Mission Possible - Luna 7 HSMs land to deliver the way forward

Are companies prepared to protect their sensitive data in the cloud? According to Thales Data Threat Report 2020 Global Edition 50% of all corporate data is store in the cloud and 48% of is sensitive data.

This informative webinar will cover:

Latest Cloud Security trends 
Who is responsible of the data
The approaches for taking responsibility and control of the data
The advantages of BYOE

Sposoby uwierzytelniania użytkowników, ich dostępu do aplikacji i systemów stanowią zasadniczą warstwę obrony w strategii bezpieczeństwa firmy.
Mobilność pracowników, praca zdalna spowodowana pandemią i nowe sposoby kradzieży danych wymuszają powszechne stosowanie silniejszych, zaawansowanych metod uwierzytelniania. Metody bezhasłowe (passwordless) wydają się w tym kontekście bezpieczniejsze i pożądane.

Podczas seminarium omówimy jak zmodernizować system uwierzytelniania w przedsiębiorstwie o metody bezhasłowe.

Know your Data is the first step for a data protection strategy. You are responsible of data so you must know where all data is, on which platform and who has got access to it. 

This informative webinar will cover:

How to gain complete visibility and control of you sensitive data
How you can accelerate the path to compliance
The advantages of visualizing your data in a single pane of glass

Gwałtowny wzrost wykorzystania usług w chmurze i ilość wrażliwych danych przechowywanych w chmurze stwarza nowe ryzyka i zagrożenia, z którymi organizacje nigdy wcześniej nie musiały się zmierzyć.
Cloud Security Alliance i analitycy branżowi twierdzą, że klucze szyfrujące powinny być przechowywane przez klientów, co to oznacza? Jak łatwo zarządzać cyklem życia klucza i jak łatwo zaimplementować idee BYOK?

W tym webinarze Jarosław Ulczok opowie o odpowiedzialności jaka spoczywa na właścicielu danych wrażliwych przechowywanych w chmurze oraz o sposobie na trzymanie kontroli nad kluczami szyfrującymi.

Co nám hrozí, pokud nám někdo zcizí uživatelské heslo neboli přístup k uživatelské identitě? V soukromém prostoru nejčastěji hrozí, že například náš facebookový profil bude zaplaven sprškou inzertních “postů” nebo útočník osloví přátele pod naší identitou se snahou získat profit nebo nás kompromitovat. Ve firemním prostředí jde ale o víc! Mluvíme o ztrátě kredibility společnosti, případně o přímé finanční ztrátě nebo finančním postihu.

Nejsnazším způsobem získání cizí identity je Phishing - získání důvěry přes sociální sítě nebo přes email, případně Lazy Phishing, který podvrhne logovací “okno” nebo DeepFake, který umožní útočníkovi vydávat se za někoho jiného. Způsoby útoků bývají různorodé.

Připojte se na náš webinář, kde Vám představíme, jak těmto útokům předcházet a zabránit a jaké jsou možnosti řešení. Představíme si trendy v oblasti IAM a ukážeme si některé use casy naživo.

Agenda :
• Identity and Access management
• Safanet Trusted Access
• Demo
• Q&A

Digitalisierungs-Initiativen und Cloud-Nutzung gehen in Unternehmen Hand in Hand. Grundvoraussetzungen für eine erfolgreiche Umsetzung digitaler Initiativen sind dabei Vertrauen in den Service, Unabhängigkeit von den jeweiligen Cloud-Anbietern und natürlich die Einhaltung gesetzlicher Datenschutz-Vorgaben. Allerdings zeigt das EuGH-Urteil Schrems II auch Grenzen und Risiken der Cloud-Adaption in Verbindung mit den großen Anbietern auf.

Die Praxis zeigt, dass gesetzliche Vorgaben sowohl Cloud-Anbieter als auch deren Kunden schnell in datenschutzrechtliche Zwickmühlen bringen können. Betroffen von möglichen Sanktionen sind dabei nicht nur große, global agierende, sondern durchaus auch mittelständische Unternehmen.

Der Europäische Datenschutzausschuss (EDSA) empfiehlt Unternehmen die Verschlüsselung der Daten in Verbindung mit der vollständigen Kontrolle über die Schlüssel. Mit den zukunftsorientierten Verschlüsselungslösungen von Thales können sie diesen Herausforderungen in verschiedensten Cloud-Plattformen begegnen und Risiken aktiv entgegenwirken.

Armin Simon behandelt unter anderem die folgenden Themen:
• Die zentralen Security-Herausforderungen der digitalen Transformation
• Die Auswirkungen von Schrems II
• Welchen Schutz bieten die Cloud-Service-Provider?
• Verschlüsselung als strategische Entscheidung
• Lösungsbeispiel: Deutsche Bahn

Ochrana citlivých dat pomocí šifrování závisí nejvíce na způsobu ochrany tohoto klíče. Nejbezpečnější metodou je samotný klíč generovat a ukládat v tzv. HSM - Hardware security modulu. Takový klíč nikdy neopustí HSM, všechny šifrovací operace se provádějí v HSM a navíc je samotné HSM chráněno proti útokům – tamper protection.
Pokud se citlivá data spravují lokálně, může být proces šifrování integrován s HSM jednoduše a bezpečně. Pokud chceme chránit data v cloudu např. v MS Azuru, nabízí se šifrování pomocí klíčů generovaných v Key Vaults. Zde ale zákazník nemá plnou kontrolu nad klíči. Řešením je DKE – Double Key Encryption, který oba přístupy šifrování kombinuje a poskytuje jistotu, že se k šifrovaným datům nedostane nikdo, kdo nemá přístup k lokálnímu HSM.

Připojte se na náš webinář a dozvíte se, jak šifrování pomocí HSM funguje. Představíme si nejčastější use casy a podíváme se na Thales řešení pro Double Key Encryption.

Agenda:

• Šifrování dat
• Potrebuji HSM nebo Enterprise Key Management
• Řešení Double Key Encryption
• Demo
• Q&A

In July of 2020 the Court of Justice of the European Union issued the Schrems II decision in the case Data Protection Commission v. Facebook Ireland. That decision invalidated the EU-U.S. Privacy Shield Framework, on which more than 5,000 U.S. companies rely to conduct transatlantic data flows in compliance with EU data protection rules. The Schrems II decision not only impacts EU-U.S. data transfers, but also affects data transfers of EU data across the world. However, the level of the impact depends on the geography and the strategic privacy planning they have done to maintain compliance with GDPR.

In this webinar, panelists from Accenture, Forrester and Thales will discuss data transfers in a post-Schrems II and post-Brexit era and examine how the current rules and regulations for securing information and maintaining privacy will impact organizations that rely on global access to data. The panelists will address the organizational and technical measures organizations can adopt, including encryption and key management, to ensure GDPR level compliance for data moved out of the EU. In addition, this webinar will discuss how the work and lifestyle changes brought about by COVID-19 will affect the regulations that organizations need to plan for.

Connected things include a variety of IoT endpoint devices across several critical infrastructure segments, including utilities, automotive, healthcare, retail, and building automation. Complex manufacturing supply chains make it difficult to build electronic devices that can be trusted – forcing security to be bolted on as a feature rather than being a critical element designed at the start of a product’s lifecycle.

By adopting a Zero Trust approach, IoT manufacturers can ensure device trustworthiness and security at scale through their product's end-to-end lifecycle.

In this panel with device security experts, discussion topics will include:

-How businesses can gain a competitive advantage by embedding security in the devices they manufacture
-Regulations relating to IoT security that manufacturers should be aware of
-Where secure crypto fits into the product design and lifecycle process
-Common IoT device security challenges that require a zero trust manufacturing approach

Device security experts in this panel include:

-Ted Shorter, Co-Founder & CTO at Keyfactor
-Ellen Boehm, VP of IoT Strategy and Operations at Keyfactor
-Kim Bybjerg, VP/Head of Continental Europe at Tata Communications & Chairman of IMC (IoT M2M Coucil)
-Paul Hampton, Senior Product Manager, Thales

Only 54% of enterprises feel confident their network security will protect them against cyber threats.
As organisations of all sizes continue to adopt connected technologies in support of Cloud Services, Mobility, CCTV, BYOD and Business Continuity; their increased network traffic expose them to increased data in motion security risks.

Thales has commissioned a global survey of IT and Cyber Security decision-makers and the findings are in. It highlights serious concerns about the security of data in transit across enterprise networks. Security vulnerabilities issues such as, emerging technologies and cyber-threats; the impact of legacy approaches to encrypting data in motion on business systems’ performance should be evaluated and acted upon immediately by organisations

Join our Cyber Security Specialist as we reveal the survey findings. Assess where your organisation ranks amongst these findings. Learn:

- How to take a more modernised approach to network encryption
- Why legacy approaches are not fit for our modern networks
- The advantages of a purpose built encryption solution for data in transit
- How separation of duties and policy-based management can support full data sovereignty
- Quantum readiness with Quantum Key Distribution (QKD)

A best practice for organisations focused on protecting sensitive data and adhering to compliance is to maintain control and own the keys used to encrypt sensitive data in all applications.

This is especially true for organisations looking to embrace online collaboration solutions like Microsoft 365 while working remotely, or that operate in highly regulated industries such as financial services, governments and healthcare and their sensitive data requires the highest level of control and security.


Join Ignacio Berrozpe, Cyber Securit Specialist and Senior Engineering Consultant to hear how Thales is helping enterprises protect sensitive data. During the session Ignacio will discuss:
• What exactly is Microsoft Double Key Encryption (DKE)?
• How does DKE help your Encryption Strategy?
• How to gain enhanced control and security over sensitive data in Microsoft Azure with Luna HSMs
• Best practice guidance for enterprises looking to adopt DKE

Multinational organizations face difficult and unique compliance challenges to successfully meet the ongoing waves of government regulations for data privacy and security. The most sweeping and aggressive regulation, the European Union’s General Data Protection Regulation (GDPR), went into full force in May 2018. Things get even more complicated with the July 2020 Schrems II decision from the EU’s top court that the EU-U.S. Privacy Shield was unlawful.

These new restrictions have many companies looking into more advanced encryption methods – like post-quantum crypto and Quantum Key Distribution (QKD) – to ensure data transmissions across the Internet or network are protected, secure, and compliant with local laws and regulations now and for years to come.

Data security experts from Thales and Quantum Xchange have come together to discuss how to create a dynamic, crypto-agile infrastructure for future-proofing the security of your data and communications networks.

One of the core reasons organizations migrate to the cloud is its ability to simplify various operations and improve business agility – although this is often not the case for security. According to 451 Research’s latest Voice of the Enterprise: Cloud, Hosting & Managed Services, Workloads and Key Projects study, security remains the number one barrier to adoption of public cloud ahead of cost, reliability and performance. This webinar will discuss the advantages, both technical and operational, of bringing your own security to the cloud especially for sensitive workloads.