Updates from F, Y Toggle Comment Threads | Keyboard Shortcuts

  • Origin Storage 11:00 on 03/05/2012 Permalink | Reply  

    Deleting your data from computers, laptops and other devices 

    Advice from the Information Commissioners Office

    Getting rid of your computer? Laptops, mobile phones and other devices may contain personal information that you wouldn’t want others to see, such as passwords and credit card information.

    It’s important to properly delete any personal information before you sell or dispose of your hardware, so that it cannot be accessed by anybody else either by mistake or for malicious purposes.

    Personal data can be stored on any device with a permanent memory, including desktop and laptop computers, external hard drives, games consoles, mobile phones, tablets, faxes, printers, and removable memory such as that found in digital cameras. When deciding what to do, consider the type of media the data is stored on and whether or not this is easily accessible.

    Options for secure deletion

    Pros

    Cons

    Physical destruction

    This involves physically destroying the media so that it can no longer be used.

    Once destroyed, data on the media will not be recoverable except using specialist, expensive equipment.You can do this without specialist equipment.If you can remove the media you can destroy it separately and leave the device intact.This is a good method of destruction for removable media such as CDs and DVDs. You will have to replace the destroyed media with a new storage facility if you want to use the device again.If you are not able to remove the media from the device you will have to destroy the device itself.Removing the media may invalidate the warranty.Fragment particles raise health, safety and environmental concerns. Consider specialist help for devices with hazardous elements eg mobile phones and batteries.

    Secure deletion software

    This involves using software to overwrite data one or more times.

    Simple and cheap.The media can be reused once the overwriting is complete. Large drives may take some time to overwrite multiple times.Ineffective on some media such as write-once CDs.It may be difficult or impossible to remove the media from the device.

    Restore to factory settings

    Many devices offer a function to ‘Restore to factory settings’. This will return the device to the state in which you bought it.

    Can be used on devices which do not have removable or otherwise accessible storage media. This method relies on the device manufacturer to have implemented a secure wiping stage into the factory reset process.You should check with the device manufacturer to determine if this is sufficiently secure.

    Send to a specialist

    There are many organisations which will securely delete data from a range of devices and types of media. These organisations will destroy or overwrite your data on your behalf.

    A specialist organisation may be able to return, reuse or recycle your media or device after they have securely deleted your data. You will need to check the organisation’s processes to be sure that your data will be securely deleted.If you can, you should perform another secure deletion method or at least a ‘restore to factory settings’ before you send a device to a specialist organisation.

    Formatting

    Formatting media recreates the data structures and file system.

    A full format can be used in conjunction with overwriting to provide further assurance that data cannot be recovered. A reformat is not sufficient to securely delete data because the data can be easily recovered using freely available software.

    Some common types of hard drives

    Where will I find my data?

    Desktop and laptop computers will have a hard drive inside where your data is stored. Above you’ll see some common types of hard drives found in PCs and laptops.

    Don’t forget that you may have personal data stored on other memory types such as USB drives, CDs and DVDs and SD cards (eg in a camera or mobile phone).

    My data is in the cloud. How to I delete this securely?

    Securely deleting data from the cloud or other remote storage service cannot be achieved by you running overwriting software. You should contact your cloud provider to see what service they offer to securely delete the data.

    Where do I get overwriting software from?

    Software products which can perform the secure deletion of data are available from IT security firms. There are also other software products (often free) which you can download and use. However, when obtaining software from the internet you should make sure this comes from a reputable source and that you review evidence that the software has been tested against the claims that it makes.

    I cannot decide between physical destruction and overwriting.

    In choosing between physical destruction and overwriting, the main point to consider will be whether or not you want to use the media again. Physical destruction will completely destroy the media so it is only appropriate if you are sure that you do not want to use it again.

    Can I get someone else to securely delete data from my equipment?

    Yes. If you are not confident in performing the deletion yourself you can get assistance from a professional who has experience in this area.

    Read the article on the ICO website

     
  • Origin Storage 09:09 on 16/04/2012 Permalink | Reply
    Tags: ,   

    Trusted Computing Group Adds Members To Expand Trusted Security Solutions 

    Accenture, ARM, Battelle Memorial Institute, CMS Products, Origin Storage Ltd., RedHat Inc., Toyota Motor Corporation and Via Technologies, Inc. to Help Develop Trusted Computing Standards

    PORTLAND, Ore., April 5, 2012 – The Trusted Computing Group (TCG), a worldwide open industry standards organization, has added a number of members to work on the organization’s existing, widely adopted standards based on a hardware root of trust and to address emerging security concerns.

    New contributor members, who participate in specification development, include:

    • Accenture
    • ARM, Ltd.
    • Battelle Memorial Institute
    • Nationz Technologies, Inc.
    • RedHat, Inc.
    • Toyota Motor Corporation

    CMS Products, Origin Storage Ltd., SerialTek and Via Technologies, Inc., also have joined TCG as adopter members.

    “These companies recognize the importance and benefits of security based on the core concepts of trusted computing,” commented Brian Berger, TCG director and chair, TCG marketing work group. “The extensive market and technology expertise of new and existing members will allow TCG to extend its well-regarded approach to anchoring security in a root of trust to other computing environments such as embedded systems, virtualized platforms, mobile device security and cloud computing.”

    TCG’s board of directors is comprised of representatives from Advanced Micro Devices, Fujitsu Ltd., Hewlett-Packard, IBM, Infineon Technologies AG, Intel Corporation, Lenovo Holdings Ltd., Microsoft and Wave Systems with Dell and Nokia as elected contributor board members. TCG also recently announced an Associate membership for enterprise users.

    More than 500 million PCs and other devices include a Trusted Platform Module. Almost all storage vendors now support TCG’s Opal and enterprise specifications for self-encrypting drives, and TCG’s Trusted Network Connect architecture is supported in hundreds of products from networking infrastructure companies.

    The Trusted Computing Group (TCG) provides open standards that enable a safer computing environment across platforms and geographies. Benefits of Trusted Computing include protection of business-critical data and systems, secure authentication and strong protection of user identities, and the establishment of strong machine identity and network integrity. Organizations using built-in, widely available trusted hardware and applications reduce their total cost of ownership. TCG technologies also provide regulatory compliance that is based upon trustworthy hardware. More information and the organization’s specifications and work groups are available at the Trusted Computing Group’s website

     
  • Origin Storage 09:00 on 16/04/2012 Permalink | Reply  

    NHS trust loses personal data of 600 maternity patients, kids 

    Hands up whether patients’ info should be encrypted. Anyone?

    By Guardian Government Computing

    South London healthcare trust has admitted to losing two unencrypted memory sticks containing sensitive personal data about patients.

    The data breaches occurred in separate incidents. In the first breach, the device contained data relating to around 600 maternity patients, according to an undertaking signed by the trust with the Information Commissioner’s Office (ICO). A data controller employee downloaded the data on to a personal memory stick in order to do some work at home.

    “Due to not having received up to date information governance training, the employee was unaware that an encrypted device issued by the data controller should have been used,” says the undertaking.

    In the second incident, the lost memory stick contained the names and dates of birth of 30 children, and full audiology reports for a further three children.

    The ICO said that in both cases the data was put at “unnecessary risk” by not being encrypted. However, it added that both devices were later found, and said it was unlikely that they were readily accessible during the time they could not be located.

    According to the undertaking, there were also a further two incidents at the trust, but these related to data breaches involving paper files.

    The trust has now agreed to encrypt portable and mobile devices including laptops and other portable media used to store and transmit personal data. It has also pledged to make sure that staff are appropriately trained and made aware of the data controller’s policy for the retention, storage and use of personal data.

    “The data controller shall implement such other security measures as it deems appropriate to ensure that personal data is protected against unauthorised and unlawful processing, accidental loss, destruction, and/or damage,” adds the undertaking.

     
  • Origin Storage 09:59 on 05/04/2012 Permalink | Reply
    Tags: CD-R, , DVD-R, Encrypted media, , secure disk, Securedisk   

    Origin Storage Limited Introduces Data Locker SecureDisk – The Industries Most Secure Writable DVD and CD Media 

    DataLocker SecureDisk DVDs and CDs Provide FIPS 140-2 Validated AES 256-Bit Encryption for a Writable Disk that is always Secure

    February 2012 – DataLocker Inc.

    A leading developer of encrypted data storage products, today announced the industry’s most secure line of self- encrypting  DVD-R’s and CD-R’s with the DataLocker SecureDisk line.  The DataLocker SecureDisk DVDs and CDs combine AES 256-bit encryption and disc-burning functionality on a self-contained recordable CD or DVD with built in software for disc burning.

    Users can secure and encrypt any file to these FIPS 140-2 validated DVD’s and CD’s.  The DataLocker SecureDisk line makes it simple and easy to store, transport, and share sensitive data, records and files.

    “Our SecureDisk line is a low cost,  effective way of distributing sensitive information with co-workers, clients and patients” said Jay Kim, Founder and COO, Data Locker, “Keeping sensitive information encrypted is a must in today’s digital data- centric world.”.

    The Secure Disk line is designed for use with different versions of the Microsoft Windows OS.  The recording speeds are 52X with the CD-Rs having a capacity of 700 MB and DVDs of 4.7 GB.

    Andy Cordial, Managing Director of Origin Storage, added “by adding DataLocker SecureDisk to our Encryption portfolio, it now gives us a full complement of the best encryption solutions on the market, and for every foreseeable Encryption dilemma that our customers face, we now have all the solutions”

    Pricing and Availability

    The Data Locker SecureDisk CD-Rs are priced at £24.99  MSRP for a 10-pack or £179.99 MSRP for a 100-pack.  The SecureDisk DVDs are priced at £29.99 MSRP for a 10-pack and £249.99  MSRP for a 100-pack.  For more details on this product, please call Origin Storage Limited

    About Data Locker
    Data Locker is an innovative manufacturer of secure data storage devices. Headquartered in Overland Park, Kansas, Data Locker devices combine superior convenience and usability with state of the art security. Data Locker is “Simply Secure.”.  For more information, please visit http://www.datalockerdrive.com.

    About Origin Storage
    Origin Storage Limited is one of Europe’s premium storage solution distributors, having specialised in matched hard drive solutions for servers, notebooks and desktops for the past ten years. With our own assembly areas, technical consultants and testing facilities, we have the ability to support products for all major manufacturers, including Dell, HP, Toshiba and Lenovo, we are also the only distributor in the UK for Thecus NAS Solutions that has our own independent Thecus technical team.

    Origin also provide a range of Data Encryption devices, from the External USB 3, 256-Bit AES Hardware Encrypted Solution, the DataLocker 3 and the FIPS 140-2 Validated DataLocker 2 and a retrospective laptop upgrade to Hardware Encryption with our Enigma offering, all now complemented with Wave / Safend Encryption Authentication software. We also supply BTI, the leading manufacturer in the US for batteries and adapters.

     
  • Origin Storage 10:51 on 04/04/2012 Permalink | Reply
    Tags: ,   

    Wave Systems Gets U.S. Army Contract for Encryption Management for Vehicle-Based Mobile Computers

    Wave Systems, a Massachusetts-based provider of security, data protection, and encryption solutions, today announced that it has received a contract from the United States Army to provide labor, equipment and management to implement solutions for the Army’s self-encrypting drives (SEDs).

    According to Wave, the Army is exploring the enablement of SEDs with Trusted Platform Modules (TPMs) in its systems in order to reduce the risk of sensitive data falling into enemy hands if such enemies were able to get their hands on hardware.

    Wave did not disclose the value of the contract, but did say that its fees under the contract would be modest. Despite the modest contract value, the company views it as as an important application of trusted computing solutions by the Army, and the news appeared to please investors, with shares of Wave Systems (NASDAQ:WAVX) closing up over 18 percent at the close of trading on Tuesday.

    Wave also said that the Army asked the company to provide expertise in the area of SEDs and TPMs to help maximize the security advantage of these technologies while minimizing the disruptive impact to Army’s fielding and sustainment. Wave will also provide engineering support to Army missions in support of global operations.

    “This contract affirms the value and leadership that Wave brings in leveraging embedded security for mobile endpoints operating beyond the network perimeter,” said Steven Sprague, CEO for Wave. “We’re delighted to have the opportunity to help ensure that mission-critical data and communications remains under the secure control of central command at all times.”

    Trusted computing standards provide capabilities that can be leveraged in many mission systems where device assurance and integrity and data protection are required.

    According to the Trusted Computing Group (TCG), the international industry standards group that develops specifications and standards for Trusted Computing Technology, the term “trusted computing” refers to applications that leverage hardware-based “roots of trust” at the edge of the network and at the endpoints – sometimes referred to as “hardware anchors in a sea of untrusted software” – for higher assurance.

    As the adoption of trusted computing continues to grow across all platforms, there are many ways this industry-standard technology can be leveraged to reduce costs and improve security and assurance of any computing system.

    Wave products are all available from Origin Storage.

    Please see http://www.originstorage.com for further details

     
  • Origin Storage 08:49 on 19/03/2012 Permalink | Reply
    Tags: Wave safend infosecure   

    Safend Data Protection Suite a Finalist for 2012 SC Magazine Europe Awards 

    London, UK — March 12, 2012 Wave Systems Corp.  announced today that it was named one of four finalists for a 2012 SC Magazine Award for its Safend Data Protection Suite, among the IT security industry’s most prestigious accolades.

    Competing in the “Best Data-Loss Prevention” category, Wave made the judges’ shortlist on the merits of its Safend Data Protection Suite. The suite provides an integrated endpoint security toolkit that offers enterprise-wide port control, disk and media encryption, content inspection, data discovery and classification. But what makes it stand out from competitive solutions is the powerful, yet intuitive control the suite grants through a single management server, single management console and a single lightweight agent.

    Paul Fisher, SC Magazine UK editor, said: “This was a record-breaking year for entries for the awards and I believe that this is represented in the quality of the nominees.”

    You can see Wave / Safend at Origin Storage @  Infosecure Europe Earls Court, London 24-26th April 2012 – Stand G80

     
  • Origin Storage 14:10 on 14/03/2012 Permalink | Reply
    Tags: , data theft data breach encryption   

    Scottish charity signs ICO undertaking following personal data theft 

    A Scottish charity – based in Glasgow – breached the Data Protection Act after two unencrypted memory sticks and papers containing the personal details of up to 101 individuals were stolen from an employee’s home.

    The information included peoples’ names, addresses and dates of birth, as well as a limited amount of data relating to the individuals’ health. The charity – Enable Scotland (Leading the Way) – promptly reported the incident to the ICO in November 2011 and informed those individuals affected.

    The ICO’s investigation found that the information should have been deleted from the memory sticks once it had been uploaded onto the charity’s server. The charity had no specific guidance for home workers on keeping personal data secure, and portable media devices used to store sensitive personal information were not routinely encrypted.

    Ken Macdonald, Assistant Commissioner for Scotland said:

    Organisations that use memory sticks to store personal information must make sure the devices are properly protected. Encrypting the data means that the information will remain safe even if the device is later lost or stolen. It is also important that employers provide home workers with guidance on how to keep any personal data taken outside of the office secure, as this is potentially when the information is most vulnerable.

    We are pleased that Enable Scotland has taken action to keep people’s information safe, however this incident should act as a warning to all charities that they must ensure that personal information is handled correctly.”

    Peter Scott, Chief Executive of Enable Scotland, has now signed an undertaking, committing the charity to improving its compliance with the Data Protection Act. This includes making sure laptops used to store sensitive personal data are encrypted. Hard copy files will only be removed from the office when absolutely necessary and will contain the minimum amount of personal data required. Guidance will also be provided to home workers, to ensure that any personal data taken outside of the office is kept secure.

     
  • Origin Storage 14:40 on 07/03/2012 Permalink | Reply
    Tags: WD western Digital   

    Western Digital corp. announced the availability of its third-generation WD S25 SAS hard drives, serving the performance-optimized, mission-critical enterprise server and storage market.

    Shipping now, the new 2.5-inch, 10,000 RPM, WD S25 with SAS 6 Gb/s interface hard drives offer IT professionals a more advanced array of reliable and efficient, performance storage, available in capacities of 300GB, 450GB, 600 GB, and 900GB. The WD S25 line is designed for the demanding applications such as online transaction processing and multi-tiered networked storage arrays.

    Continuing our commitment to the industry’s fastest-growing segment – 2.5-inch drives – WD is updating our small form factor SAS offering with the advanced technology of our third-generation drive, including a new 900 GB capacity point,” said Darwin Kauffman, VP enterprise storage solutions, WD. “Our latest generation of WD S25 SAS drives offer a powerful combination of enterprise-class performance and industry-leading reliability that is ideal for demanding high-performance computing and mission-critical environments. WD is also delivering higher capacity offerings and the power efficiency of the small form factor footprint, providing the most efficient storage solution for IT professionals and enabling lower TCO.”

    The new family of WD S25 SAS drives has the speed required to service any enterprise need, delivering 6 Gb/s SAS interface. With its small form factor allowing for more system airflow, resulting in lower cooling costs for customers, the latest WD S25 SAS drives require less than 8 watts to operate and have a 2.0 M hour MTBF rating.

    WD’s third-generation of 2.5-inch SAS drives include support for T10 Protection Information (PI) for data integrity, and provide optional models that feature drive-level self-encryption that meets the Trusted Computing Group’s specification for Enterprise Class A encryption.

    Availability
    WD S25 SAS hard drives are shipping to OEMs, with broader availability at select resellers and distributors worldwide later next quarter

     
  • Origin Storage 10:31 on 07/03/2012 Permalink | Reply
    Tags: wave safend data protection endpoint security   

    Safend Data Protection Suite Receives Security Industry’s Global Excellence Award for Endpoint Security 

    The Info Security Products Guide Honored the Safend Data Protection Suite in San Francisco Last Week

    March 6, 2012 Wave Systems Corp. (NASDAQ:WAVX http://www.wave.com) announced today that the Info Security Products Guide, a leading information security research outlet in the industry, has named Safend’s Data Protection Suite winner of the 2012 Global Excellence Awards in Endpoint Security. Moreover, Robert Pittman, Chief Information Security Officer for the County of Los Angeles, CA, and a longtime Safend user, was named CSO of the Year. The security industry celebrated its 8th Annual Global Excellence Awards in San Francisco, CA on February 29, 2012.

    Safend’s Data Protection Suite is a leading endpoint data security suite that delivers visibility, control, and protection of enterprise endpoints. The suite guards against corporate data loss and theft through its content discovery and inspection, encryption and comprehensive device and port control.

    The County of Los Angeles named Robert Pittman as Chief Information Security Officer in 2008, and he brings nearly 15 years of experience in information security to the position. With his appointment, the county initiated the Countywide Information Security Program, utilizing Safend’s Data Protection Suite as a key component.

    “We are proud to receive the Info Security Products Guide’s recognition for Safend’s Data Protection Suite this year,” says Edy Almer, Vice President of Business Development at Wave. “This recognition validates for consumers that an easy-to-use product like ours can guarantee connectivity and productivity, without sacrificing security or performance. We are further honored that a recognized leader in information security, such as Robert Pittman, chose to use our Data Protection Suite, and wish him continued success,”

    Wave acquired Safend last September. Additional information on the Safend Data Protection Suite can be found here.

    About Info Security Products Guide
    Info Security Products Guide sponsors leading conferences and expos worldwide and plays a vital role in keeping end-users informed of the choices they can make when it comes to protecting their digital resources. It is written expressly for those who are adamant on staying informed of security threats and the preventive measure they can take. You will discover a wealth of information in this guide including tomorrow’s technology today, best deployment scenarios, people and technologies shaping info security and market research that facilitate in making the most pertinent security decisions. The Info Security Products Guide Awards recognize and honor excellence in all areas of information security.

    All Safend Products are now available from http://www.originstorage.com

     
  • Origin Storage 12:55 on 06/03/2012 Permalink | Reply
    Tags: ,   

    Data Encryption Software: Avnet Servers Stolen, ICO Looking Into Breach 

    The UK’s Information Commissioner’s Office is looking into a data breach that occurred in December 2011. According to channelregister.co.uk, Avnet Technology Solutions suffered a data breach on December 21 when “unknown parties broke into” their offices. Could the use of data encryption software mollified the ICO? Probably. Was it an option? Well…maybe.

    Server Hard Disks Stolen

    The Haslingden, Lancashire offices of Avnet were broken into on December 21, 2011. Server hard disks — and not the servers themselves — were stolen. These contained data on staff and customers related to the acquisition of Bell Micro. While channelregister.co.uk originally reported that addresses, bank account numbers, sort codes, passport numbers, and national insurance numbers were stolen, it was later contacted by Avnet, and a correction was issued: passport and national insurance numbers were not part of the stolen data.

    Avnet would not confirm how many people were affected by the breach, or how many hard disk drives were stolen.

    The thing about servers is that, generally, people don’t want to use disk encryption software on them because of its negative impact on system resources. It depends from server to server, of course: if a server is accessed every five seconds, then encryption software would probably not impact it negatively. However, if the server is running at 100% all the time, then that computer needs all the resources that can be spared and then some.

    What kinds of servers were involved in the Avnet case? We don’t know. We do know, however, that the breached data was probably not needed on a 24/7 basis. Of course, what else was on these servers is unknown, so it’s hard to decide whether encryption would have been a viable data security measure in this particular case.

     
c
compose new post
j
next post/next comment
k
previous post/previous comment
r
reply
e
edit
o
show/hide comments
t
go to top
l
go to login
h
show/hide help
esc
cancel