|
Security and Compliance Manager
Time Navigator Security and Compliance Manager (SCM) helps users meet increasingly stringent regulatory requirements by providing robust data protection at all stages of data backup and reliable long-term archive functionality. The application includes the following features:
Advanced File Encryption/Decryption
Utilizing public-key cryptography and a wide range of strong and certified ciphers,
data is encrypted throughout the data lifecycle before it leaves the primary storage
and remains encrypted while it is stored on the storage media. Whether it resides
on disk or tape, it is impossible for an unauthorized party to read the data.
Advanced Network Encryption/Decryption
With more than 50% of security attacks occurring on private networks, it is imperative
to build a secure tunnel to ensure that the valuable digital assets cannot be read
while transferred from one storage media to the other.
Digital Signatures
Using digital signatures can help keep data intact. Using one-way hashing, both
the information to backup and the digital signature is sent over the network. When
the backup and archive data reaches its destination, a new hash is created from
the original data and compared with the original hash to ensure the information
has not been altered. A similar approach is used to guarantee non-repudiation of
long-term archives for compliance and litigation purposes.
Hierarchical Key Management
An integrated hierarchical certificate infrastructure prevents impersonation and
ensures that the information backed-up or recovered has been sent by a trusted computer.
The same mechanism is also used to ensure that only authorized users recover data
they are allowed to access.
Compliance Policy Enforcement
Different data has different importance and consequently different compliance requirements.
It is necessary to match and enforce the recommended encryption and hash algorithms,
retention periods and password lengths to different classes of data. The system
needs to have the flexibility to apply different levels of security, depending on
the value of the protected information.
Deep integration with the backup and archive classes
The key advantage of Time Navigator SCM is that all the security features described
are directly applied to the classes of data created when the backup environment
is configured. This gives users the flexibility to apply different levels of security,
depending on the value of the protected information, and introduces the notion of
a secure backup.
Audit Trails
All the regulations in place today require detailed audit trails about the activity of the regulated information. When a set of data has been selected in a backup class and a security rule is associated to it, Time Navigator SCM records all activity and stores it as a secure file, which is accessible for possible audits.
Back to Atempo
|