Security management Toolkit
Story: NHS procures encryption software
Surprised or expected of our government?
In my honest opinion i am shocked that another government organisation has not chosen a fully functional encryption package. McAfee bought Safeboot to get their fingers in another pie and they know nothing about Encryption compared to the long wealth of knowledge by its competitors. They have only purchased full disk encryption from Safeboot, leaving the management of removable media and port management open to abuse.
I am a huge fan of Check Point End Point Total Security products and having implemented and use this myself within a security sensitive organisation i have a good knowledge of its capability, scalability and security. This would have given them full protection from not only outside threats but also internal threats and malicious activity. If its good enough for the MOD then its good enough for us the TAX payer.
Yes i know you will say Check Point only acquired Pointsec for the same reason but they have intergrated this product into their solution and it is able to function in a total security requirement, which no other on the market is able to do. They also carry the certifications required for government use. Please see CESG Good Practise Guild 5 paragraph 30-32. Covered to protect upto Impact level 3 (restriced information)
This is just a quick way of the government trying to wash over a serious problem with a cheap solution to pacify the nations concerns. If they was serious about protecting our data then they would have enforced a full security solution to remove all risks and enforce the so called written policy that doctors, nurses and other officials have taken no notice of in the past.
Full Talkback thread









