About

  • Welcome to the Thales Key Management digital media news centre.

    As companies look to protect their customer data and other sensitive information, encryption is being deployed more widely. Yet if an encryption key is lost then that data cannot be recovered. Avoiding this problem demands formalized processes and robust technologies for key management making the protection, management and secure use of cryptographic keys a fundamental component of modern IT security.

    This Thales media center provides information on international industry issues and trends relating to the general topic of key management. There's a also a Q & A page here which aims to answer some of the frequently asked questions on the subject. Key management affects organizations across all sectors and this site includes information on global best practices, regulation, technology, deployment scenarios and key management strategy.

    Thales leads in the provision of information and communication systems security solutions for government, defence, critical infrastructure, enterprise and the finance industry. Thales’s comprehensive portfolio of security products and services protect electronic information – safeguarding transactions, IT operations and information transfers within highly sensitive and regulated environments.

    Subscribe by email

    Find out more at www.thalesgroup.com/iss

    Visit our payments site at www.paymentssecurity.com

Contributors

  • Richard Moulds
    EVP of product strategy for the information systems security activities of Thales

    Jon Geater
    Director of Technical Strategy

    Steve Brunswick
    Strategy Manager
    Thales Information Systems Security

Key Management for Dummies


Resources

Latest press releases

Thales in the press

Events diary

« Data classification – learning to walk before we run with cloud computing | Main | Hackers say unencrypted data is there for the asking »

June 02, 2011

On gmail, cybersecurity and passwords

Another day, another cyber security headline.  This time it’s the attack on personal gmail accounts which has left hundreds of US government and military personnel (along with other high-value targets) potentially exposed...

There’s not a lot to say about this that I didn’t say in my Advanced Persistent Threat post (and related articles) except to note that widespread reporting of this issue has been refreshingly plain and understanding.  I fully expected to see tales of cyber war, Google-bashing and condemnation of Cloud Security arising from this but instead it seems people (by which I mean mainstream media) are starting to get the idea about things like Spear Phishing, and understand this attack for what it was.

Insidious, yes.  Worrying, certainly.  Important too but the point is this specific attack is not where the damage is being done: that comes later when the information harvested is exploited.  That people are beginning to understand these subtleties of online security is truly a good thing.

Now all we need to do is fix the systems that make these attacks so easy on all but the most wary of prey.  So that’s just DNS, HTTP, web browsers, HTML email…  Hmm.  I wonder if this will get a special mention at this week’s Cyber Security Summit. 

Jon Geater

Posted at 17:41 in Current Affairs, Data breach notification regulation, Encryption, End-to-end encryption |

|

Key Management Q&A

  • Want to know more about key management? This Q & A might help provide some answers

Key management resources

Categories

Archives

Subscribe to this blog's feed

Press contact

  • Liz Harris
    Thales
    +44 (0)1223 723612

Image library