief trust officer - FierceCIO http://www.fiercecio.com/story/look-inside-role-chief-trust-officer/2014-05-29#ixzz33Ya1aly3  Subscribe at FierceCIO

[ciphercloud]

This video explains data protection capabilities of CipherCloud for different applications. CipherCloud provides complete security in case of both structured and unstructured data. Additionally, this video depicts data encryption process at CipherCloud gateway using examples of Salesforce and Microsoft Azure.

[ciphercloud]

CipherCloud Releases Cloud Discovery To Enable Enterprises To Detect Cloud Application Usage

CipherCloud announced the availability of Cloud Discovery, a product that gives enterprises insight into the set of cloud applications used by their employees. In addition to enumerating the cloud applications that employees use, Cloud Discovery provides customers with a risk score associated with each of the cloud applications used by its employees. Based on over 10 variables, the risk score identifies the degree of security associated with each cloud platform toward the end of identifying cloud applications that pose a security threat to the company’s IT infrastructure and data. The screenshot below illustrates a sample Cloud Discovery dashboard as follows:

Conceived as an expansion of its Discover, Protect and Monitor platform, Cloud Discovery constitutes a free product offering from CipherCloud that extends the ability of the “Discover, Protect and Monitor” platform to identify potential security threats before they morph into more significant security breaches. The Discover, Protect and Monitor platform provides customers with analytics that alert them to uses of their platform that may suggest security threats such as aberrant usage patterns as represented by application usage, unusually high data flows or suspicious alterations to existing security protocols and permissions. Cloud Discovery empowers IT administrators to perform early stage analysis of the range of cloud applications used by employees by detecting usage of any applications by means of the analysis of log and machine data in collaboration with Splunk, the machine data analytics company that went public in April 2012. Overall, Cloud Discovery constitutes yet another enhancement and key differentiator for the CipherCloud platform that, as part of its Discover, Protect and Monitor product offering, delivers cloud analytics alongside CipherCloud’s core encryption product. With the release of Cloud Discovery, CipherCloud continues to sharpen its branding and value proposition as an integrated cloud security platform as opposed to a pure encryption play, which renders the company even more appealing for customers and investors, particularly given the intensity of contemporary concerns about potential security breaches associated with using cloud-based service providers and applications.

Originally posted on cloud-computing-today.com