Media Management Use Case

BY ACTIVE CYPHER | AUG 14, 2022 | TECHNOLOGY, UNDERSTANDING ACTIVE CYPHER

Active Cypher Media Management Use Case

Every year, businesses, law enforcement, and citizens struggle to manage exponentially growing media assets. Inexpensive digital CCTV systems, cell phone recordings, pictures, and home surveillance (to mention a few) are now commonplace. Protection, control and access of media is paramount for a multitude of reasons: legal, ethical, and moral.

To add to this, law enforcement agencies have adopted in-car and body-worn camera (BWC) systems ensuring high-resolution video that must be stored and managed for even minor calls.

Media assets cannot be ignored. A media management solution needs to be in place to protect, collect, store and manage media assets utilizing best practices while adhering to laws and in country privacy control regulations.

The stakes are high. Lost or mishandled media assets calls into questions credibility while jeopardizing potential legal or financial actions.

Media Management is a protection and control solution based upon Active Cypher’s Cypher Protect.1 Cypher Protect is a hybrid/on premise software solution that is built to secure files stored on a customer’s file server or cloud service. Cypher Protect encrypts the contents based on business policy enacted using security groups and user ids. Files are controlled through a local agent. Continuous encryption secures media assets from ransomware, personal misuse, accidental or incidental exposure. File controls include sharing, with time-based expiration, rendering, printing, and downloading. Files can be rendered unavailable through a management console. This solution makes it easy for personal to manage files, such as videos, audios, photos, and documents through an intuitive interface. Users with appropriate rights and privileges can generate audit trail reports, view, tag and verify integrity of the asset, as well as automatically purge or archive files based on the business retention policies, cost constraints, and much more.

Sharing media assets has never been easier. The customer’s own cloud service allows businesses to easily share digital files with others. Permissions and privileges are completely customizable by an admin, making sure these users only have access to specific features and files in the cloud storage.

• Based on Active Cypher’s Cypher Protect

• Continuous AES 256 Encryption

• Assign Users Rights & Privileges

• Storage Policies for retention and hierarchal lifecycle management of files

• Cost conscience use of short, medium, and long-term storage

• No installation on users’ devices for viewing videos

• 100% Browser-based HTML5 Playback

• Set Sharing Expiration Policies

• Audit Trails

• One-Click Upload

• File Authentication

• Advanced Sharing Features

• Share Video Files

• Multi-User

• Chain of Custody

• Customized Classifications

• Bookmarks

• Notations

• Geo-location Mapping

• Ransomware protection

Active Cypher Media Management:

Law enforcement example: https://www.activecypher.com/dems/

Managed Security Service Provider (MSSP) Use Case

BY ACTIVE CYPHER | AUG 12, 2022 | TECHNOLOGY, UNDERSTANDING ACTIVE CYPHER

How a National Managed Security Service Provider Removed Human Error From Customer Communications and Protected Their Business From Data Loss

Restoring the Rights of Privacy and Security to the Digital World While Decreasing Complexity

Managed Security Service Providers (MSSP) are extensions of their customers’ I.T. departments. They are trusted to manage the safety and integrity of an organization’s most sensitive information, such as strategic plans, financial reports, sales plans, customer information, and more.

The trusted nature of MSSP’s work makes them targets of cybercrime because they hold the keys to many customers’ digital assets. As a result, they must continue to stay at the forefront of protection to maintain the integrity of their business.

MSSPs struggle with the same business problems as any other:

• Competition trying to gain intelligence

• Random and targeted cybercrime

• Human errors

• Disgruntled employees

The difference for MSSPs is that if they are compromised, so are their customers, which could be hundreds of businesses.

• Cyberattacks against Managed Service Providers, including MSSPs, jump 67% in 2022

• 90% of MSSPs have been hit by a successful cyberattack since the COVID pandemic began

• MSSP monitoring and security management tools are the primary target of cybercriminals

• By 2025, 60% of all organizations will use cybersecurity risk as primary factor in conducting third-party transactions

Highlights

Challenges

• Securely sharing confidential information with external customers

• Employees taking intellectual property and leaving the company

• MSSPs are targeted because of their customers’ information and access

• Crisis of trust with third-party providers

Solutions

• Protect data at the asset level

• Secure information dynamically

• Safely share information

• Able to revoke access remotely

• Ensure security entirely within customer environment

Results

• Reduced human error

• No trusted third party relationship

• Reduced administrative burden.

Challenges

The Chief Information Security Officer was concerned that his MSSP Security Operations Center (SOC) was introducing too much risk to their customers when they emailed monthly reports about security operations, architecture vulnerabilities, and incidents.

Their standard practice was that SOC Security Analysts emailed monthly reports to customers with sensitive information about their environments. They were concerned that email was not secure enough for this information. Security Analysts had also accidentally sent reports to the wrong customer on occasion.

The MSSP had employees quit the company after they downloaded strategic plans for product infrastructure, business roadmaps, existing architectures, and customer information to their personal machines. Unfortunately, the MSSP had no way to stop this illegal and inappropriate breach.

Most Data Protection solutions require trusted third-party custodianship of data, encryption keys, or both. Unfortunately, the MSSP has lost confidence in trusted third-party environments and needs complete control over its security environment.

Results

Active Cypher’s Cypher Cloud solution was implemented at the MSSP to secure external data sharing with customers and for internal data protection. Cypher Cloud is completely contained within its environment, and all files are dynamically encrypted based on business policy. Access is controlled by their Azure Active Directory and administered with traditional Microsoft tools.

Monthly security reports are now shared with customers in secure SharePoint enclaves, and using Auth0 to validate access in their local IAM system. As a result, human error has been eliminated in sharing information with the customers.

Filling the gaps

BY ACTIVE CYPHER | AUG 3, 2022 | CONCERNS, TECHNOLOGY

The data protection lifecycle

Active Cypher provides data protection from data creation throughout its lifecycle, covering the gaps left by point solutions. We defuse the ticking time bomb of unprotected data that is putting the business at risk. Active Cypher provides data protection coverage for an affordable price.