With security of financial transactions and personal information a matter of key legislative and regulatory concerns, ensuring privacy, authentication, and data integrity is no longer an optional consideration. Sarbanes-Oxley (SOX), legislation that mandates the protection of financial reporting data, is a major concern for a diverse set of organizations.
Tumbleweed Solutions for Achieving SOX Compliance
Organizations need to provide proof of the completeness and accuracy of events that are included or are facilitated by the secure transfer of electronic information.
SecureTransport
SecureTransport provides a safe and fully compliant way of using public networks, such as Internet, for wholesale customer services and branch connectivity options. It enables the exchange of valuable and sensitive data over the Internet in a secure and reliable manner while supporting a wide broad set of open standard file transfer protocols and is available as an appliance or as software.
SecureTransport facilitates compliance with SOX regulations in four specific ways:
- Ensures completeness and accuracy of any data exchange, regardless of the protocol or client (browser, secure ftp, AS2, etc.)
- Creates a digitally signed (ie, tamper-evident) audit record of each such transfer, including time/date, data integrity check, and other relevant information in each record, and providing built-in reporting capability based on these records.
- Provides strong infosec controls, including:
- Strong password policies (composition, expiration, lock-outs)
- Security controls for user access, including IP screening and date/time controls
- Command-level controls, providing ability to disable or override behavior of various commands, e.g., delete, directory listing, etc.
- Creates snapshots of configuration
Secure Messenger
Secure Messenger identifies messages that require secure delivery based on a set of policies you define at the gateway. It then applies the most appropriate delivery method for each recipient. It works with the MailGate Email Firewall to inspect outbound email at the network gateway and automatically redirect messages that contain sensitive content to a secure, encrypted channel. This perimeter based design guarantees that all users comply with enterprise security policies and saves you from installing software on every desktop. And since it takes the burden of security decisions off the individual user; it also eliminates the need for training.
|
