Full Data Encryption2 encryption management infrastructure

Security methodologies developed more than a decade ago, such as Full Disk Encryption (FDE), are struggling to keep up with the changing need to manage endpoint data security. FDE was created at a time when effective security only happened when the device was turned off. It never was intended to address a PC that is booted up, multiple key management requirements, 100s of 1000s of potential devices managed from a single console, nor the need to separate duties so that an administrator or Help Desk professional can fix a problem without intruding on sensitive data.

Enter Full Data Encryption2: the next generation of endpoint data protection. Full Data Encryption2 is full disk without the risk.

Full Data Encryption2 provides an infrastructure for enterprises and government agencies to:

• Enforce security of data stored on laptops and desktops from one console, protecting against internal as well as external threats
  
  
• Complete data security without the risk of users placing data in areas that are not encrypted
  
  
• Provide confidentiality, privacy and auditing of data residing on any endpoint
  
  
• Minimize operational and user impact of enforced data security by not requiring radical changes to IT processes such as patch management, help desk and forensics
  
  
• Protect data from leaving the organization unprotected on USB flash drives or other forms of removable media
  
  

CREDANT Technologies has pioneered the concept of Full Data Encryption2. It has made the concept an integral part of its CREDANT Mobile Guardian (CMG) product line. CMG Full Data Encryption2 is a major advancement for enterprises that manage data assets on 100s to potentially 100s of 1000s of mobile devices. By offering centrally-managed data protection, CMG Full Data Encryption2 delivers:

• More security benefits than Full Disk Encryption, without the operational restrictions
  
  
• Security, manageability and flexibility that surpasses file/folder encryption
  
  
• Automatic security of data no matter where it is stored
  
  
• Protection for all sensitive data, including local and domain credentials, paging files, and temporary files and folders.
  
  
• The ability to avoid application interoperability issues by not requiring replacement of or alteration of the master boot record
  
  
• Flexible definition of security policies and user-specific encryption policies that ensure only the owner of the data has access
  
  
• Transparent to end users; offers unique usability features
  
  
• Single sign-on, no need for pre-boot authentication
  
  
• Prevention of local administrator access to encrypted data.
  
  
• Easy and immediate data recoverability
  
  
• Extension of data security to affiliate and personal devices
  
  
• A platform to manage future, data-centric solutions
  
  
• FIPS140-2 Validation
  
  
• In short, CMG Full Data Encryption2 takes data security to a higher security standard and mitigates risk better than traditional FDE.