Secure Flash Drive with Encryption and Internet Authentication. FIPS 140-2 Level 2 Certified.
Request More Info | Buy Now
IronKey.com
Save
My Rating
Identity Life Cycle Management Authentication and Authorization
www.tirionsolutions.com
Deploy Access Control In The Data Center For All Types Of Users
www.Rohati.com
Security Solutions to help deliver quality patient care. Learn More.
www.CA.com
Developer of electronic signature solution that enables users to create permanent business records using advanced digital signatures.
www.alphatrust.com
Consulting & Enterprise Integration For End-to-End Solutions From AT&T
business.att.com
Developer of certification applications for web servers, wireless application protocol servers and code signing.
www.entrust.net
Developer of digital certification and ID verification products.
www.equifaxsecure.com
Manufacturer of retinal recognition readers used for security and positive identification purposes. Products are sold to multiple industries and to government agencies. This company was capitalized by private investment, venture capital and co...
www.eyedentify.com
Supplies access authentication systems to control access to facilities and networks, monitor time and attendance, and visually identify people.
www.fargo.com
Secure Flash Drive with Encryption and Internet Authentication. FIPS 140-2 Level 2 Certified.
Request More Info | Buy Now
IronKey.com
Ebusiness security company; offers authentication, encryption and public-key management systems.
www.rsasecurity.com
Global provider of eBusiness security products, delivering eBusiness access control and user authentication solutions available to organizations of all sizes, including Fortune 50 enterprises, application and Internet service providers and gover...
www.securecomputing.com
Company that acts as a third party, issuing digital certificates to companies and individuals that are used as proof of identity online.
www.thawte.com
|
|
Identity Life Cycle Management Authentication and Authorization
www.tirionsolutions.com
Deploy Access Control In The Data Center For All Types Of Users
www.Rohati.com
Security Solutions to help deliver quality patient care. Learn More.
www.CA.com
Guide to Password Generators for Networks
Keep your data safe and your employees on guard with strong authenticationThis is serious stuff. Once inside your network, bad guys get access to all kinds of goodies, including personal identity data of your workforce, financial systems and potential valuable trade secrets. Unless you are ready to go back to paper and pencil and a steel safe, it's time to consider beefing up your security system.
Action Steps
The best contacts and resources to help you get it done
Lock down your workstations with serious tech
The state of the art right now is two-factor authentication. Put simply, you need a password and a device, usually a smartcard or password generator, to get access to the corporate network. Using your ATM card and a PIN, for instance, is a kind of simple two-factor authentication.
I recommend:
The next step up for networks is a security token, a keychain device that quickly generates passwords which must be used within a few seconds to work. Manufacturers of security tokens include Aladdin, Entrust, Actividentity, and RSA Security.
Review your mobile data on laptops and handheld devices
Everyone knows the story of the hapless government employee who left the laptop with millions of veterans' profiles on its hard drive in a taxicab. (It was recovered.) What most don't realize is that their key secrets are just as exposed.
I recommend:
Control who has access to what on your employees' take-home computers and devices lockable memory from Safeboot and Utimaco.
Short on budget? Consider a folder or file lock device
A network-wide system is best, but small companies with limited funds should consider locking each machine individually or perhaps just key files or folders.
I recommend:
Software to automate protection of key files is available from Deslock, Information Security Corporation, and PGP, now a big company but the original consumer encryption maker, once known as Pretty Good Privacy.
Lock the entry and exit points for total security
One of the bigger problems, until recently overlooked, isn't baddies trying to get in but the so-called 'trusted path,' a.k.a your own employees, who think nothing plugging keychain memory drives, digital music devices and other memory disks into their work computers as if they were at home.
I recommend:
Besides viruses and such coming in, there's always a risk of important, even sensitive data walking out the front door on that iPod. A growing industry of endpoint security offerings includes eEye, Safend and Layton Technology.
Tips & Tactics
Helpful advice for making the most of this Guide- Dumb down your machines, right away. Your tech manager should have all of your networked PCs set so that ordinary users cannot download or install anything. If not, get this squared away soon.
- Don't completely freak out. Employees who hear constantly about information theft and fraud will begin to take things personally, or consider management paranoid. Make a clear data security policy, communicate it once and then enforce it consistently.
- The third step in strong authentication -- biometrics devices like finger scanners and iris readers -- are increasingly common. It's probably a bit too Jetsons for now, but talk with your technology folks about when and where to consider this level of protection.
