Physical/IT Security Convergence Visionary – Merge physical security with IT security and become a leader in the field

The trend is toward a converged security department with physical security and IT security under one umbrella.  It’s the rare leader who has the skills to build this converged group.  The products below will assist you in your quest.

Encrypted USB – Military Grade security for your corporate USB keys

One of the easiest places for organizations to experience data loss and corporate espionage is USB keys.  It should be mandatory that all employees only use an authorized, encrypted USB device.  Choose one that integrates with your authentication technology and that embeds single sign-on for easy maintenance.  Be sure its robust enough to be dropped in water and even run over by heavy equipment.
> IronKey

Top ten reasons to buy IronKeys:

1. Most secure USB key on the market
2. WaterProof and WeatherProof
3. Tamper Resistant
4. RSA and other authentication tokens can be used from within IronKey – carry less on your keychain
5. Eliminate the need to remember numerous passwords since IronKey stores them securely
6. Better for the environment – more read/writes than normal USB keys
7. Better for the environment – keys can be re-provisioned when employees leave
8. Protect against rogue employees, administrators can “silver bullet” and deny, disable, or destroy data
9. Lose your key and don’t feel guilty – your data is safe!
10. Run a virtual desktop from the key with vmWare/Moka 5 support – great for disaster recovery planning

Encrypt files and disks – Notebook theft and intercepted files leave your organization vulnerable

There are many types of encryption technology available on the market today.  The best way to choose a solution is look for an integrated console that can manage files, hard disks, non-encrypted USB keys, and email; then choose only the modules your organization needs.
> Drivelock

Endpoint security –  Ensure only approved devices access your network

External and mobile devices can play havoc for IT Security.  A non-approved mobile device can deliver a virus, but it can also be used to hack data and retrieve sensitive information.  In addition, an approved device can be used to transfer data to another machine and its important you know this transfer happened.  End point security technology brings a balance between security and enabling the mobile workforce.
> DriveLock

Risk Assessments:  an IT perspective – Eliminate compliance silos

SOX, BASEL II, COBIT, FISMA, NERC, PCI, ISO, FISAP, COBIT, HIPAA – where in the world do you begin, and how do you ensure that you can re-use information gained through previous assessments.  Compliance is a huge overhead on any organization so making the process more efficient should be a goal.  Mandatory requirements are:  easy delivery of surveys (including surveys that are specific to your organization), robust reporting, and a recommendation knowledgebase.
> Modulo

Key Management – Secure key drop boxes and key cabinets that are software enabled

If they get the keys they get the asset.  Although corporations are working towards fully access control enabled buildings, old fashioned keys will always be around – older offices, fleets, cabinets – you can think of many keys that require securing within your facility.   You may even want to lock up your access cards.   An access control integrated key cabinet with audit logging is the perfect contemporary solution for an old problem.
> KeyKeeper

Server Redundancy and Fast Failover –  Mission critical security and emergency management software can survive a hard drive failure

For each software solution you implement, its important to decide if it is mission critical to your organization.  Emergency management and security software more than likely is.  Ensure that your server-based solutions have a “hot” stand-by ready to failover within seconds of a hardware loss or other catastrophic failure.  A best practice is to ensure this stand-by server is located in another geographic location.
> DoubleTake

> Learn about FutureShield security management products