Kanguru is proud to announce that the Kanguru Defender Elite encrypted USB flash drive has received FIPS 140-2 certification from the US and Canadian Governments.  This hardware encrypted device meets Level 2 security requirements, which validates its use for protecting sensitive government information.  Defender Elite also meets Level 3 requirements in several key security catagories.  The FIPS 140-2 standard is recognized internationally and by a number of other industry regulations, including HIPAA (PDF) for Healthcare.

Check out our website for more product details, and read our previous post about remote management.

Data Security, Government, Portable Storage

The Office of Inadequate Security has a list of newly reported data breaches provided by the Maryland Attorney General.  Many of the incidents involved stolen laptops, external hard drives or flash drives that contained sensitive information and were not properly encrypted.

More information about the Maryland Personal Information Protection Act (PIPA) can be found at the AG’s website.

Data Security, Portable Storage

Kanguru is pleased to announce a new technology partnership with anti-virus provider BitDefender.  Read the full announcement.

BitDefender is a global leader in virus and malware protection.  The company’s products have won numerous awards and recognitions, including a #1 rating in protection from Consumer Reports in 2008.

Kanguru and BitDefender are teaming to provide onboard anti-virus scanning on the Defender Elite encrypted USB drive.  All files stored on the drive are scanned to prevent malware from spreading through USB ports.  Kanguru is including a 1-Year subscription with every purchase of the Defender Elite.

Data Security, Malware, Portable Storage

Integrated anti-virus and malware protection for the Kanguru Defender Elite encrypted flash drive will be going live next week.  All Defender Elite drives will come standard with a one-year A/V subscription.  Defender Elite drives that have already been purchased can be updated to include the new A/V functionality by using the “Check for Updates” menu option.  Contact Kanguru for further info.

In the next few days, Kanguru will be announcing a strategic partnership with one of the industry’s leading antivirus vendors.  This partnership combines the expertise of two data security leaders to create one of the world’s most secure flash drives.

Malware delivered by USB devices is becoming one of the biggest concerns for Public-Sector and Business security professionals.  We’ve highlighted some of the risks here and here.

Data Security, Malware, Portable Storage

In early 2009 the National Archives announced that it had lost a 1TB portable hard drive containing sensitive information from the Clinton Administration.  Since none of the data was encrypted, the social security numbers and other personal data could easily be used to commit fraud.  NARA had no remote management capabilities for the device, so there was really no way for them to track down the drive short of offering a substantial reward.  Now they have announced exactly that - Federal Office Offers $50,000 Reward for Missing External Drive.

Upgrading hard drives and flash drives to encypted models with remote management capabilities would have cost less than $50,000 plus credit monitoring costs.  Public and private companies can face even bigger costs than NARA when it comes to a data breach.

Data Security, Government, Portable Storage

According to the Toronto Star, the private data of 8600 Toronto teachers is now in the hands of thieves after unencrypted laptops were stolen from the Ontario Teachers’ Insurance Plan.

The theft has served as call to action for OTIP:

OTIP spokesperson Julie Millard said the company is racing to finish a process it had started last fall to encrypt all data it holds on some 160,000 policy-holders.

“Because of what’s happened we’re working faster to encrypt all our communication devices by March—laptops, BlackBerries, even USB keys,” Millard said of the non-profit company owned by the province’s teachers’ unions.

Data Security, Portable Storage

Kanguru has just published a new whitepaper that explains how to use data cloning to roll out a new Operating System.  Transitioning to a new OS, like Windows 7, can be time-consuming and tie up your IT staff for weeks or months.  Using automated data cloning devices like the Kanguru Hard Drive Duplicator can greatly speed up the process.

This paper (PDF) explains the process of data cloning and the advantages of hardware-based duplicators.  It also has a step-by-step guide to creating a master system image and provisioning multiple computers at once.  Rather than installing a new OS, searching for system drivers and then reinstalling all of the applications, you can create one master disk and simply replicate it.  The time-savings easily cover the cost of the duplicator.

Duplication

The Ponemon Institute released their annual “U.S. Cost of Data Breach Study”, which found the average data breach cost rising from $6.65 Million in 2008 to $6.75 Million last year.  From Network World:

In tallying the cost of a data breach, Ponemon Institute looks at several factors including: the cost of lost business because of an incident; legal fees; disclosure expenses related to customer contact and public response; consulting help; and remediation expenses such as technology and training.

The study found that companies that have a CISO or similar position did much better at managing data breach costs.

Network World also has the 2009 Data Breach Hall of Shame.

Data Security

Kanguru has partnered with Appspeed Distribution to increase the availability of Kanguru secure memory sticks in the United Kingdom.  Kanguru Defender Elite can now be purchased by both Private and Public Sector users at Probrand’s IT Index.

“An outbreak of data breaches in the UK has made encryption a high priority” commented Grahame Smee, Managing Director of AppSpeed Distribution. “Kanguru Solutions’ highly secure storage devices and remote management console help businesses and government agencies combat the increasing data breach problem.”

Defender Elite is in the final stages of FIPS 140-2 certification (Level 2). FIPS 140-2 is a US and Canadian security standard, which is also recommended by the UK Government Cabinet Office. Their new arrangements for data handling procedures (PDF) specify that

removable media should be encrypted to a standard of at least FIPS 140-2 or equivalent in addition to being protected by a authentication mechanism, such as a password

To add to the confusion, some vendors in the UK are advertising FIPS 197 validation. FIPS 197 only examines one component of the overall security system, and does not account for important considerations like authentication methods, random number generation, hashing and brute-force protections. FIPS 140-2 covers a much wider range of requirements and should be considered the minimum standard.

Data Security, Government, Portable Storage

Last week we mentioned that over a million MA residents have been affected by data breaches since the Office of Consumer Affairs started keeping track in October of 2007.

If your business is based in Massachusetts or your company does business there, you may be affected by the new state encryption law starting March 1.  Kanguru has a new whitepaper available that explains the law and how to meet compliance requirements.

Learn more:

Kanguru Whitepaper - Massachusetts Data Encryption Law (PDF)

Kanguru Website - General compliance information for Public Sector, Financial Services and Healthcare organizations.

Data Security