Ask Your SaaS Provider the Right Data Protection Questions. Thales eSecurity Can Help!
Thales eSecurity helps SaaS consumers secure their digital transformations by offering data encryption and key management solutions that give SaaS consumers confidence that sensitive data stored in SaaS clouds is protected and under their control.
Do you know what questions to ask SaaS providers about data security? Does any data you are uploading to your SaaS provider include personally-identifiable information (PII)? Are you in an industry with data security mandate for which compliance extends to SaaS applications?
Even if your SaaS provider has assured you that they are encrypting your data, here are a few critical questions you still need to ask:
These questions represent security best practices. See the Cloud Security Alliance Cloud Controls Matrix.
It’s easy to forget that you are ultimately responsible for ensuring compliance with data privacy and protection mandates, regardless of data location. So when you consider SaaS solutions, make sure your SaaS provider offers the same controls you employ in your own data centers. If your SaaS provider can't, find one who can.
Vormetric Transparent Encryption allows SaaS providers to extend their service offerings to include data-at-rest encryption, and meet your data protection requirements. Vormetric Transparent Encryption enables data-at-rest encryption, privileged user access control and the collection of security intelligence logs without re-engineering applications, databases or infrastructure. Read the TeenSafe success story.
SaaS providers have a responsibility to protect customer data with encryption. Further, SaaS providers should follow industry best practices and enable customers to control encryption keys for their data. SaaS providers offering Bring Your Own Key Services can enable you to utilize the CipherTrust Cloud Key Manager to fulfill critical key-governance mandates. Ask your SaaS provider to let you control the encryption keys for your data.
Don't just take our word regarding best practices for cloud, in particular SaaS, data security and key management. Join the Cloud Security Alliance LinkedIn Group. Give your SaaS providers the Cloud Security Alliance Consensus Assessment Initiative Questionnaire so that you can consistently compare SaaS provider security offerings.
Selecting the right SaaS providers, those who protect and give you control of your data, gives you the assurance you need to sleep well at night and bring confidence to compliance meetings.
You are the SaaS buyer. You have choices. Use the Consensus Assessment Initiative Questionnaire to identify and select only the SaaS providers that offer the tools to ensure that compliance mandates for your data extends to SaaS clouds.
Whether it's Vormetric Transparent Encryption with comprehensive key management or Key Management as a Service, your SaaS providers can partner with Thales eSecurity to ensure that you are in control of your data in SaaS clouds.
The Vormetric Data Security Platform makes it efficient to manage data-at-rest security across your entire organization. Built on an extensible infrastructure, Vormetric Data Security Platform products can be deployed individually, while sharing efficient, centralized key management.
Download
This paper cuts through the confusion to help you pick the best encryption and tokenization options for your projects. The focus is on encrypting in the data center: applications, servers, databases, and storage. It also covers cloud computing (IaaS: Infrastructure as a Service).
Download
As security teams struggle to contend with more frequent, costly, and sophisticated attacks, data-at-rest encryption becomes an increasingly critical safeguard. This white paper offers an overview of the different encryption approaches available today.
Download
In today’s competitive environment, enterprises earn their customers’ trust every day. Just one security incident can cause damage from which it will take years for your organization to recover.
Download
The Vormetric Data Security Platform makes it easy and efficient to manage data-at-rest security across your entire organization. Built on an extensible infrastructure, the platform features multiple data security products that can be deployed individually or in combination to deliver advanced encryption, tokenization and centralized key management. This data security solution prepares your organization for the next security challenge and new compliance requirement at the lowest TCO.
Download
Vormetric Encryption delivers what we need it to do – without any fuss or drama – knowing it’s in place is one less thing to worry about.Albert AvilaBusiness Solutions Specialist, Fujitsu America, Inc.
Thales eSecurity is our standard. Whenever an encryption solution is needed, the answer is always, ‘let’s start with Thales eSecurity.Damian McDonaldVice President of Global Information Security, Becton, Dickinson and Company
There is absolutely no noticeable impact on the performance or usability of applications. I am very excited at how easy the solution is to deploy and it has always performed flawlessly.Christian MuusDirector of Security for Teleperformance EMEA
Implementing Vormetric has given our own clients an added level of confidence in the relationship they have with us; they know we’re serious about taking care of their data.Audley Deansenior director of Information Security,
BMC Software
Vormetric’s approach of coupling access control with encryption is a very powerful combination. We use it to demonstrate to clients our commitment to preserving the security and integrity of their test cases, data and designs.David VargasInformation Security Architect
Cadence Design Systems
My concern with encryption was the overhead on user and application performance. With Thales eSecurity, people have no idea it’s even running.Karl MudraCIO
Delta Dental of Missouri
The Vormetric solution not only solved all of our encryption needs but alleviated any fears of the complexity and overhead of managing the environment once it was in place.Joseph Johnson,chief information security officer CHS
As a global payment solutions and commerce enablement leader, Verifone’s strategy is to develop and deploy “best in class” payment solutions and services that meet or exceed global security standards and help our clients securely accept electronic payments across all channels of commerce. We selected Thales HSMs to provide robust security, unmatched performance and superior scalability across our payment security platforms, protecting encryption keys from virtually any attack. This helps Verifone to continue reducing merchants’ growing exposure to data breaches and cyber criminals and more aggressively safeguard consumer information… Joe Majka,Chief Security Officer
