As digital systems proliferate, the need to address evolving threats to critical data becomes increasingly urgent. Implementing a crypto-agile architecture is essential for organizations striving to adapt to ever-changing security challenges and regulatory demands. However, deploying such an architecture across existing environments can be challenging and requires a methodical approach to ensure robust security and […]

The Payment Card Industry Data Security Standard (PCI DSS) 4.0 established new mandates that bring about significant changes to effectively address an evolving cybersecurity landscape.  These new mandates, through which cryptographic best practices became requirements at the end of March 2025, impact organizations that store, process, or transmit cardholder data including merchants, processors, issuers, acquirers, […]

As the frequency and sophistication of cyberattacks and data breaches continue to increase and quantum computing advancements now threaten to break many traditional cryptography and data protection mechanisms, organizations need to adopt agile strategies to safeguard their most sensitive data. In the first segment of our three-part series, we discussed the need to view crypto-agility […]

It's no longer only the concern of governments and corporations: encryption is both lock and key to cybersecurity across a range of organizations, of all sizes.  In 2016, the Ponemon Institute calculated the average total cost of a data breach to be $4 million. The next two years sees the chances of 10,000 lost or […]

“…to subpoena-proof the cloud!” We had asked one of our largest customers what they were looking to accomplish with the deployment of our application-level data protection software.  This was their response. This certainly did not seem like the typical statement of requirements for a data protection solution! I’ve been in data and network security for nearly […]

I always find it interesting when our perceptions of how things work do not match up with reality.  We were in a meeting not long ago with a large customer, discussing their encryption deployment, and a simple exchange highlighted a common misunderstanding of data protection:   Us: “You may want to consider application level data protection so that your data is not in the clear when it leaves the database.” Customer (CEO): “What do you mean our encrypted data is […]