Guardium Data Encryption Documentation
Manage data security and privacy laws, encrypt your files, databases, and apps, and manage encryption keys for cloud-based data.
Software for data encryption and key management is part of the IBM Guardium Data Encryption family. Through the central management of rules, configurations, and encryption keys, CipherTrust Manager (previously known as Data Security Manager or DSM) controls the modular components.
Solutions for encryption that will protect your data and business
The IBM The solutions in the Guardium Data Encryption suite are all built on the same architecture. These highly scalable modular solutions offer key management, data encryption, tokenisation, and data masking features to assist secure and regulate data access throughout the hybrid multicloud environment. They can be used singly or together. Data security and privacy laws like GDPR, CCPA, PCI DSS, and HIPAA can be met via tokenisation, data masking, safe key generation, and automated key rotation.
Benefits
Data protection in various contexts
Safeguard your information wherever it is stored and assist businesses in securing their cloud migration.
Attend to the requirements for compliance
Strong data encryption, comprehensive user access guidelines, data access audit recording, and key management tools can all help ensure compliance.
Cut down on administrative work
Use a user-friendly web-based interface to centralise encryption, encryption key setting, and policy management.
Which Guardium Data Encryption products are appropriate for your company?
Guardium for Database and File Encryption
Protect structured databases, unstructured files, and cloud storage services while handling compliance reporting by encrypting data-at-rest using centralised key management, privileged user access control, and thorough data access audit monitoring.
Guardium for Cloud Key Administration
Automated key rotation and expiration management, along with full encryption key lifecycle control, can be centralised to lower complexity and operating costs. Customers can separate, create, own, and revoke encryption keys or tenant secrets used to construct them with bring your own key (BYOK) customer key control.
Data Encryption Key Management with Guardium
Centralise the administration of keys for IBM Guardium products, databases, cloud services, and apps from third parties. Support for KMIP, an industry-standard encryption key exchange protocol, enables keys to be maintained using a shared set of guidelines.
Guardium for transforming data in batches
To make use of data sets while avoiding the misuse of sensitive information, enable large-quantity static data masking, which converts selected data into unreadable forms. Mask information before adding it to a big data environment, sharing it with third parties, getting ready for a secure cloud migration, and more.
Application Encryption using Guardium
In a solution that is adaptable enough to encrypt almost any kind of data moving through an application, you can access DevSecOps-friendly software tools. Because it happens instantly upon data creation or initial processing and can stay encrypted regardless of the state during transfer, usage, backup, or copy, application layer data protection can offer the highest level of security.
Guardium for Container Data Encryption
Container-aware data protection and encryption features for fine-grained data access controls and data access logging in containerised settings are provided by this IBM Guardium for File and Database Encryption extension.
Guardium for Tokenisation
Secure and anonymise critical assets, whether they are located in the cloud, big data settings, or data centres, by utilising dynamic display security and application-level tokenisation. Guardium for Tokenisation takes little software engineering and may be implemented as an appliance in any virtual format you choose because it makes use of standard protocols and environment bindings.
Features
Database, application, and file encryption
IBM Guardium Data Encryption provides features for cloud storage services, containerised environments, and securing and managing access to files, databases, and apps both on-site and in the cloud.
Controlling user access rules
Granular control over user access is made possible by Guardium Data Encryption. Users and groups may be subject to specific rules with controls that include access by process, file type, and time of day, among other factors.
Tokenisation and data masking to safeguard active data
Certain portions of a data field are obscured by dynamic data masking, whereas sensitive data is obscured by format-preserving tokenisation. Data masking restrictions and tokenisation techniques are managed via a centralised graphical user interface.
Orchestration of cloud encryption keys
Clients can use a single browser window to handle the data encryption keys for their cloud environments. Guardium Data Encryption facilitates the creation, separation, ownership, control, and revocation of encryption keys or tenant secrets through the use of bring your own key (BYOK) lifecycle management.
Assistance in efforts to comply with regulations
Key lifecycle management capabilities, strong data encryption, and strict user access policies are required by regulations like HIPAA, PCI DSS, CCPA, and GDPR. Organisations can use comprehensive data access audit logging to assist with compliance reporting.
KMIP centralisation of data encryption keys
All of your encryption keys’ rotation, storage, and lifecycle management for KMIP-compatible data repositories are centralised with CipherTrust Manager. A server (key store) and clients (appliances and apps) exchange encryption keys using the industry-standard KMIP protocol.
IBM Guardium data encryption pricing
Security teams may coordinate data protection tools from a single location using IBM Guardium Data Encryption.
All nine of the Guardium Data Encryption solutions can be deployed alone or in combination based on business requirements, and the CipherTrust Manager serves as their central management hub. This web-based user interface streamlines security operations in your company by making data encryption and key management activities easier.
- Oversee the creation, distribution, and storage of encryption keys centrally for both on-premises and cloud contexts.
- Define user access privileges, enforce policies consistently, and improve crucial visibility and compliance reporting with automated logging to facilitate the separation of roles.
- For extra security, integrate with current third-party hardware security modules (HSM).
The cost varies according to the offerings you decide to implement and your current configuration.
