Reduce risks, increase compliance efficiency, improve security effectiveness
Sponsored by: Insurance & Technology
The insurance industry has experienced unprecedented levels of regulatory change that have made the requirement to secure customer and corporate information a necessity rather than an option. There are a complex array of privacy regulations that mandate that new protection strategies be implemented that go well beyond the requirements of NAIC, GLBA and PCI DSS. On top of that there are a variety of state and Federal laws as well emerging international regulations that are explicit in their compliance objectives — private data must be protected to permit safe harbor in the event of a breach.
When it comes to data protection, organizations often consider only data that is used in customer-facing applications and production databases. But what about data used in non-production environments such as application development, testing, quality assurance and training? Many organizations have implemented policies or solutions such as strong password protection and firewalls to comply with regulatory requirements and to deter breaches, yet common infrastructure-centric methods for protecting sensitive information have proven inadequate in today's threat environment.
Join us to hear Steve Kozman, SVP & Chief IT Risk Officer, SunAmerica Financial Group share his experience and lessons learned while implementing data protection across seven business divisions at SunAmerica. He'll talk about the challenges he and his team faced and what steps were taken to achieve the goal of data protection for non-production data. You'll also learn about strategies for leveraging a data security platform across all data protection needs in your organization with a data-centric approach instead of a flawed infrastructure-centric focus.
In this webcast we'll discuss how you can:
| |
|
Reduce overall audit effort and costs by eliminating test and development environments from regulatory scope |
|
|
|
|
| |
|
Extend robust security policies to non-production environments |
|
|
|
|
| |
|
Accelerate testing and save money by reducing manual, time-consuming data de-identification processes |
|
|
|
|
| |
|
Automate the maintenance of data referential integrity |
|
|
|
|