Author Archive

“What You Don’t Know Can Hurt You: File Sharing and DLP”

Thursday, July 19th, 2012

Product development plans, quarterly reports, partner SOWs, customer account data, design specs – the list of proprietary data that you need to keep safe goes on and on. So often, data security conversations focus on external threats – due to the huge uptick in malware and security breaches – yet, you can’t ignore risks lurking within your own company walls.

According to the Identity Theft Resource Center, 13.4 percent of the total number of reported data breaches in 2011 were incidents of insider thefts. That figure represents malicious activities, but there are also a huge number of unintentional acts – with users completely unaware that they’re sharing documents that include sensitive information. You have enough to worry about – as do your employees – which is why you want to make sure all enterprise content leaving your organization is automatically protected.

The good news is that we’ve made it easy. We have taken our strong focus on security a step further, allowing you to easily integrate Accellion file sharing with leading data loss prevention (DLP) platforms, including Symantec (Vontu), RSA, Fidelis, Palisades, Code Green Networks, and most recently, Websense.  And, we’re proud to say, that we’re the only file sharing vendor that offers this ease of integration and protection.

You simply choose your preferred DLP solution, which inspects all data before it leaves your organization – scanning for confidential data (social security numbers, credit card numbers, product information, etc.) and blocking and/or quarantining file transfers that violate established policies. Basically, you establish the rules and we make sure that users follow them whenever they are sharing files. It’s automated, integrated, and easy to use file sharing ntegrated with DLP – keeping your business in motion while safeguarding your most precious assets. Learn more.

Bringing the Tour De France to Your Living Room

Wednesday, July 11th, 2012

With the 99th Tour de France underway, Australians are paying special attention to the daily rankings, with all eyes on native, Cadel Evans. He captured the title last year (the first Australian to earn the honor), leaving many to wonder – can he pull out the victory two years in a row?

For Aussies looking to track who’s gaining ground and who’s losing steam, most turn to one broadcasting source: SBS Television. SBS is on location in France, filming highlights throughout all 3,497 kilometers in order to provide viewers with compelling daily footage. And, Accellion helps make it happen.

How? SBS broadcast teams on-site in France capture video of Tour activities; files are sent to the editing and productions staff in Sydney via Accellion Secure File Transfer; and SBS creates timely programming content. It’s sharing that’s simple, safe, and seamless which is why SBS has relied on us for years to support programming processes for both the Tour de France and the FIFA World Cup. We’re honored to play such an important role in two renowned worldwide events and when the new Tour champion is announced on July 22, we’ll definitely be watching. For more information, download the case study

FIPS High-Level Security Clearance for Your Valued Documents

Tuesday, July 10th, 2012

If you’re a government agency or work directly with government-related documents, your file transfer solution of choice must be highly secure. Luckily, The United States Federal Information Processing Standard or FIPS makes it easy for you to know that you’re doing what it takes to protect your agency’s most valuable data.

That means implementing IT solutions that are FIPS compliant – fully tested by a third party lab to make sure they meet approved cryptographic algorithms. Put more simply, ensuring that built-in processes are in place to prevent unauthorized access, resulting in transactions that are secure and fully encrypted.

Government agencies require FIPS 140-2 certified encryption to ensure the protection of data in transit.  The Accellion Mobile File Sharing solution utilizes FIPS 140-2 certified encryption.  Accellion has completed the rigorous validation process and obtained certification by the Cryptographic Module Validation Program (CMVP) to meet the security requirements set forth for Federal organizations by the National Institute of Standards and Technology (NIST).

All wireless “data in transit” is transmitted using FIPS 140-2 Certified Secure Socket Layer (SSL).  With Accellion, government agencies are assured that all data downloaded to wireless devices is in full compliance with US Federal Government guidance and policy.  Our certificate is available on the NIST website.  All “data at rest” is also stored encrypted whether on a mobile device or on the Accellion system.

FIPS compliance is exactly why Accellion is trusted by many government clients, including the U.S. Securities and Exchange Commission and NASA. Our solution meets FIPS 140-2 certification by automatically running a series of startup tests to validate existing cryptographic libraries. We then check the integrity of the system to make sure the software has not been altered or security has been compromised. If the tests are passed successfully, our solution is initialized; if not, file sharing and collaboration services are immediately disabled. This gives customers the peace of mind that only authenticated recipients will access files and that your documents are safe, around the clock.

Before you invest in solutions that will touch your agency’s critical documents, make sure your short list is focused exclusively on vendors that meet the FIPS 140-1 and 140-2 cryptographic module.  And then grant your users clearance for fast and simple data exchanges.

How Protected is Your Brand from a Virus?

Thursday, June 14th, 2012

Your brand reaches far beyond your logo, tagline and website – encompassing all interactions with current and potential customers, and often boiling down to how professional (and pleasant) it is to do business with you. How you communicate with investors, partners, and prospects says a lot about your company and helps you create a rapport and level of trust with those critical to your company’s success. The last thing you want is an employee sharing a file from their mobile device and inadvertently also sharing a virus with a valued customer, contaminating external recipients along with all you’ve done to build your company’s brand.

Continuing our discussion about the risks of the growing Bring Your Own Device trend, employees are sharing files from any number of mobile devices and antivirus protection needs to follow suit. According to Juniper Networks’ 2011 Mobile Threats Report, there was a 155 percent increase in malware on mobile platforms in 2011 as compared to the previous year.

But, just because mobile malware is on the rise, doesn’t mean your risks have to increase at the same pace. If your employees are sharing files, you need the ability to run antivirus – on any device, at any time – before the document goes out. It seems like a no-brainer, but vendors such as Box, Dropbox, and SugarSync would disagree, with Gartner’s new “Mobile File Synchronization Evaluation Criteria” report (May 2012) showing all three in the “No” category when it comes to offering antivirus on mobile files.

More mobile devices plus more malware has to equal a file sharing device that comes with antivirus protection. Does Accellion offer antivirus? The answer is a resounding “yes” as no enterprise file sharing solution is secure without it.

Customer Spotlight: International Law Firm Makes the Case for Accellion Mobile Apps

Thursday, June 7th, 2012

For law firms, being able to communicate with clients anywhere, anytime is a top priority – and a key ingredient to retaining existing accounts. No one understands that better than Allens Linklaters (Allens) – a firm that was on a mission to find a more secure and reliable way for its 800 attorneys to collaborate and exchange critical files with clients.

Allens’ standard methods of sending files via CD or FTP posed serious limitations – opening up the firm to security risks and providing limited visibility into whether files were received, opened, or reviewed. Plus, with so many of its employees and clients using Androids and iPads for daily work interactions, the firm wanted to allow users to access documents from any location – and any device.

The firm considered moving to a consumer-grade solution such as Dropbox, but wanted a more secure, reliable product that could truly support the mobility of its clientbase. After testing eight solutions, Allens found that Accellion Secure Collaboration was the only vendor that offered extensive functionality, mobile support, top-notch security, and could be hosted on-site.

“Where our data is transported and ultimately resides is very important to us and our clients. Now our attorneys can collaborate on upcoming cases, maintain up-to-date visibility into how their documents are being accessed, and rest assured that confidential information stays out of the wrong hands,” said Shawn Schmidt, Infrastructure Manager with Allens.

Allens’ IT department is also putting Accellion to the test, using the solution to upload support logs and troubleshooting data,  providing a one-stop shop for IT help desk information. Plus, with Accellion Mobile Apps, clients, partners, and attorneys now have immediate, unlimited access to the information they need – whether at the airport, en route to a meeting, or unwinding at home.

“Being able to safely browse, edit, share, and send corporate and auditable information from anywhere is a big priority for our clients and we’ve made it happen with Accellion,” said Schmidt.

Click here to read the full case study.

The BYOD Trend: A Blessing or a Curse?

Thursday, May 31st, 2012

When it comes to allowing employees to use their own personal devices at work, everyone is doing it, or so it seems. A recent Cisco-sponsored survey of 600 IT and business leaders found that 95 percent of respondents allow employee-owned devices on the corporate network, citing increased productivity and employee job satisfaction as the primary drivers.

While employees may be grinning a bit more as a result of being able to use their iPhones for both work and play, IT administrators aren’t exactly smiling. The survey went on to disclose that 69 percent of Bring Your Own Device (BYOD) users were accessing unapproved applications on these devices, a reality that is causing organizations to carefully weigh BYOD risks versus rewards.

One company that’s taking new BYOD precautions is IBM, banning the use of Dropbox, iCloud, and Siri on employees’ iPhones. IBM’s CIO, Jeanette Horan, told MIT Technology Review that the trend toward employee-owned devices has created new challenges for her IT department because “employees’ devices are full of software that IBM doesn’t control.” It’s that lack of “control” that’s causing many organizations to question the security of public cloud services – and rightly so.

When IBM, with an IT powerhouse of 5,000 staff members, takes a stand against select cloud services, people take notice. We’ll look for other organizations to follow suit, taking a close look at what cloud providers are actually doing with their confidential data and establishing BYOD policies that maintain close control of what services are actually being used by employees and when.

So, kudos to you, Jeanette Horan, for leading the way with new BYOD security practices. You are the Accellion CIO hero of the week.

Ace the IT Exam

Thursday, May 17th, 2012

Do iPhones, iPads, and Androids seem to be multiplying at your school location? While the proliferation of mobile devices brings huge advantages for teachers, administrators, and students in terms of anytime, anywhere access, they introduce major headaches for IT for the same reason: anytime, anywhere access. With students and staff now relying on personal devices for work purposes, school IT administrators are faced with a major test – how to support necessary information exchanges and real-time collaboration, while keeping users safe and data secure.

Institutions such as Harvard Business SchoolAnchorage Public Schools, and Pepperdine University have passed the “Consumerization of IT” exam with flying colors – turning to Accellion’s secure workspaces and mobile file sharing capabilities to support around-the-clock information access directly from users’ desktops and mobile devices.

Users at elementary schools all the way through to the country’s top universities, are doing some pretty cool things with Accellion via a range of devices: including sharing financial aid information, collaborating on research around the globe, sharing design files for campus magazines, patient data from the on-campus health center, lunchroom planning documents, and faculty research, to name just a few.

Consider a school board that sets the educational curriculum for the upcoming school year, and shares this information via Accellion with affiliated school principals. The principals then review and provide comments, with Accellion automatically notifying the board when changes have been made. The updated curriculum is opened up to department heads and teachers, where they, in turn, create and submit corresponding lesson plans. That’s the type of collaboration that’s happening via Accellion today.

When it comes to “smart” file sharing and collaboration, students, faculty and administrators at schools, colleges and universities need to be able to easily and securely connect via devices of their choosing. And, that’s exactly why they choose Accellion.

The True Cost of Google Drive

Tuesday, April 24th, 2012

Accellion

Today Google announced the launch of Google Drive, a cloud-based file storage and synchronization solution touting 5GB of storage for free. Google Drive just compounded the IT security nightmare already created by free unmanaged consumer file sharing services such as Dropbox, iCloud etc.

Unmanaged file sharing in business environments is never a good idea because of the heightened risk of data loss and exposure. In the case of Google, a company that’s built its legacy on extensive search engine and targeted advertising capabilities, you also have to question Google’s intentions with storing business information. Just how equipped is Google to handle confidential business data?

If this latest Google Drive announcement is leaving you confused about what to do for business file sharing, you’re not alone.

To help you navigate your way, we’ve outlined six questions to ask when considering a file sharing and storage solution for business use:

  1. Is this truly a solution for business? The rapid of adoption of free consumer file sharing services such as Dropbox and iCloud, by business users may have you wondering if the lunatics are running the asylum. But, your instincts are correct if you are wary of unmanaged cloud file storage for business use, if a file sharing solution doesn’t have IT administrative and management tools then it isn’t a business solution.
  2. Am I being locked in? Is the file sharing solution from a company trying to carve out a proprietary niche, forcing you to use certain operating systems, devices, or applications? In the case of Google Drive it is part of Google Apps, but native applications are not available for  iOS devices like the iPad.
  3. How will my information be used? Check the privacy terms carefully. Google must have a plan to make money from Google Drive customers somewhere, somehow, so carefully review Google’s privacy policy and their right to mine your valuable assets to their advantage.
  4. Can I track and view all file activities? If your organization is subject to any type of compliance regulation such as HIPAA, GLBA, SOX then you need to know what’s happening with your organization’s files, otherwise how are you going to demonstrate compliance?
  5. Can I set my own security and privacy standards? For business file sharing, you want to be able to establish customized policies and administrative controls related to file access, security, and storage – as strict or flexible as desired.
  6. What mobile devices and apps are supported? From Androids to iPhones, make sure that files can be synced and accessed via any device.

While “free” is certainly appealing, in the case of file sharing it always comes at a cost. A security breach from business file sharing could mean exposure of confidential financial statements, upcoming product designs, or employee health information, with implications for privacy and compliance violations and fines, lost revenue, loss of competitive advantage and damage to a corporate brand. For confidential business information, using free consumer file storage and sharing can be a costly mistake.

IT-Thinking Twice About the Cost of Free Apps

Wednesday, April 11th, 2012

IT- Thinking Twice About the Cost of Free Apps

Most people treat their mobile devices as an extension of themselves. People text, share, and play their way into two year relationships with the devices they use on a daily basis. In the typical mobile device “relationship,” individuals downloaded an estimated 83 apps in 2011, according to Piper Jaffray and analyst Gene Munster. While that number sounds high, it boils down to about 1.6 apps per week.

Many IT professionals have noticed this trend and are concerned about the use of free consumer apps in the work place. It’s hard to imagine that last week’s discovery of the security hole in Dropbox’s mobile app, by U.K.-based iOS app developer Gareth Wright, eased concerns about mobile security. Wright reported the security hole in Dropbox’s native mobile app that could be used to access personal information. PCWorld also confirmed that Facebook and LinkedIn mobile apps had the same core vulnerability. Widespread use, combined with security vulnerabilities, of consumer mobile apps have IT managers concerned.

Consumer mobile file sharing apps serve a purpose for users that want a quick and easy way to share and store things like family photos, recipes, and videos. However, these un-managed file sharing apps should not be used to send enterprise data of any kind. The security hole that Gareth Wright found in the Dropbox app is an unfortunate example that consumer mobile file sharing apps aren’t architected with the privacy and security measures necessary for an enterprise.

How can organizations prevent employees from using these consumer mobile file sharing apps? The answer is easy. Don’t give employees a reason to use these apps in the first place. Providing employees with an easy-to-use, secure file sharing and syncing alternative from the start is a great way to prevent the use of consumer file sharing apps. Employees should be able to send, share, and access files securely, while IT administrators ensure they’re protected from malicious content. Empowering employees with a safe and secure mobile application is the first step in the process.

Join Accellion® In the Cloud Sweepstakes

Tuesday, March 13th, 2012

Join Accellion® In the Cloud Sweepstakes

Accellion has always given you the freedom of choice when it comes to cloud deployments: Private, Hybrid, and Public. Starting today we’re taking that freedom to another level. Accellion is celebrating the launch of kitedrive by giving one lucky winner a trip to the clouds. Where you go once you’re in the clouds is up to you. Accellion is going to award one grand prize winner a $1000 travel voucher… from there the sky’s the limit.

Craving some beach time? Then maybe white sands, turquoise water and island hopping are your thing. There’s always something appealing about relaxing on a Caribbean cruise. Thinking you’d like a trip to Italy? Wandering the streets of Venice is always intoxicating. Perhaps it’s time to visit Mickey Mouse. Fancy some time across the pond?

Do any of these options sound appealing? Then you should head over and “like” Accellion on Facebook, and then enter the “In the Cloud Sweepstakes”. Once you’re up in the cloud, the options are limitless…

If that’s not enough we are going to have weekly prize packs that include: Amazon gift cards, cloud t-shirts, kites, and other cool swag.

This promotion starts on March 13th and runs until March 30th. So get over to Facebook and register!

Once you’re registered we recommend that you do the following:

  • Tell a friend on Facebook or per email. Facebook.com/Accellion
  • Follow @accellion on Twitter to be the first to know about Accellion news.
  • Tell the world by tweeting out where you would go if you win the grand prize. Use #ToTheCloud @accellion
  • Start sharing and collaborating in the cloud with Accellion.

Official “Join us in the Cloud” sweepstakes rules.