A healthcare organization had shared information on its patients with a vendor to assist in its fundraising efforts. But somehow at least a portion of the data was published on the Internet. This highlights the practice of firms engaging service providers to provide sales, marketing, and other support. In the process, millions of electronic records may be transferred, controlled only by a contractual commitment that the data will be protected. Frequently, no substantive enforcement mechanism is included. Fortressware enforces a firm¡¯s data security policies, even if its data moves outside its firewall to a third party. It ensures that patient information is kept encrypted in a secure space and can\t be copied or moved outside this space. Additionally, through Fortressware\s data masking capabilities, 3rd parties are able to mine patient data for the information they are authorized to use, but all other data remains hidden and inaccessible.  (hide)

With Fortressware, all sensitive data is continuously protected from the point it is created to when it is used. This includes portable devices, including laptop computers. In this case, the thief would not be able to see, let alone access, the personal information on the laptop. Regardless of which applications create or utilize sensitive information, Fortressware always stores the data on disk encrypted. Additionally, the story points out that old audit information was on the lost machines. Through Fortressware, access to encrypted data can be further limited by setting an expiration date, after which no one, not even previously authorized users, have access to it. Financial dated March 27 didn't arrive in his mailbox until Monday.   (hide)

Companies develop a web of relationships with suppliers, partners, consultants, and service providers. In the process, these businesses are entrusted with personal client information, including individual financial and health data. Unfortunately, the task of securely managing this information frequently is ill defined or unenforced. Fortressware provides a complete solution by

• Securing sensitive content as it is flows to and from 3rd parties
• Keeping content encrypted and enforcing access policies on 3rd party desktops and laptops
• Keeping a log of any attempts to leak content inside or outside of a 3rd party's facilities
• Terminating all access by 3rd party users automatically at the expiration of a project's completion date  (hide)

Fortressware's workgroup solution is designed for securing sensitive information in such a dynamically distributed environment. It

• Provides a secure, virtual workspace that secures files and information across public networks, geographically-distributed teams, especially for managing mobile workers
• Protects data at its point-of-creation and keeps it secure all the way to its point-of-use, eliminating the need for monitoring data in motion

The underlying patent pending technology addresses the new global environment where "networks are without boundaries".   (hide)

Fortressware actively incorporates offline and remote users securely. In this story, though the details of how the information leaked are unclear, it seems apparent that the patient data was not encrypted. And it may well have leaked over a peer-to-peer connection. Fortressware keeps all project data encrypted and blocks its unauthorized transmission.   (hide)

In Fortressware, McLarren manager could have defined a secure project workspace for each of their employees who needs to work on sensitive projects. These users can access all information they need to work inside the secure workspace but cannot copy decrypted information to network locations, local storage devices, or attach to a mail message. Additionally, there is full audit trail for all the acitivities conducted in the secure worskpace.   (hide)

In Fortressware, managers define a security policy that defines who has access to sensitive information and what they may do with it. In this case, a Fortressware policy could have:

• Done away with entrusting these records to physical media - all files could have been placed inside an encrypted Fortressware capsule when transferred electronically and stay encrypted when stored locally.
• Restricted the ability to copy unencrypted files to a CD
• Provide different levels of visibility to the encrypted record for users of different resposbilities

(hide)