Home » The Art of Data Protection » Consumerization of IT Killed the Endpoint
Consumerization of IT Killed the Endpoint
March 16, 2012, 10:45 am EDT
Brian Katz wrote an excellent blog post on the importance of changing our thinking of HOW we secure data: You want me to do what?!? A mobile strategy challenge! He advocates that, with the increased consumerization of IT, BYOD, etc, organizations can’t just update systems, they need to do a complete overhaul.
Mainly, orgs need to encrypt data so it can be accessed from any device without compromising security. The legacy ideas of “securing the endpoint” just aren’t going to work any more.
“The challenge is to use the Consumerization of IT to go with a whole new approach. It’s time to let the data flow free and give it the opportunity to live everywhere. Build APIs that allow people to access the data that they need on whatever device they want to use. Work on moving away from managing the devices by completely locking them down and move towards securing the data. Work on ways to encrypt the data while it lies on site. When it moves out of its repository and through the intertubes that we call the web it flows through secure tunnels (notice I didn’t say VPN) and when it arrives at its final destination, whether it be desktop, laptop, smartphone or tablet, the data is encrypted while at rest. Build the keys into the apps that you design to use that data. Use 2-factor authentication by using certificates to enable access to the data. What happens if one loses the device? Revoke the keys. Render the data unusable. Instead of using everything in your arsenal to essentially make many peoples’ jobs harder, help them to embrace the Consumerization of IT by changing the way you think about your assets. You have two important assets, your data and your people. Stop focusing on devices, endpoints and ways that data can be stolen, instead, look to enable your people to use use your data to affect the progress of moving your organization forward.“
Back to The Art of Data Protection blog homepage.
This post was written by +Cheryl Shoults
This entry was posted in Crypto, Mobility, Uncategorized and tagged brian katz, byod, consumerization of IT, encrypt data, encryption, mobile by Cheryl Shoults. Bookmark the permalink.- May 2013
- April 2013
- March 2013
- February 2013
- January 2013
- December 2012
- November 2012
- October 2012
- September 2012
- August 2012
- July 2012
- June 2012
- May 2012
- April 2012
- March 2012
- February 2012
- January 2012
- December 2011
- November 2011
- October 2011
- September 2011
- August 2011
- July 2011
- June 2011
- May 2011
- April 2011
- March 2011
- December 2010
- October 2010
- September 2010
- X
5 Tips to Prepare for the Attack
Cheryl Barto Shoults May 16, 2013, 03:57 pm UTC
Alvand Solutions on eBanking, Compliance and Security
SafeNet May 9, 2013, 08:05 am UTC
Panel: Virtual World with Virtual Risks. Can it be Cloudy and Clearly Secure?
SafeNet May 6, 2013, 05:05 am UTC
The power to eliminate 80% of data breaches is at your fingertips
Motty Alon May 3, 2013, 11:12 am UTC
Common Errors In Migrating On-Premise Controls to the Cloud
Cheryl Barto Shoults May 3, 2013, 08:05 am UTC
Security Industry: The Sanity Test
Tsion Gonen February 12, 2013, 08:15 am UTC
At Last: New Guidelines for Online Banking Authenticaiton
Motty Alon July 1, 2011, 06:46 am UTC
Gartner Magic Quadrant for User Authentication Part 1: What it Means
Cheryl Barto Shoults January 24, 2012, 08:30 am UTC
Adversary ROI: Why Spend $40B Developing It, When You Can Steal It for $1M?
Cheryl Barto Shoults February 17, 2012, 01:30 pm UTC
Roy Walker Plays Catchphrase at Infosec 2012
SafeNet April 24, 2012, 12:16 pm UTC
2012 Top 5 SafeNet Videos
SafeNet December 26, 2012, 10:46 am UTC
Thoughts on the 2013 Global State of Information Security Survey
Charles Goldberg January 9, 2013, 10:58 am UTC
Adversary ROI Comes to Atlanta: Josh Corman and David Etue Present at the GFIRST National Conference
David Etue August 17, 2012, 02:15 pm UTC
Landis+Gyr and SafeNet Sign Agreement to Enhance Smart Grid Security for Utility Companies and Consumers
Jennifer Lewis October 20, 2010, 02:54 pm UTC
Microsoft has PhoneFactor…What’s Your Multi-Factor Authentication Offering?
Andrew Young October 17, 2012, 01:21 pm UTC
0