The Endpoint Imperative: Global Security Compliance. Are you ready?

Why the Cloud? Processing, Exploitation and Dissemination

By G C Network | October 23, 2008

So why is the intelligence community so interested in cloud computing? Three letters: PED (Processing, Exploitation, Dissemination). Take these two real life examples from the publishing industry. Jim Staten of…

World Summit of Cloud Computing: “Enterprise Cloud Computing” work group

By G C Network | October 22, 2008

To leverage attendees of the World Summit of Cloud Computing, a kick-off meeting of the “Enterprise Cloud Computing” work group will be held near Tel Aviv, Israel on December 3,…

Cloud Package Management

By G C Network | October 21, 2008

In his post “Missing in the Cloud: package management“, Dave Rosenberg highlights a critical issue in the adoption of cloud computing by government agencies. “I dare say that a standard…

PlugIntoTheCloud.com

By G C Network | October 20, 2008

Information Week has just launched PlugIntoTheCloud.com as their cloud computing destination. In his Non Linear Thinking blog, Bill Martin calls it a movement aimed at “providing a source and forum…

Is the cloud computing hype bad?

By G C Network | October 17, 2008

From Gartner “Why a little cloud hype might be useful“: “It’s too simplistic to say cloud hype is bad . If we are technically expert is might irritate us with…

Stop the FUD (Fear, Uncertainty and Doubt) !!

By G C Network | October 16, 2008

Dan Morrill! Count me in !! In his excellent article, “Cloud Computing is Scary – But the FUD Has to Stop“,  Dan makes some excellent points: It is time to…

IBM, Microsoft and Google

By G C Network | October 15, 2008

On October 6th, IBM launched their cloud services initiative. This is a:  “[C]ompany-wide initiative that extends its traditional software delivery model toward a mix of on-premise and cloud computing applications…

Government in the Cloud

By G C Network | October 13, 2008

Back in mid-September, there was quite a thread in the Google Cloud Computing Group on the use of cloud computing by the federal government.  Some of the interesting comments were:…

CloudCamp Partners With SOA-R !!

By G C Network | October 10, 2008

I’m proud to announce that the final SOA-R Cloud Computing Education Event will be held in collaboration with CloudCamp. Now dubbed CloudCamp:Federal, the event will be held as an “unconference” to help…

Federal Cloud Computing Wiki

By G C Network | October 9, 2008

With the fast growing interest in cloud computing, the Federal Government community has established a Federal Cloud Computing Wiki. This wiki is managed by Dr. Brand Niemann, Senior Enterprise Architect…

 

 

China has its Cybersecurity Law. Next May, the General Data Protection Regulation – or GDPR –goes into effect for the European Union. Research shows most organizations just aren’t ready for these and other measures.

Tune into this episode of “The End Point Imperative: A Podcast Series from Intel,” to hear from Intel’s Yasser Rasheed, Director of Business Client Security on how a combination of protection at the hardware and software level can help organizations gain compliance and avoid breaches, fines, and financial impact.

Kevin L. Jackson: Hi everyone and welcome to this episode of the Endpoint Imperative. A podcast series from Intel. My name is Kevin L. Jackson and I’ll be your host for this series. The topic for this episode is “Global Security Compliance. Are you ready? With me is YasserRasheed, director of Business Client Security with Intel. Yasser, welcome.
 
Yasser Rasheed: Thank you for hosting me today. I’m very excited for this talk.
 
Kevin L. Jackson: It’s really our pleasure. Let’s get started on this. The security world is really abuzz. We talk about GDPR or the General Data ProtectionRegulation. This is Europe’s looming security regulation. Can you tell us a little more about it?
 
Yasser Rasheed:Absolutely. You know Kevin, the industry is shifting and evolving very quickly in this space. We’re excited about the positive changes taking place in the industry. The GDPR or General Data Protection Regulation coming out of Europe is really a replacement for the European directive that they had in the past. It covers a whole slew of data protection and security regulations that allows – but really caters to protecting the end user and the end user data.
 
Kevin L. Jackson: I understand it’s really the hefty fines that have the information security officers worried. I’m told that they can be the greater of either 20 million Euro or 4% of global annual revenues. Why is this putting the spotlight on security and compliance in North America? I thought this is a European thing, right?
 
Yasser Rasheed:It is not a European thing only. It affects anyone that deals with the European citizens or in business in Europe so global companies are really impacted by this regulation and they need to pay attention to it.
 

 
                     (When viewed on a mobile device, please press select “Listen in browser”)


Kevin L. Jackson: This is really important to you. From your point of view, at the IT and operations level, what should these companies be really focused on?

 
Yasser Rasheed:The companies need to first get educated on the new regulations. It is going to be applicable in May or enforced starting May 2018. It is really coming very soon. The GDPR regulation is really a legal framework that comprehends a number of data security and privacy guidelines for organizations. For example, they need to make sure that they look at how the data is processed, how the data is protected. Who gets access to the data at what point in time and under what tools? Is everything audited and logged in the right way so that they can have the right traceability. There are a number of things that the organizations and especially IT and chief information security officer teams need to pay attention to in this case.
 
Kevin L. Jackson: With all that in mind, what should these enterprises be thinking about when it comes to data protection at the hardware and the software level?
 
Yasser Rasheed:That’s a great question. First, let’s head back and look at what’s happening in the industry nowadays. The whole space of cybersecurity is full with hackers and really malicious users trying to get access to information and this is impacting everyone. We see breaches every day. Solutions today are available in software, however, we believe that the software alone cannot protect and cannot enforce the level of readiness for GDPR and the likes. What we really look for is the role of the hardware to augment and compliment the role of the software in the space. More specifically in the security space, there are many hardware products that companies like Intel is offering in this space to protect the identity of the user, to protect the data of the user. These are tools that our key organizations can take advantage of to be ready for GDPR compliance and in general, to have a more healthy and stronger security posture in the environment.

Kevin L. Jackson: Thank you very much for sharing that important point. Unfortunately, though, we’re at the end of our count for this episode. Many thanks to Yasser Rasheed with Intel for his insights and expertise.

 

 

( This content is being syndicated through multiple channels. The opinions expressed are solely those of the author and do not represent the views of GovCloud Network, GovCloud Network Partners or any other corporation or organization.)

 

Cloud Musings

( Thank you. If you enjoyed this article, get free updates by email or RSS – © Copyright Kevin L. Jackson 2017)

Follow me at https://Twitter.com/Kevin_Jackson
Posted in

G C Network