Ed / Paul
To clarify, when tapes are offsite, they are stored in secure cases, locked
and sealed. The courier only get a case, with NO idea what is inside.
Only our inventory (which security retain) is known by certain key members.
Also, the cases are tracked electronically, so we know when they leave, when
they arrive. When we ask for case XXXX we know the contents within this, no
one else.
Thanks
Regards
Simon Weaver
3rd Line Technical Support
Windows Domain Administrator
EADS Astrium Limited, B23AA IM (DCS)
Anchorage Road, Portsmouth, PO3 5PU
Email: Simon.Weaver at Astrium-eads.net
-----Original Message-----
From: Ed Wilts [mailto:ewilts at ewilts.org]
Sent: 11 November 2006 01:17
To: Paul Keating
Cc: Veritas-bu at mailman.eng.auburn.edu
Subject: Re: [Veritas-bu] Recognise Media from NBU
On 11/10/2006 7:12 AM, Paul Keating wrote:
> In my opinion, sending tapes off site with labels on them identifying,
> or hinting, in any way shape or form, what the data is on those tapes is
> a security risk.....
>
> eliminating as much info from being stored with the tapes is security
> by
> obscurity, if you will.
>
> If a tape was lost while offsite, would you rather it be an obscure
> barcode, or a label that says "Astrium HR-Finance"??
It doesn't matter if the tape is encrypted. You're not shipping around
unencrypted tapes are you?
We added a pair of Decru appliances earlier this year - they're sweet
boxes and allow us to encrypt *everything*. We no longer have the
question if server x is encrypted whereas y isn't - we encrypt all of
the data all of the time.
.../Ed
--
Ed Wilts, Mounds View, MN, USA
mailto:ewilts at ewilts.org
_______________________________________________
Veritas-bu maillist - Veritas-bu at mailman.eng.auburn.edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
This email (including any attachments) may contain confidential and/or
privileged information or information otherwise protected from disclosure. If
you are not the intended recipient, please notify the sender immediately, do
not copy this message or any attachments and do not use it for any purpose or
disclose its content to any person, but delete this message and any attachments
from your system. Astrium disclaims any and all liability if this email
transmission was virus corrupted, altered or falsified.
---------------------------------------------------------------------
Astrium Limited, Registered in England and Wales No. 2449259
Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England
|