egress switch introduction

©2008 Egress Software Technologies Ltd. All rights reserved. Proprietary and confidential.www.egress.com © Egress Software Technologies Ltd. All rights reserved

Egress Switch Overview


The Need to Share Information

2

• Sharing information outside your organisation is common• Some shared information is considered “sensitive”• How does the recipient handle sensitive information?• Is there a risk and how is it measured?

What information?• Business Plans• Customer Data• Financial Records• Intellectual Property• New Product Information• Spreadsheets• Tax Information

Who receives it?• Accountants• Auditors• Board of Directors• Business Partners• Contractors• Government Agencies• Marketing Firms• Outsourced Providers

How is it sent?• CD/DVD• Cloud Storage• Email attachments• FTP sites• Regular mail• USB sticks• Web File Transfer


Typical Challenges Sharing Information

• Solutions are often difficult to use:– Difficult to create and share secure information (Sender)– Difficult to receive secure information (Recipient)

• Solutions often don’t provide the level of visibility that today’s audit requirements demand

• Solutions often don’t provide the control that we need (embargo or revoke data)

3


3rd Party Data Breach Trend

4

36% of data breaches reported are from 3rd party incidents

2009 Annual Study: UK Cost of a Data BreachFebruary 2011

One year on from the HMRC data breach incident, the government has revealed that it has suffered an average of one data breach per week

since then

HMRC data loss recalled one year onNovember 2008

The disk, which was mislaid by the courier firm, contained personal details on about 2,000 staff

British Council staff data lostJanuary 2009


Information Commissioners Office

5

April 2010 - ICO gained power to fine organisations up to £500K for a data breach

"Any organisation which processes personal information must ensure that adequate safeguards are in place to keep that information secure."

From April 2010, the ICO will carry out audits to investigate organisations which it believes are failing to properly protect private data.

©2008 Egress Software Technologies Ltd. All rights reserved. Proprietary and confidential.6www.egress.com © Egress Software Technologies Ltd. All rights reserved

What is Egress Switch?

• Protection that stays with your information, no matter where it goes• An enabler to safely share any type of data with anyone• Simple to deploy and manage• Easy for end user to operate• Easy to obtain and cost effective to use with a SaaS business model• Innovative new data security product from a strong and growing company


Why Egress Switch?

Benefits• Retain control of information at all times

Exceeds limitations of current generation file encryption

• Full audit trail of who, when, where information is accessedSatisfies emerging audit requirements

• Simple end user experienceDesigned around sharing workflow, hides security steps

• Cost effective SaaS modelNo infrastructure required, start with users who share sensitive info

• Highly ScalableIntegrates with existing business processes and

7

Differentiators• Supports single user to Enterprise business• No complex infrastructure or trust

relationships required• Supports impromptu sending of secure files• Works with any media type or exchange

method• Real-time control (change or revoke access)

and audit collection• AES 256-bit encryption with FIPS 140-2

certified libraries• CCTM certified for UK Government• Cross platform unified solution

©2008 Egress Software Technologies Ltd. All rights reserved. Proprietary and confidential.8www.egress.com © Egress Software Technologies Ltd. All rights reserved

Solution Overview

3RecipientGains Access

• Receives package and authenticates

• Local enforcement

2Set Access andSecurity Parameters

• Select recipient(s)• Real-time changes• Cloud-based policy store

Create SecurePackage

• Drag & Drop interface• Any file, any media• Send to recipient

1

All delivered in a Software as a Service (SaaS) model


Next Generation Collaboration Software

9

Information Owner– Creates secure package– Sets access and security parameters– Sends secure package– Tracks activity of secure package

Information Recipient– Opens packages they are authorised to view – Requests access for other packages

Switch Server– Holds all security settings,

can be changed at any time– Keeps complete audit trail

of successful and failed access– Does not store any secure packages


Secure Email

• Transparently encrypt email message body including attachments

• Transparently encrypt email attachments• MS Outlook 2003/2007/2010 Add-in for seamless integration• Supports policy notes and disclaimers• Policy controls can enforce encryption based on content,

recipient, and type of information• Size restrictions can offer other transport mechanisms• Zero footprint web access client for remote workers and

shared machine access

10


Internet Server & Cloud Storage

• Integration with FTP(s), HTTP(s) and cloud storage• Egress hosted cloud storage available as part of subscription• Transparent integration with collaboration tools like MS

SharePoint• Built in FTP(s),HTTP(s) client and upload manager• Integrates with 3rd party storage providers• Data files are encrypted and compressed to streamline

workflow

11


Physical Media

12

• Transparently encrypt data stored on removable media• Integrated CD/DVD/Blue-ray burning application• Real-time access control of physical media (CD/DVD, USB etc)• Integration with Endpoint security products


Mobile Support

• Access secure email from any mobile device (iphone, Android, Win Mobile 7, Blackberry etc) via optimised web client

• Manage package security and access requests on the move• App for streamlined package access on Blackberry devices

13


Auditing & Alerts

• Detailed auditing & alerts of data lifecycle and user actions• Client & web based Package Library enables real-time

management of all secured information• Secure delivery reports• Geographic tracking of information in real-time• Role based audit access

14


Policy Engine

• Centrally administered user policies• Configure advisory and enforced usage policies• Policies can be configured based on:

- Data type, content & location- Recipient- Size of data- Media type- Encryption algorithm and compression

• Fully configurable user UI and end user experience

15


Recipient Experience

16

• Simple ‘one-time’ sign up process• Free of charge for recipients and sending data back to paying

subscribers• Simple click-once application streamlines recipient experience• Transparent access to data received by any transport mechanism• Zero footprint web based client


Switch Fusion

• Automate the sending of encrypted email for mass mail processes• Batch process the sending of sensitive information (e.g Bank

Statements, transaction records etc direct from a 3rd party DB)• Scheduled backup of sensitive information• Automatically upload files to secure FTP/Cloud storage servers• Integrate with complex back end systems

17


Egress Switch Features Summary

• Transparently encrypt email attachments • Encrypt information onto CD/DVD and USB removable media• Upload information securely to the internet (HTTP(s), FTP(s), MS

Sharepoint etc)• Control who can access the information you send• Immediately revoke access to data/files even after they have been sent• View a full audit of who, where & when information has been accessed

18

egress switch introduction

Documents

egress switch

information secure

control of information

sensitive information

information solutions

personal information

shared information

type of data