Data encryption provider nuBridges seeks to bolster encryption key management. A byproduct of encryption is a generation of encryption keys that allow authorized users and applications to lock and unlock the data, all of which need to be managed and protected on an enterprise level. According to Trust Catalyst Principal Kimberly Getgen in a 2009 report on encryption and key management1, âEight percent of organizations have experienced problems with lost encryption keys, creating security concerns (50 percent), causing data to be permanently destroyed (39 percent), or disrupting the business (39 percent), while 19 percent of respondents said they directly lost business.â The 2009 Trust Catalyst report also shows that ârotating keys, decrypting and re-encrypting dataâ is the most difficult aspect of key management, according to the survey. In 2008, it was considered the second most difficult aspect, following âpreparing for the unfortunate publicity and impact of data breach,â illustrating the rise of encryption key management anxiety among data security professionals.
One publicized mishap concerning backing up keys occurred last summer.
On July 9, The H, a European online security publication, reported that Germanyâs first-generation electronic health cards and doctorâs âhealth professional cardsâ had suffered a serious setback because it was revealed that the private keys had not been backed up and the production ones had become corrupted. Had this not been a test run of the technology, this oversight in key management best practices would have meant that real data would have been erased.