An organization’s data is constantly under attack. Whether it’s through ransomware attacks, cyber-threats or employee misguidedness, all expose organizational data and put it at risk. Encryption and access control are the keys to securing data and cyber resiliency, but most storage systems throughout the infrastructure (primary, secondary and protection storage) treat security as an afterthought reducing flexibility and increasing complexity. In this webinar we discuss the three reasons why storage security is failing.

1. Three Reasons Storage Security is Failing
and How to Fix It
Learn three storage security fixes:
1. Encryption
2. Security
3. Reporting
For audio playback and Q&A go to: http://bit.ly/3SecurityFail

2. OurSpeakers
Jonathan Halstuch,
CTO of RackTop Systems
George Crump,
Founder and Lead Analyst
of Storage Switzerland

3. Hot Topics: Storage Security and Data Privacy

4. New Pressures
● GDPR
● Facebook/Cambridge
● Open Amazon S3
Buckets

5. Storage Security
● Encryption
● Access Control
● Access Analysis

6. Data Privacy
● Security
● Protection
● Data Management

7. Storage Security and Data Privacy is Broken

8. ● Typically at the final data resting point
● Secondary Storage, Object Storage, Tape
● Primary Storage has almost NO:
○ Encryption
○ Access Control
○ Data Management
The Bottom-Up Approach: Storage Security and
Privacy Today

9. Security and Privacy
are Reactive
● Add software to encrypt data on
primary storage
● Add data protection software
● Add data management

10. Reactive
Security and
Privacy Are
Complex and
Fragile
● Encrypting data requires creating a new
file system of volume
○ Old data has to be copied in
● Data management requires adding
secondary software with limited
integration
● Access control and auditing requires third
party software that scans storage
systems
● All of these add-ons impact performance

11. Top Down: Fixing Storage Security and Data Privacy

12. ● Encryption is inline
○ Always-on and starts on day 1
● Better data protection features
○ Leads to fewer “super-user” accounts
and better access control
● Built-in reporting and auditing
○ Proactive search for attacks
Security Has to Start
with Primary Storage

13. ● Data Management needs to be built in
○ More than a cache needs to move data across
systems
● Has to be granular
○ File by file required to “Right to be Forgotten”
● Needs to support cloud as a destination
○ Limits exposure
○ Cuts costs
○ Must be encrypted
Privacy Has to Start with Primary Storage

14. Still Has to Act
Like Primary
Storage
● Has to deliver primary storage
performance
○ Take full advantage of flash
● Has to have primary storage
features
○ Snapshots, replication, data
protection
○ Multi-protocol - file and block

15. © Copyright RackTop Systems Inc. 2015-2018.
Data Storage
& Management
Cyber Security
Compliance
“The Perfect Storm”

16. © Copyright RackTop Systems Inc. 2015-2018.
Data Storage
& Management
Cyber Security
Compliance
• Security by design
• Single pane-of-glass management
• Policy based data storage and management
• Multiple layers of encryption
• Report on data risk and exposure
• Track user behavior and detect anomalies
• Transparent data movement to other arrays and the cloud
Introducing BrickStor
Data Storage + Security + Compliance in a Single Platform

17. © Copyright RackTop Systems Inc. 2015-2018.
BrickStor Appliance Configurations
•All Flash or Hybrid Systems
•Unified Storage NFS, SMB, AFP, iSCSI
•Up to 1.4TB of RAM (cache) per node
•Up to 4 x 10Gbe, 25Gbe, 40Gbe or 100*Gbe
•Starting at 24TB+ for Hybrid; 2.4TB+ for all flash
•Scale to more than 4 Petabytes per node cluster
•Starting at 2U of rack space
•Secure Supply Chain - 100% assembled in the US,
including flashing hard drive firmware and enclosures; TAA
compliant
*100Gbe shipping in summer 2018

18. © Copyright RackTop Systems Inc. 2015-2018.
Compliance Out of the Box
• Address Multiple Regulations and Policies
• NIST 800-171/GDPR/SOX/FINRA/SEC/HIPPA
• Policy Driven Microservices –
• Snapshots, HSM, Retention, Storage Settings, Encryption
• Eliminate dependency on Users and Admins – Automate
• Real Time interactive reporting and Static reporting
• Manage Least Privileged Access Easily
• Host based Access and Role Based Access Controls
• Complete activity and audit reporting

19. © Copyright RackTop Systems Inc. 2015-2018.
Compliance Out of the Box

20. © Copyright RackTop Systems Inc. 2015-2018.
Transparent Data Movement (TDM)

21. © Copyright RackTop Systems Inc. 2015-2018.
An Elegant Solution to a Complex Problem
•Consolidated Platform Reduces Cost and Increases
Security
•Security by design
○ Access Controls
○ Encryption
○ User Behavior
•Out of the box compliance
○ Policy driven services
○ Canned reports
•Reduce the overall burden on IT

22. Thank you!
Storage Switzerland
http://www.storageswiss.com
georgeacrump@storageswiss.com
StorageSwiss on Twitter:
http://twitter.com/storageswiss
StorageSwiss on YouTube:
http://www.youtube.com/user/storageswiss
RackTop Systems
http://www.racktopsystems.com
info@racktopsystems.com
RackTop Systems on Twitter:
https://twitter.com/racktop
RackTop Systems on Facebook:
https://www.facebook.com/RackTop

23. Three Reasons Storage Security is Failing
and How to Fix It
For complete audio and Q&A please register for the On Demand Version:
http://bit.ly/3SecurityFail