Who should be responsible for a company’s encryption keys?

Mar 15

Businesses today are finding the privacy of their data to be increasingly at risk from a growing variety of security threats

Nick Ismail

***

While keeping data on-premise can offer data owners peace of mind, and may help the business achieve a level of regulatory compliance, it is control over decryption keys that dictates who can see and use the information, rather than where it’s held.

Over time, as regulators and content owners come to accept this, the logical location of the data will become more significant, and the physical location(s) of an encrypted file will become increasingly irrelevant.