Addressing Your Number 1 Security Risk: Data Privacy, Data - - PowerPoint PPT Presentation

addressing your number 1 security risk data privacy data
SMART_READER_LITE
LIVE PREVIEW

Addressing Your Number 1 Security Risk: Data Privacy, Data - - PowerPoint PPT Presentation

Addressing Your Number 1 Security Risk: Data Privacy, Data Encryption A Complimentary Webinar From healthsystemCIO.com Sponsored by Proofpoint Your Line Will Be Silent Until Our Event Begins at 12:00 ET Thank You! Slide Deck:


slide-1
SLIDE 1

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

“Addressing Your Number 1 Security Risk: Data Privacy, Data Encryption”

A Complimentary Webinar From healthsystemCIO.com Sponsored by Proofpoint Your Line Will Be Silent Until Our Event Begins at 12:00 ET Thank You!

slide-2
SLIDE 2

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Housekeeping

  • Moderator – Anthony Guerra, editor-in-chief, healthsystemCIO.com
  • Ask A Question
  • We will be holding a Q&A session after the formal presentations.
  • You may submit your questions at any time by clicking on the QA panel located in the

lower right corner of your screen, type in your questions in the text field and hit

  • send. Please keep the send to default as “All Panelists.”
  • Download the Deck
  • Go to http://healthsystemcio.com/presentation/encryption-webinar.pdf
  • Shortened URL at bottom of all slides
  • View the Archive
  • You will receive an email when our archive recording is ready.
  • Separate registration is required.
slide-3
SLIDE 3

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Agenda — 45 Minutes

  • 20-25 minutes: Wes Wright, SVP/CIO, Seattle Children's Hospital
  • 5 minutes: A Word From Our Sponsor: Patrick Wheeler, Director,

Product Marketing, Proofpoint

  • 15 minutes: Q&A w/Wes Wright
slide-4
SLIDE 4

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

“Addressing Your Number 1 Security Risk: Data Privacy/Encryption”

Wes Wright, SVP/CIO, Seattle Children's Hospital

slide-5
SLIDE 5

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Seattle Children’s Mission

We believe all children have unique needs and should grow up without illness or injury. With the support of the community and through our spirit of inquiry, we will prevent, treat and eliminate pediatric disease.

slide-6
SLIDE 6

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

A Little About Me

  • Joined Seattle Children’s in March 2008 as VP/CTO
  • Moved into SVP/CIO role August two years ago
  • Pertinent Previous Roles
  • Hospital Administrator (USAF MSC Officer) 1991-2006
  • Regional/Med Ctr CIO USAF Healthcare
  • Exec Dir IS, Deputy CIO, Scripps Health, San Diego 2006 – 2008
  • Yes, I went to college…
  • University of Maryland (BS Business)
  • University of New Mexico (Masters, Business Administration)
slide-7
SLIDE 7

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

S-5, Our Philosophy

Simplicity Safety Speed Security Stability

slide-8
SLIDE 8

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Data Security?

  • Privacy
  • Role-based access
  • Who can see what and when
  • Encryption
  • Control
  • Network (physical/logical)
  • Virtualization
  • Vmware
  • Citrix
slide-9
SLIDE 9

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Control

  • Application and desktop virtualization
  • Logical segmentation
  • BYOD
  • Remote Access
  • Two factor
  • Data Transfer
  • Logging
  • DLP
  • End point USB encryption
  • Network
  • VLAN segmentation
  • Perimeter and interior firewalls
  • ACLs – leaf node mitigation
  • 802.1X
slide-10
SLIDE 10

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Encryption

  • “Get out of jail free card”
  • If it’s encrypted, then you’re “safe”
  • Data at rest and in motion
  • TLS
  • Guardian Edge
  • Proofpoint
slide-11
SLIDE 11

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Mobile Device Encryption

  • MDM solutions
  • If they break into the device, why not the PW for your MDM as well
  • iOS and Win devices easily encryptable; Android not
  • Risk decision
  • Manage email through MS Sync
  • PIN
  • Remote Wipe
slide-12
SLIDE 12

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Most Effective Measures: Control

(What helps me sleep better)

  • Virtualization
  • Server
  • Application
  • Desktop
  • “Data”
  • Two Factor Authentication
  • Fob
  • Software based
slide-13
SLIDE 13

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Most Effective Measures: Privacy

(What helps me sleep better)

  • Encryption
  • Laptop
  • USB
  • Email
  • Policy – yeah, that works
  • DLP
  • Encryption
  • In transit (TLS)
  • “Send secure”
slide-14
SLIDE 14

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Most Effective Measures: Privacy/Control What are your thoughts?

You can learn a lot from a Dummy…. Stay tuned for Q&A!

slide-15
SLIDE 15

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

“Addressing Your Number 1 Security Risk: Unencrypted Devices”

Patrick Wheeler, Director, Product Marketing, Proofpoint

slide-16
SLIDE 16

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Enterprises Still Challenged

Why isn’t everyone using encryption today?

Complex

  • Two words: “key management”
  • Solutions often part of larger, complicated and mostly unused

encryption suite

Inaccurate

  • User-driven client-based email encryption circumvented

network DLP controls

  • Error-prone and inconsistent

Avoided!

  • Required change in user behavior for email
  • Poor experience for sender and recipient, and source of constant

frustration

slide-17
SLIDE 17

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Tool Time: Where, What and How to Enforce

Data in Motion Data in Use Data at Rest

Where to monitor? Network Endpoint Discovery What to monitor?

  • Email
  • Web
  • IM & Social
  • File sync & sharing
  • Collaboration
  • PC
  • USB drives
  • CD/DVD
  • Smartphones & tablets
  • External HDD
  • Printing
  • Mail archives
  • Mobile
  • Databases
  • Network shares

Enforcement tools

  • Mail encryption
  • Network and messaging DLP
  • Social media DLP and archiving
  • Endpoint and removable media

encryption Content discovery:

  • Network-based
  • Agent-based

10101101010010101 01010011011100011 10011010011101000

slide-18
SLIDE 18

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Email Encryption: Low-Hanging Fruit?

  • Email is a Business Enabler
  • Ubiquitous and mission-critical to

communication

  • Over 70% of intellectual property can be

found in the email system

  • Greatest risk, usually from unintentional

sending of sensitive information

Source: ESG Research, Ferris Research

Memos File systems DBs Other email

slide-19
SLIDE 19

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

The Ideal Solution

  • Easy to set up and administer
  • Accurate for sensitive content

identification

  • Transparent with no reason to avoid using
  • Easy. Accurate. Transparent.

Enable Communication, Maintain Security & Compliance

slide-20
SLIDE 20

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Proofpoint (NASDAQ: PFPT)

Security-as-Service Leader

Key Partners What We Do

Leaders Quadrant: 2011-2012-2013 Magic Quadrant for Secure Email Gateways & Enterprise Information Archive

Champions Quadrant & Innovation Award, 2012

Accolades

Select Partners & Customers Demonstrated Success

3 of the 5 largest US Retailers 5 of the 5 largest US Banks 3 of the 5 largest US Defense Contractors 2 of the 5 largest Global Pharmaceuticals Companies Advanced Threat Protection and Response Protect the Most Sensitive Data of the World’s Most Successful Companies Comprehensive Data Protection Portfolio Scalable Security-as-a-Service platform

slide-21
SLIDE 21

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Q&A

Click on the Q&A panel located in the lower right corner of your screen, type in your questions in the text field and hit send. Please keep the send to default as “All Panelists.” Wes Wright, SVP/CIO, Seattle Children's Hospital

slide-22
SLIDE 22

Slide Deck: http://goo.gl/cvfVxh Webex Support 1-866-229-3239 Event #667 576 634

Thank You!

  • You will receive an email when our archive recording is ready.

(Separate registration is required)

  • CHIME CHCIO Credits – Attending our Webinars = 1 CEU
  • Thanks to our sponsor: Proofpoint!
  • Questions/Comments – Anthony Guerra aguerra@healthsystemCIO.com

Go to www.healthsystemCIO.com/webinars to view our upcoming schedule and see the last 12 months of archived events.