Takeaways from Gartner Security Summit 2015

Posted by Sameer Vitkar on September 3 2015

 Vaultize exhibited its enterprise digital rights management (eDRM aka information rights management) integrated with enterprise file sync & share (EFSS) at the Gartner Security and Risk Management Summit in Mumbai on September 1 and 2, 2015 as Silver Sponsor.

The Gartner Security & Risk Management Summit provides IT security professionals with best practices and strategies so they can maintain cost-effective security and risk programs in order to support digital business and drive enterprise success. The Summit was attended by CIOs, CISOs and senior IT professionals from across business verticals – but prominantly from security-focused ones like BFSI, Healthcare, Defense and Media.

We saw an impressive turnout at Vaultize booth. Following are the top 10 thoughts shared by participants with whom we interacted at our booth:

  1. File Security is a top concern

Most people believed that perimeter security has reached its limit and it is time to look beyond perimeter and devices, and focus on content. Many of the businesses have already deployed data loss prevention (DLP) solutions for file security to classify and filter content at-rest, in-motion and in-use. Such businesses are now looking to move up the chain by adding enterprise Digital Rights Management (eDRM or information rights management) capabilities such that any unfiltered content going beyond the corporate boundaries is DRM-protected to make the most out of their DLP investment.

  1. We want platform approach to file security

We had many conversations around our holistic platform approach to file security. People liked our approach to have everything integrated as they want centralized policy enforcement, monitoring and response capabilities to help protect them from security, compliance and data loss risks. Companies want a platform that is customizable to their individual business needs and provide end-to-end security, controls and visibility. This approach is cost effective (less TCO) and comes with better managability, security and controls than having multiple solutions (deployed independently).

  1. Embedded DRM is the way

Most of the solutions for enterprise digital rights management are just DRM tools that allow end-users to apply DRM controls on designated files and folders. They do not have file sharing, mobile collaboration and anywhere access capabilities and also do not integrate well with end-user’s existing workflows.

Businesses now look forward to embedded digital rights management solutions, such as those provided by Vaultize, to protect content well beyond the firewall with minimal disruption to workflow.

  1. Security and Protection can’t be left to end-user

Most of the enterprise file sharing solutions as well as enterprise DRM solutions leave the security (like rights management and access controls) to end-users. Security is responsibility of IT and not end-users. CIO/CISO are held responsible for any data leakage and security breaches and hence for an effective security and data loss prevention, IT should be armed with policy enforcements.

  1. Public cloud is not an option in security-conscious and regulated verticals

Since the event was security-focused, most of the participants represented the companies from security-conscious and regulated verticals. 90% of the participants answered NO when asked about public cloud.

  1. BYOD security needs to be content focused and not device

Participants agreed that mobile device management (MDM) is the past, and the better approach is to secure corporate data (or content) and not the employee’s devices. Instead of controlling and managing employee-owned devices, the idea should be to deliver and keep the content secure on end-user devices and control its use (within a secure container) to comply with corporate policies.

  1. File sharing through BYOD needs DRM

BYOD devices are increasingly being used by employees to share files within as well as beyond organization. Many of the participants had BYOD implemented but had no way to control the sharing of documents with third-party, even with Mobile Content Management (MCM) implemented. MCM can only containerize the corporate content but limited to device. Most participants were excited to see our DRM capabilities integrated with mobile content management.

  1. FTP Replacement integrated with DRM is hot

FTP/SFTP is a pain. It has IT as well as end-user challenges. On top of that, expecting end-user to properly and voluntarily use an independently running DRM tool is too much. Vaultize as FTP replacement along with embedded DRM was the most popular use case among the audience.

  1. Shadow IT is a problem

Consumerization, BYOD and free cloud services like Dropbox are giving rise to security risks because of Shadow IT within the organizations. Most of the IT executives have banned consumer cloud services and applications in their oganizations.

     10. Leverage my existing investment

Enterprises have invested millions in storage, server, enterprise content management (ECM), security and infrastructure solutions. They look to leveraging their investment when deploying solutions like enterprise file sync & share (EFSS), FTP replacement, virtual data room (VDR) , mobile collaboration and VPN-free anywhere access.

Whitepaper 5 Ways Enterprise DRM Helps The BFSI Sector Avoid Costly Data Leaks - Download Here

 

Start Your Free Trial Today

Topics: Information Security, Gartner, Event

Subscribe To The Blog