Secure information sharing an update on Egress Switch






































- Slides: 38
Secure information sharing an update on Egress Switch Michelle Chuvas, Egress Software Technologies 16 th September 2015 www. egress. com © Egress Software Technologies Ltd. All rights reserved
Agenda • • Data Sharing Challenge Egress Switch - a platform approach Egress in the South West Customer User Case Benefits of Egress to Free and Paid Subscribers Example of Third Sector Customers Questions © Egress Software Technologies Ltd. All rights reserved www. egress. com
The challenge remains the same… How do organisations share information with external third parties? • Plain text email? • Cloud-based file sharing (Dropbox, Hightail)? • FTP file sharing sites? • Fax and post? • No centralised control or security • The risk of data breaches and reputational damage © Egress Software Technologies Ltd. All rights reserved www. egress. com
Egress Switch – encryption services The platform: • Designed to share all forms of electronic information • Building on core centralised services • Delivered through four pillars of functionality • A single community-based licensing model © Egress Software Technologies Ltd. All rights reserved www. egress. com
The Trust Network A unique community based licensing model where free and paying subscribers can share encrypted information with one another unlimited times, using a single global identity. © Egress Software Technologies Ltd. All rights reserved www. egress. com 15
Customer growth Local Government expansion across the UK • 150+ local authority customers • 30+ Central Government bodies • 30+ Blue Light organisations • Used by 95% of UK local authorities • The only UK CPA Foundation Grade certified email encryption product © Egress Software Technologies Ltd. All rights reserved www. egress. com
Egress’ footprint in the South West © Egress Software Technologies Ltd. All rights reserved www. egress. com
Benefits to Paying Subscribers What are the benefits for paying subscribers? Share sensitive information with anyone Ability to enforce centralised policies Customisation and corporate branding Integration with existing scanning, filtering and archiving products in place Control recipients’ actions: access rights to copy, paste and print sensitive information shared • Additional storage on request • Integration with MS Outlook, mobile device platforms and other third party products • Full support: onsite visits, dedicated Egress account and technical managers • • • © Egress Software Technologies Ltd. All rights reserved www. egress. com
User Case 1 – Managed File Transfer Council User Case example: Problem • • Council moving to a paperless office environment Need to start sending payslips to staff via email Need to start sending citizens Revenue & Benefit letters, Council Tax Bills and Pension letters via email Some information being sent is sensitive or confidential and so needs to be secured while in transit and to avoid data being accessed by incorrect recipients Solution – • Egress Switch Secure Managed File Transfer to automate sending of secure emails with attachments to correct recipients • Ability to customise authentication – Staff enter their payroll / staff number Citizens enter their council tax number or postcode Benefits • Speed of delivery - improved efficiency when sharing large volumes of data • Easy to use for recipients • Cost savings – on postage & stationary and staff time © Egress Software Technologies Ltd. All rights reserved www. egress. com
User Case 2 – Secure Email Charity User Case example: Problem • Need to send emails to charity volunteers, rather than ask volunteers to go to Charity office to collect data • Data contains personal identifiable information about individuals (adults and children) who are at risk • Information being sent is sensitive or confidential and so needs to be secured while in transit and to avoid data being accessed or sent to incorrect recipients Solution – • Switch Secure Email provides a simple-to-use way of sending secured emails straight from Outlook • Policies can be put in place to enforce or prompt users to secure emails when certain content is found in the body or attachments of the email • Providing ability to audit and track who is accessing emails sent • Providing ability to revoke access if accidentally sent to the wrong person Benefits • Speed of delivery - improved efficiency when sharing data with volunteers • Easy to use for recipients • Cost savings – on postage & stationary and staff / volunteer’s time © Egress Software Technologies Ltd. All rights reserved www. egress. com
User Case 3 – Secure Web Form Charity User Case example: Problem • Need citizens / external parties to send information to Charity in a simple way. • Data may contain personal identifiable information about individuals (adults and children) who are at risk. • Information being sent is sensitive or confidential and so needs to be secured while in transit and make sure it’s delivered to relevant recipients at the Charity Solution – • Switch Secure Web Form provides a simple-to-use way for citizens / suppliers to submit relevant information securely to the Charity • Citizens / Suppliers do not need to register on the Egress service to send information securely • Guaranteeing data is submitted securely and delivered to right person/s or team at the charity • Providing real time audit for charity to see when data was submitted and who accessed this internally Benefits • Speed of delivery - improved efficiency when receiving data from external parties • Easy to use for recipients • Efficiency for external parties - submit information securely and quickly via the Charity website © Egress Software Technologies Ltd. All rights reserved www. egress. com
Benefits to council recipients…. . Why are councils’ recipients using Switch? • • Ease of use: one-time registration process Respond to secure emails free of charge Initiate new secure emails to paying subscribers for free Different options to access information: Mobile apps, Desktop or Web client Facilitates communication with the Council and other paying organisations using a single credential (Switch ID) Ability to transfer large files up to 100 mb per month for free Cost and time savings associated to postal services Audit and real-time control over information sent to paying subscribers © Egress Software Technologies Ltd. All rights reserved www. egress. com
Free Subscriber Support What support is available to free subscribers? • Direct telephone support • The Egress support centre is available to all Switch users http: //www. egress. com/create-support-ticket/ • Online tutorial videos http: //www. egress. com/online-tutorials/ • A user knowledge base http: //www. egress. com/technical-knowledge-base/ • Free apps http: //www. egress. com/downloads/ • Other data sheets, case studies and technical documentation http: //www. egress. com/resources-and-downloads/ © Egress Software Technologies Ltd. All rights reserved www. egress. com
Third sector customers that have upgraded to paying subscribers © Egress Software Technologies Ltd. All rights reserved www. egress. com
Any questions? © Egress Software Technologies Ltd. All rights reserved www. egress. com
Thank you for your time E: info@egress. com T: +44 (0) 2076248500 W: www. egress. com Twitter: @Egress. Switch www. egress. com © Egress Software Technologies Ltd. All rights reserved
Appendix © Egress Software Technologies Ltd. All rights reserved www. egress. com
About Egress Software Technologies • The leading provider of hosted and on-premise encryption services designed to secure all forms of electronic information • Formed in 2007 • Revenue growth: 100% year on year. Projected bookings FY 14: £ 4. 5 m • Over 350 customers split across Government, Healthcare, Banking and Insurance Services, Professional Services and ‘Third Sector’ • International focus • UK • Mainland Europe • North America © Egress Software Technologies Ltd. All rights reserved www. egress. com
Encryption services Switch Secure Email • CESG CPA Foundation Grade certified • Supports on premise and cloud hosted email services (MS 365 / Google) • Real-time revocation and auditing • Classification & watermarking • Multi-factor authentication • Deployment at the desktop or Gateway • Integration with MS Outlook • DLP scanning © Egress Software Technologies Ltd. All rights reserved www. egress. com
Encryption services Switch Secure File Transfer • A simple way to share files – large and small (no file size limit) • Real-time revocation and auditing • Multi-factor authentication • Outlook integration • Automated / Bulk file transfer • Classification • Cloud or on-premise data hosting © Egress Software Technologies Ltd. All rights reserved www. egress. com
Encryption services Switch Secure Web Form • A simple mechanism for third parties to share sensitive data • Share files of any format and size • Full audit trail • Customisable authentication • Automation • Third party or self-hosted options • Easy to manage and control • Ability to apply security permissions © Egress Software Technologies Ltd. All rights reserved www. egress. com
Encryption services Switch Secure Workspace • • • Secure online collaboration Full audit, tracking and reporting Check-in and check-out functionality Version control File / Folder Sync capability Unlimited file transfers Multi-factor authentication Fully customisable interface Easy to use © Egress Software Technologies Ltd. All rights reserved www. egress. com
Monitoring the flow of data Egress Switch Email Discovery • Monitor all inbound and outbound email • Scan for relevant / targeted content: • Case reference numbers • Personally identifiable information • Child protection / social services content • National Insurance / Social Security numbers • Customised key words or phrases © Egress Software Technologies Ltd. All rights reserved www. egress. com
Monitoring the flow of data Egress Switch Email Discovery • Detailed, customised reporting functionality • Highlight key data sharing trends and specific vulnerability: • Summary of emails processed • Details of attachment • DLP triggers • Individual user’s data sharing trends • Email domains of recipients • Message trends by volume and date / time © Egress Software Technologies Ltd. All rights reserved www. egress. com
Case study example: • Initial requirement identified by adult and children social care, and legal departments • Scanned over a two week period: • 196, 913 emails • 74, 298 attachments • Example rules: • Financial information • ‘People’ related content • Child protection • General DPA content © Egress Software Technologies Ltd. All rights reserved www. egress. com
Case study example: • 35, 967 emails with DLP matches (18. 3%) • 19, 458 attachments with DLP matches (26. 2%) • Example breakdown: • 1, 256 general DPA • 868 child protection • 680 UK passport numbers • 585 NI numbers • 99 credit card numbers • 59 drivers license numbers © Egress Software Technologies Ltd. All rights reserved www. egress. com
Building a business case for informed data security measures Putting this into practice… • Tailor security policies to specific sharing requirements • Ensure all necessary departments and users can access data security measures • Gateway encryption can enforce specific policies for comprehensive security © Egress Software Technologies Ltd. All rights reserved www. egress. com
Vertical focus Switch for Government • Used by over 300 organisations across UK Government (Local, Central, NHS and Blue Light) • The first encryption solution to achieve both CESG PGA and CPA certification to OFFICIAL and OFFICIAL SENSITIVE • Selected as one of only 30 suppliers under the Cyber Security Supplier to Government Scheme • Approved supplier under the G-Cloud 5 Framework • Listed in the NATO Information Assurance Product Catalogue © Egress Software Technologies Ltd. All rights reserved www. egress. com
Ease of access – enhanced mobile and desktop apps • A unified mobile apps platform • Enhance user interface • Available on: • The App Store • Google Play • Windows Phone store • Integrated desktop apps • FREE TO DOWNLOAD © Egress Software Technologies Ltd. All rights reserved www. egress. com
Vertical focus Switch for Legal and Accountancy • June 2014 – DX Group and Egress launch e. DX • A secure electronic document exchange • A seed model go-to-market approach targeting over 7, 000 legal organisations in the first wave • Existing customers include top 100 law firms • Top 50 UK accountancy firms © Egress Software Technologies Ltd. All rights reserved www. egress. com
Vertical focus Switch for Legal and Accountancy “By combining the delivery of physical mail with digital content, the DX Group could make itself the Amazon of the legal world and the deal establishes Egress Switch as the go-to encryption platform for legal” Charles Christian – Legal IT Insider, 1 st July 2014 © Egress Software Technologies Ltd. All rights reserved www. egress. com
Vertical focus Switch for Private Healthcare • Used by three of the five largest private healthcare organisations in the UK • Responding to the British Medical Association’s mandate that sensitive shared data is encrypted • Helping organisations comply with the NHS Information Governance Mandate © Egress Software Technologies Ltd. All rights reserved www. egress. com
Vertical focus Switch for Banking and Insurance Services • Used by banking organisations across the UK and Europe including the European Bank for Reconstruction and Development (64 member nations) • Insurance firms that include Direct Line and Swinton Insurance • Helping organisations comply with the Financial Conduct Authority’s (FCA) guidance on data security © Egress Software Technologies Ltd. All rights reserved www. egress. com
V 4. 2 release Email and Document Classification • Classify email message body and attachments at the point of send and release © Egress Software Technologies Ltd. All rights reserved www. egress. com
How Switch works © Egress Software Technologies Ltd. All rights reserved www. egress. com
Customer growth Local Government expansion across the UK • 120 local government customers • 433 registered Switch users © Egress Software Technologies Ltd. All rights reserved www. egress. com
Communications to your third parties Communication for your third parties? • Communication packs including: • • Did you know posters Web content Egress Switch user guides Email templates (internal and external) © Egress Software Technologies Ltd. All rights reserved www. egress. com
Commercial offerings for your third parties: • Option 1. Upgrade your single subscription to receive unlimited usage • Option 2. Upgrade to a business account to receive: • Unlimited usage • Branding & customisation • Direct telephone support and dedicated Egress a/c management • Additional features: classification / policy enforcement • Discounted offers: • Example: schools offers © Egress Software Technologies Ltd. All rights reserved www. egress. com