Information Security
The need for information security is at once challenging and never-ending. As new risks emerge, old solutions are rendered insufficient. For organizations to remain consistently relevant and contemporary requires continuous research, testing, and partnerships with the best security technology companies in the business.
The Maximum Information Security Prism
› Enforced Network Connectivity
› Full Disk Encryption
› User Rights Lockdown
› Application Control
› Removable Media & Device Control
› Multi-factor Authentication
› Mobile Session Management
Securing information at the end point and protecting a brand
A customized, scalable full disk encryption solution helped a major health care organization manage the risks of a lost or stolen laptop
The Client
The US-based based client is the largest for-profit healthcare provider in the world. It is composed of 170 locally managed hospitals and 113 outpatient centers in 20 states and England. The client employs over 180,000 persons, and its annual revenues exceed $25 billion.
The US-based based client is the largest for-profit healthcare provider in the world. It is composed of 170 locally managed hospitals and 113 outpatient centers in 20 states and England. The client employs over 180,000 persons, and its annual revenues exceed $25 billion.
The Situation
Acutely aware of the business risks of compromised data, the client was looking to protect confidential information on laptops and desktops throughout their environment. The client knew that a lost or stolen laptop was a reality of business today and if any device had a hard drive, it most likely contained critical data—customer data, financial data, patient data, even credit card information. The client had implemented contemporary strategies to secure data in the data center, and sought to do the same at the endpoint. However, a previous effort to meet the challenge had failed—resulting in six months of work and an implementation of fewer than 5 percent of its 100,000 devices.
Acutely aware of the business risks of compromised data, the client was looking to protect confidential information on laptops and desktops throughout their environment. The client knew that a lost or stolen laptop was a reality of business today and if any device had a hard drive, it most likely contained critical data—customer data, financial data, patient data, even credit card information. The client had implemented contemporary strategies to secure data in the data center, and sought to do the same at the endpoint. However, a previous effort to meet the challenge had failed—resulting in six months of work and an implementation of fewer than 5 percent of its 100,000 devices.
The Sayers Contribution
The client’s IT team looked to Sayers to help create a set of requirements that would support the business unit needs as well as meet the IT security objectives. The team recommended a full disk encryption solution. The key client challenge was scalability. With deployment exceeding 100,000 devices, it was critical that the solution scale accordingly. Many encryption solutions can sufficiently protect the disk, but only a few will scale to the client’s required level. Sayers was able to deliver the solution that would meet the client’s enormous size requirements. The implementation resulted a rollout of over 75,000 devices within the first two months.
The client’s IT team looked to Sayers to help create a set of requirements that would support the business unit needs as well as meet the IT security objectives. The team recommended a full disk encryption solution. The key client challenge was scalability. With deployment exceeding 100,000 devices, it was critical that the solution scale accordingly. Many encryption solutions can sufficiently protect the disk, but only a few will scale to the client’s required level. Sayers was able to deliver the solution that would meet the client’s enormous size requirements. The implementation resulted a rollout of over 75,000 devices within the first two months.
The Impact
Within the first two months of implementation, seven laptops were lost or stolen; but since they had been encrypted, the client was not required to notify patients, partners, regulators or the press. While it is possible to put a value on the avoided out-of-pocket costs, the value the client places on protecting the integrity of its brand… is priceless.
Within the first two months of implementation, seven laptops were lost or stolen; but since they had been encrypted, the client was not required to notify patients, partners, regulators or the press. While it is possible to put a value on the avoided out-of-pocket costs, the value the client places on protecting the integrity of its brand… is priceless.