Home > Security Channel Tips > Information Security Threats > Full disk encryption: A hot opportunity for VARs
Security Channel Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

INFORMATION SECURITY THREATS

Full disk encryption: A hot opportunity for VARs


Mike Rothman, Contributor
09.10.2008
Rating: --- (out of 5)


Security Channel Update
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


Solution provider takeaway: Solution providers will learn why full disk encryption is such a hot market right now, and how to make the most of this opportunity.

Full disk encryption has been a hot market for the past two years. In a macroeconomic environment where things are slowing down, full disk encryption is heating up even more and that means it should become one of your top priorities to bring forward to your customers.

The reasons are clear. Let's go through the typical scenario:


  • Lost (or stolen laptop) = lost data = disclosure to customers = bad day for customer = good day for reseller who has a product to solve the problem.
  • You don't have to look too hard to find examples of laptop theft creating a lot of angst for organizations. The folks who run the fast pass airport security program Clear recently "misplaced" a laptop containing information on 33,000 customers. The nature of this personal information would make it easy for an attacker to perpetrate significant identity fraud. The laptop wasn't encrypted either, so anyone who accessed the machine would have free run of that data.

    Let's look at another example. Charter Communications had a dozen laptops containing information on more than 9,000 current and former employees stolen from one of its offices. The main company had to disclose to its employees (who then promptly told the press) that their privacy was potentially compromised.

    I could go on, but it's not a lot of fun to read example after example of organizations suffering dire consequences for losing laptops.

    In the security industry, there are few quick and easy answers to solve problems. But it is easy to ensure that


    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


    RELATED CONTENT
    Information Security Threats
    UTM appliances bundle security, give VARs multiple revenue streams
    Remote vulnerability scanning: Process, roles and responsibilities
    Data breach prevention techniques: Helping customers avoid data breaches
    Top security tips for solutions providers
    Common injection attacks
    Checklist: Five steps to assessing a customer's antivirus protection
    Polymorphic malware attacks and in-line scanning
    Use hosted email filtering for virus protection
    Re-route virus traffic to the bit bucket
    Five steps to cleaning a virus-infected Exchange server

    Data Leak and Data Theft Protection
    Sophos integrates encryption into endpoint, email security
    Maintaining your customers' security amid layoffs
    Making the case for 'live' incident response
    Mass. data protection law 201 CMR 17: How to get customers ready
    Data breach prevention techniques: Helping customers avoid data breaches
    PGP partners with Avnet to boost channel play
    Data protection services offer revenue for security solution providers
    What are the best data leakage prevention strategies for my clients?
    Data security: Alternatives to data leak prevention
    XPath, command and directory traversal injection attacks

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary


    private data isn't at risk when a laptop is stolen -- just encrypt the disk. Most of these stolen laptops are pilfered to sell on the gray market -- the attackers don't really want the data. By encrypting the hard disk, criminals are not able to analyze the disk and find personal information. It also means your customer does not have to disclose the lost laptop to customers, employees, law enforcement, etc.

    There is a clear ROI for this expenditure. Just ask your customers what they pay outside legal counsel per hour. In a typical disclosure situation they are looking at hundreds, if not thousands, of billable hours with an attorney. In comparison, the cost to deploy full disk encryption is a drop in the bucket.

    Now that you are on board with the short-term opportunity that full disk encryption presents, how do you know what to sell to your customers? As with most other security markets, you've got plenty of options to add to your line card.

    I don't know much, but I know tomorrow will bring a sunrise and another data breach due to a lost laptop. That creates an opportunity for resellers to help customers solve this short-term pain. Over time, this will be an endpoint feature, but for the next 12 to 18 months there is a lot of opportunity to upsell and monetize this screaming need.

    About the author
    Mike Rothman is president and principal analyst of Security Incite, an industry analyst firm in Atlanta, and the author of The Pragmatic CSO: 12 Steps to Being a Security Master. Get more information about the Pragmatic CSO at http://www.pragmaticcso.com, read his blog at http://blog.securityincite.com, or reach him via e-mail at mike.rothman (at) securityincite (dot) com.


    Rate this Tip
    To rate tips, you must be a member of SearchSecurityChannel.com.
    Register now to start rating these tips. Log in if you are already a member.




    DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

    HomeNewsTopicsITKnowledge ExchangeTipsMultimediaWhite PapersBlogsEvents
    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    SEARCH 
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2006 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts