Your answer was selected as Best Answer
Your Public Answer:
“Hi ...., When the European Commission Data Protection directives and other regulatory requirements are considered, it becomes a nightmare to transmit even 1 single file (it goes to legal first :) Here is a bad start: http://ec.europa.eu/justice_home/fsj/privacy/thridcountries/index_en.htm Better one @ Crypto Law Survey http://rechten.uvt.nl/koops/cryptolaw/ I personally keep a long list of privacy requirements per country.. On the technical side sftp and scp based solutions work just fine but what you need is : 1- Policy based file transfers 2- Full/Extensive audit trails of transfers 3- Policy based data-leakage management 4- Easy integration with existing user directories 5- Secure data life-cycle management (deleting files after a certain period) Solutions vary based on your scope, if you will transfer files intra company, it will be easier to enforce policies on both ends.. with 3rd party file transfers, you can only enforce rule on your premises. Keep in mind that a simple SSL based web site can regulate secure file transfers and you can use all the over the counter security solutions (like authentication, data leakage, audit, policy etc) You may check the following vendor web sites to dig through commercial solutions that may help you to accelerate your project: I have seen our customers developing their solution with PGP Command Line toolset, or using Forum Systems Presidio gateway products for regulatory compliance. There are also products from Accelion and Tumbleweed to control/audit secure file transfers. All these vendors offer several whitepapers. cheers, - yinal”
Sunday, August 26, 2007
Secure FTP, campus and cross border solution ?
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment