Virtustream, Inc., a managed service provider (MSP) offering IaaS and enterprise-class cloud software, has added "data at rest" encryption to its cloud services portfolio. The company has partnered with Vormetric, a provider of enterprise encryption and key management.
The new level of encryption enables Virtustream to offer highly secure and compliant solutions with its xStream cloud management software and cloud IaaS services. The offerings enable enterprises, governments and service providers to run their mission-critical applications in private, public and hybrid clouds.
The MSP is now offering Vormetric's database and file encryption solution to its customers that require an additional layer of security to meet sensitive internal data policies or compliance mandates for business data. The new service also provides a secure approach to protecting sensitive data in the cloud, including that governed by regulatory guidelines and compliance frameworks like NIST 800-53, DIACA, FedRAMP, FISMA, ICD503, G-Cloud, CSA Recommendations, ISO27001, HIPAA/HITECH, PCI and SSAE16/SAS70.
Vormetric's Data Security provides enhanced security measures in Virtustream clouds, including layered physical/virtual security, cloud-to-cloud encryption, core servers with new Intel CPUs supporting AES-NI, hardware-level authentication (Intel TXT), encrypted VPN (IPSEC and SSL), Key Escrow using Data Security Modules, GRC tools, two-factor authentication, encryption in archive and a variety of additional security and compliance measures and reporting.
Virtustream is the first cloud provider offering the Vormetric solution in a SaaS model through elastic, consumption-based pricing of services. This means services are priced per virtual CPU of each database server instead of through traditional perpetual licensing models. The provider may now offer and manage encryption of client databases at their location in the data center before they move the workload to the Virtustream cloud. This enables customers to protect personally identifiable information and other sensitive data to achieve regulatory compliance as well as avoid potential data breach costs.
"File-level encryption is the most effective and flexible approach to cloud data security for enterprises concerned with regulatory compliance, protecting their IP and meeting contractual obligations around customer data," said Bruce Johnson, vice president for worldwide sales and service operations at Vormetric. "By offering Vormetric Encryption through a pay-as-you-go model, Virtustream is providing comprehensive, built-in and transparent security for any database, that can follow customer data-whether it is in the cloud or a datacenter."
"It can be challenging to get large enterprises to trust the cloud, so this partnership with Vormetric provides a significant security measure required to overcome that concern," said Pete Nicoletti, director of security and compliance at Virtustream. "With Vormetric's solution, we now have a database encryption security option suitable for customers who are required to comply with executive mandates or compliance frameworks but have not yet deployed encryption at their database or application layer. Adding this capability will make moving mission-critical data to the cloud a more feasible option for any enterprise looking for immediate risk reduction and cost savings."
"By partnering with Vormetric, we are able to combine its nimble and powerful security solution with our cloud solution for increased data protection with high performance and low overhead," said Mike Olson, vice president of operations and service delivery for Virtustream. "Together we offer customers a more secure, compliant cloud environment with reduced infrastructure costs, and increased performance and uptime."
Edited by
Brooke Neuman
