Kanguru is announcing that the next-generation Kanguru Defender Elite has begun the FIPS 140-2 testing process and is just months from being certified.  Defender Elite is the newest member of the Defender product family and features:

• 256 AES, Military Grade, Hardware Encryption
• Tamper & Brute Force Resistance
• Password & Device Property Management
• Option Cloud or Server-based central/remote management including:
  • Remote deletion of lost or stolen drives
  • Full Admin and User password management and reset
  • Policy management and enforcement
  • Restrictions by IP Address/Domain
  • Robust Audit and Log functionality for regulatory compliance

Kanguru Defender Elite sets the standard for centrally managed secure drives.

Data Security, Portable Storage

Lost memory sticks continue to be a problem for organizations in the UK including MI6, which had to abandon a major drug operation.

“Our February 2009 industry survey showed that less than 50 per cent of UK public and private sector organisations use any form of data encryption.”

Other recent headlines:

Welsh Council loses children’s data

Loss of patient details prompts warning for five NHS trusts

Data Security, Government, Healthcare, Portable Storage

HSBC has been fined over £3 million ($5 million) for data security procedures that fail to meet Financial Services Authority (FSA) requirements.

The FSA said that, in April 2007, HSBC Acutaries lost a floppy disk in the post that contained 1,917 pension numbers and addresses. And, in February 2008, HSBC Life lost an unencrypted disk holding data on 180,000 policy holders - also in the post.

Costly data breaches can be avoided by remotely managing portable data.  Not only is the data encrypted, but the device can be programmed to remotely delete the next time it is plugged in.  The company has a log file to show the date, time and location where the data was destroyed.

Data Security, Financial, Portable Storage

The local FOX newscast has the gory details (w/ video).

Canyons School District is investigating the loss of a USB flash drive containing sensitive information about employees and possibly former employees of the district. The information on the drive included addresses, phone numbers, Social Security numbers and dates of birth.

While there are no signs of foul play, all employees have been advised to monitor their credit.  This could have been prevented by taking simple steps to protect sensitive data.  You may not be carrying around missile secrets, but most organizations store the type of information that can be used for fraud.

Data Security, Portable Storage

One of the standard responses to mobile device security risks is to lock down all USB ports on the network and create a white-list of approved devices.  Most 3rd-party Endpoint Security solutions will enforce policies based on the flash drive Brand and Model.  (e.g. Allow this model, but block all others.)  Kanguru encrypted flash drives can be customized with Unique ID’s to offer an additional level of granularity and accountability.

Upon request, Kanguru can burn a unique electronic Device ID on each flash drive.  Now employees can be tied to a specific device and usage will be tracked and audited.  In addition, security policies can be customized for each individual drive.  Administrators will quickly be alerted if an employee attempts to use a device that is not assigned to them, even if it is the same make and model as the approved drive.  The Device ID can also be engraved on the outside of the device for quick identification.

Unique ID’s are available on Kanguru Defender, Defender Pro and Bio AES flash drives by request.

Data Security, Portable Storage