Security Insider - Podcast Edition

By many, encryption is considered the hardest part of data security, and key management the hardest part of encryption. As such, it is far too common to see businesses not properly storing their encryption keys - for example, keeping them in a database in the clear or even burned into their application’s code. This podcast discusses the latest trends and perspectives around encryption key management and how to better protect your data.

Join Patrick Townsend, Founder and CEO of Townsend Security, as he discusses the current state of encryption key management, databases/applications that natively support encryption key management, meeting evolving compliance requirements, and how to save money with encryption key management.

Running VMware in IBM Cloud provides businesses a way to consolidate legacy infrastructures onto an automated and centrally managed, software-defined data center - and quickly address current resource constraints by deploying workloads. One of the things they are doing differently is providing enhanced security with bare metal servers in a hosted private cloud with provider-managed encryption of data at rest.

Join Patrick Townsend, Founder and CEO of Townsend Security, as he discusses securing data in IBM Cloud for VMware, the benefits of running VMware in the cloud, and encryption key management.

Like Microsoft SQL Server Enterprise Edition users, Microsoft SQL Server 2019 Standard Edition users can now easily meet compliance (PCI DSS, GDPR, CCPA, etc.) and protect private data like customer PII and intellectual property without modifying existing applications or the database. By using the database’s Transparent Data Encryption (TDE), coupled with an encryption key manager, organizations can protect their private data at a lower cost.

Join Patrick Townsend, Founder and CEO of Townsend Security, as he discusses encryption and key management in SQL Server 2019, deploying TDE and EKM, and encryption key management in the cloud.

As the world of edge computing becomes more distributed, billions of connected devices live on the edge, which need to be secured, managed and automated. For many businesses, this means deploying a VMware and cloud infrastructure and using VMware vSphere, for example, to encrypt private information. While it is easy enough to encrypt data on the edge, key management has proven to be somewhat of a challenge.

Join Patrick Townsend, Founder and CEO of Townsend Security, as he discusses security considerations with edge computing, compliance considerations, and examples of securign data on the edge.

MySQL is the world’s most popular open-source database and consequently stores enormous amounts of sensitive data. MySQL Enterprise Edition includes standards based encryption, along with KMIP support for key management. With the combination of these two, MySQL users can be confident that they are protecting their private data against a breach and meeting compliance requirements and security best practices.

Join Patrick Townsend, Founder and CEO of Townsend Security, as he discusses leveraging MySQL encryption, achieving a strong security posture with key management, and other ways that businesses can better secure their private data - including IP and customer information.

The California Consumer Privacy Act (CCPA) is a big deal. Almost no one is ready for it, so you are not alone if you are just getting familiar with the CCPA requirements. While similar to GDPR, CCPA is quite broad and extends into areas not covered under GDPR and other regulations.

Join Patrick Townsend, Founder and CEO of Townsend Security, as he discusses the California Consumer Privacy Act (CCPA), which organizations are required to meet the law, rights granted to consumers, and what information it covers.

Download this podcast to learn about:

- Which organizations are required to meet CCPA

- Which organizations are required to meet CCPA

- Data that needs protected under CCPA

With the introduction of vSphere encryption in 6.5 and vSAN 6.6, it has become much easier - and cost-effective - for businesses to encrypt private data. By deploying encryption to protect sensitive workloads in VMware, using the advanced cryptographic permissions in vCenter Server organizations can protect their sensitive information in their internal applications or databases that don’t natively support transparent encryption.

Join Patrick Townsend, Founder and CEO of Townsend Security, as he talks about how to protect data in VMware’s vSphere and vSAN with encryption and key management.

Download this podcast to learn about:

- Encrypting applications and databases that don't natively support encryption

- Encryption performance

- KMIP and encryption key management

Over the last several years, encryption key management has attained “essential infrastructure” status. When done properly, key management can protect encrypted data - and in the event of a data breach, can even provide a company with an exemption for a breach notification.

Download this podcast to learn about:

- What enterprises should look for in an encryption key manager

- The importance of standards (FIPS 140-2, PCI DSS validation, etc.)

- Meeting data security compliance (PCI DSS, GDPR, HIPAA, etc.) requirements with encryption key management

- KMS (Key Management Server) vs. KMS (Key Management Service)

VMware virtualization has been a game-changing technology for IT, providing efficiencies and capabilities that have previously been impossible for organizations constrained within a traditional IT data center world. With vSphere version 6.5 and vSAN version 6.6 VMware customers now have the ability to encrypt VMware managed virtual machines and virtual disk.

Join Patrick Townsend, Founder and CEO of Townsend Security, as he talks about how to protect data in VMware with encryption and key management.

Download this podcast to learn about:

- vSphere and vSAN encryption

- Deploying multiple, redundant key servers as a part of the KMS Cluster configuration

- Meeting compliance regulations and security best practices (PCI DSS, GDPR, etc.)

The European General Data Protection Regulation (GDPR) is radically transforming the information technology space. Organizations of all sizes and types, and cloud service providers large and small, must adjust to the notion that people now fully own information about themselves.

Join Patrick Townsend, Founder and CEO of Townsend Security, as he talks about how to use encryption and key management to help meet GDPR, the right of erasure, also known as the right to be forgotten, and how to avoid bad key management practices which will result in GDPR compliance failures.

Download this podcast to learn about:

- Data security requirements of GDPR

- Right of erasure (also known as the right to be forgotten)

- Meeting GDPR with encryption and key management

- The importance of standards and best practices