Compliance & Audit

Meeting today’s complex regulatory requirements

With the growing complexity of doing business today, including increased regulatory compliance requirements and market scrutiny, organizations are driven to adopt a sound information protection strategy to safeguard their organization’s sensitive data. The security of an organization’s information is critical to its success. Confidential data demands around the clock protection from a barrage of threats from both inside and outside the company. These might include hackers and even disgruntled employees.

The responsibility for IT security lies with senior management and the consequences of getting it wrong can be serious. Not only can a company’s assets be at risk, but also if private customer details fall into the wrong hands, fines, negligence claims, incarceration and other legal actions are a likely outcome. Not to mention damage to the company’s reputation and loss of trust suffered as a result of negative publicity.

Today, there are a growing number of regulations worldwide related to the protection of private and sensitive data. While some are focused on specific industries, others are concerned with general privacy or the reporting of data loss incidents when they happen, including:

• Payment Card Industry Data Security Standard (DSS) – International
• Gramm-Leach-Bliley Act (GLBA) – USA
• Sarbanes-Oxley Act (SOX) – USA
• Basel II Accord – International
• Euro-Sox – European Union
• Financial Instruments and Exchange Law of 2006 – Japan
• Health Insurance Portability & Accountability Act (HIPAA) – USA
• 95/46/EC European Union (EU) Directive – European Union
• Bundes-Datenschutz-Gesetz (BDSG) – Germany
• Data Protection Act - UK
• California Senate Bill 1386 - USA

Personal Information Protection & Electronic Documents Act (PIPEDA) – Canada

SafeGuard Enterprise provides organizations the optimum solution necessary to meet today’s compliance and data privacy regulations, by managing all aspects of IT security effectively and effortlessly, including:

• Consistent definition, implementation and enforcement of company-wide security policies
• Report, audit, and log capabilities to monitor regulatory compliance requirements
• Centralized state-of-the-art key management that makes storage, exchange, and recovery of keys simple and easy to use
• Comprehensive encryption protection of data on all kinds of devices: laptops, desktops, removable media, PDAs, CD/DVDs, e-mail, etc.
• Quick and effective integration with existing IT and security infrastructures as well automation of administrative tasks through open interfaces
• Personal Information Protection & Electronics

=> A number of Utimaco’s solutions have received security standard certification, including FIPS, Common Criteria, CS-NfD, and more.