Encryption Procurement: Setting a Standard

by Stephen Northcutt, Barbara Filkins
Sept. 1, 2017 0 comments SANS Institute Encryption & Authentication best practices encryption & vpns

How can an organization balance its encryption needs against the cost and complexity of an enterprise solution? The complexity, stemming from an expanded mobile workforce, greater exposure of essential systems to adverse and catastrophic events, and increasing regulatory compliance, demands an approach to information security that protects the confidentiality, integrity, and availability of data both in motion and at rest. Data encryption is a key element in modern enterprise security strategies to protect data. Large, complex organizations need an effective and flexible solution that supports enterprise privacy and security policies, provides strong encryption at the user and device level, allows centralized management and recovery, and takes into consideration the uncompromising forces of lower budget/costs, demands to

https://www.sans.org/reading-room/whitepapers/analyst/encryption-procurement-setting-standard-34655