Embed
Email

Encrypted_Email_--_Users_Unknowingly_Put_Banking_Data_at_Risk_bs

Document Sample

Shared by: Dave Filer
Categories
Tags
Stats
views:
0
posted:
1/14/2012
language:
pages:
2
Title:

Encoded Email -- Customers Unconsciously Put Banking Data in danger





Number Of Words:

596





Summary:

PGP is among the most typical techniques of safeguarding financial data that clients submit through banking

and financial websites.







Key phrases:

banking data, financial data,pgp







Body Building:

PGP is among the most typical techniques of safeguarding financial data that clients submit through banking

and financial websites. PGP provides excellent data file encryption, however, many customers leave

sensitive PGP-encoded data vulnerable without knowing they?re doing this.





Banks, lending institutions along with other banking institutions use PGP to secure sensitive data, like a

application for the loan, before delivering it through email. PGP helps make the information is extremely

difficult for anybody apart from the intended recipient to decrypt. Regrettably, after finding the data the

recipient frequently unconsciously produces an chance for thieves to steal the information.





Readers decrypt PGP protected emails to see the sensitive contents. Security-savvy customers know to that

particular after reading through the content they have to either permanently remove the encoded message in

order to save it in the original encoded condition. But a lot of customers in banking institutions that

people?ng labored with don?t do either. Rather they save the decrypted version from the email where thieves

can certainly access the data. Actually, Microsoft Outlook prompts customers in order to save encoded

messages inside a decrypted form every time they close a decrypted message. Since neither Outlook nor

PGP alerts customers about the possibility of saving the content, most customers click ?Yes? and save the

decrypted message.





When decrypted, the information is susceptible to attack by infections, adware and spyware and computer

cyber-terrorist. Some professionals dismiss the threat by offering the security their fire walls and invasion

prevention systems provide. Fire walls are almost useless when Computers are have contracted data

cropping infections or adware and spyware, so depending on fire walls to safeguard data saved on

Computers is similar to placing a lock on the screen door.





Even if fire walls do have the ability to keep Computers free from any infections or adware and spyware,

what goes on once the theif is someone within the organization?





Based on the FBI, associates ? employees, companies and partners ? commit nearly 70% of data thievery

crimes. They steal data from the organization network or they steal the computer systems & hardware that

keep data. Sometimes they can ?buy? the information by buying decommissioned computer systems that

organizations target employees. A firewall is going to do absolutely nothing to safeguard decrypted data

saved around the Computers these attackers gain legitimate use of.





We?ve implemented a safer method to safeguard data posted through websites. Using MemberProtect, our

clients have removed the decrypted data thievery risk. MemberProtect doesn't depend on email delivery and

rather stores data in the distinctively-encoded database. Managers control who are able to access the secure

web-based viewer to determine the information posted through their websites. MemberProtect decrypts the

information to permit viewing, but unlike Outlook, MemberProtect always re-encrypts the information once

the user is performed viewing it.





MemberProtect also produces an audit trail that auditors and security managers may use to determine that

has seen, modified and erased data. Additionally, it tracks logons, attempted logons and user interactions

using the protected system. MemberProtect stores this audit login another encoded database to avoid log

tampering by system managers or any other associates. When integrated with invasion recognition systems,

the machine are capable of doing a diploma of self protection by cutting connections with suspicious clients

and immediately notifying managers of suspected hack attempts.





In case your budget cannot support a method like MemberProtect (roughly $3,000 to $5,000 for

implementation on the bank website), then PGP continues to be a suitable security option, however it?utes

critical that you simply train all customers to:





Never save decrypted messages

Never share their PGP pass phrase

Always create a backup of the private key since if the secret is lost, the messages can't be decrypted









Online Backup with Virtual Office Tools!


By registering with docstoc.com you agree to our
privacy policy

You are almost ready to download!

You are almost ready to download!