In an increasingly connected world every enterprise needs to share critical business information with external ente
rprises in addition to sharing data inside the organization.
Often this data exchange is on an ad hoc basis during a one off transaction or short term business relationship.
This information may be highly confidential intellectual property, patient health records, sensitive customer data or valuable financial information.
The need to share information presents a serious security challenge to many organisations.
How do you transfer data from one person or company to another in a secure, auditable , reliable, compliant and easy to use manner?
Information can be at risk of loss or exposure when it is being sent from one person to another, depending on the file transfer process that is used.
Email is the easiest and most common method used, but unfortunately, it is inherently
insecure and file attachment limitations can prevent files over 5Mb being delivered.
FTP is sometimes used, but not only is it insecure, it's hard for the average non technical person to use and you generally need at least the same software, if not the same version, at both ends of the transaction.
There have been some recent instances of unencrypted but highly sensitive, information being burned to CD-ROM and sent via courier.
All three of these common file transfer processes – email, FTP and CD-ROMs – are risky, normally non-auditable and are clearly "non-compliant" with national and international legislative requirements and industry standards such as PCI DSS governing secure information handling procedures.
Protecting data is a matter of understanding how and when data is at risk, and finding appropriate methods to eliminate those risks.
Laws such as the Sarbanes-Oxley Act (SOX), the Health Insurance Portability and Accountability Act (HIPAA), the Graham-Leach-Bliley Act (GLBA), in the US and the Data Protection Act in the UK provide regulatory guidelines governing what companies must and must not do with the information they store and transmit.
Where electronic records are concerned, it is the role of management to take those guidelines and implement appropriate business and technology measures to ensure legal compliance as well as meeting corporate policies.
In the case of a managed secure file transfer solution, the organisation needs to provide workers with a cost effective and flexible file transfer technology which addresses the organisations security and compliance needs, works seamlessly throughout the extended supply chain and avoids putting an unreasonable burden on normal work processes or creating workflow friction.
SafeTok Send is a secure managed file transfer system, provided on a monthly subscription service, which ensures compliance with current data protection regulations and protects critical business information by:
rson and company to company.SafeTok Send users can demonstrate that they are proactively: