CSA certification for cloud-based hardware security module (HSM) service highlights commitment to data security and trust
Entrust, a leading provider of trusted identities, payments and data protection, announces it has obtained Cloud Security Alliance’s Security Trust Assurance and Risk (CSA STAR) certification for its nShield as a Service offering. CSA STAR is the industry’s most powerful program for cloud security assurance and this certification demonstrates the company’s competency to deliver cloud services with strict and transparent security and privacy controls and validates the security posture of its cryptography on demand offering.
nShield as a Service delivers cryptography on demand and is designed for organizations embracing cloud-first strategies, selective cloud migration, or adding HSM capacity to handle workload spikes. The customer experience is consistent and familiar – users interact with the cloud-based nShield® HSMs in the same way as with nShield appliances in their own data centers. Customers utilizing the unique CodeSafe secure execution environment to run sensitive application code within a secure FIPS-validated boundary have that same opportunity using cloud-based as well as on premises HSMs.
"Enterprises understand that they are responsible for data security and customer privacy – whether that data is in the cloud or in their own data center. That’s why a cloud security strategy and best practices are so critical," said Cindy Provin, Senior Vice President and General Manager for Entrust data protection solutions. "Earning CSA STAR certification highlights our commitment to cloud security best practices and transparency around the security safeguards we have in place, which is a powerful tool for building trust and confidence for our customers."
"Certification for the CSA STAR registry is obtained through a rigorous process of self and independent evaluation measured by a set of cloud security principles known as the CSA Cloud Controls Matrix (CCM)," said John DiMaria, Assurance Investigatory Fellow for CSA. "Only those who pass the CCM evaluations are included in the registry. Entrust’s addition to the registry allows organizations to effectively evaluate its security posture and practices and brings trust and integrity of the information based on third-party validation."
nShield HSMs and nShield as a Service are among the highest-performing, most secure and easy-to-integrate HSM solutions available, facilitating regulatory compliance and delivering the highest levels of data and application security for enterprise, financial and government organizations.
nShield as a Service uses nShield HSMs to generate, access and protect cryptographic key material separately from sensitive data. All nShield HSMs are managed through Entrust’s unique Security World key management architecture that spans cloud-based and on premises HSMs. This lets customers efficiently scale HSM operations while retaining control of their key material, even if they change their cloud service provider.
Organizations can utilize nShield as a Service to supplement or replace on premises HSMs, while keeping the benefits of HSM ownership. The subscription model lets enterprises budget predictably, manage capacity, reduce data center footprint and decrease time spent on routine maintenance and monitoring.
Entrust’s nShield as a Service CSA STAR registry listing can be found here.
To learn more about nShield as a Service cloud solutions, visit https://www.ncipher.com/products/general-purpose-hsms/nshield-as-a-service.
About Cloud Security Alliance
The Cloud Security Alliance (CSA) is the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. CSA harnesses the subject matter expertise of industry practitioners, associations, governments, and its corporate and individual members to offer cloud security-specific research, education, training, certification, events, and products. CSA's activities, knowledge, and extensive network benefit the entire community impacted by cloud — from providers and customers to governments, entrepreneurs, and the assurance industry — and provide a forum through which different parties can work together to create and maintain a trusted cloud ecosystem. For further information, visit us at www.cloudsecurityalliance.org, and follow us on Twitter @cloudsa.
Entrust keeps the world moving safely by enabling trusted identities, payments and data protection. Today more than ever, people demand seamless, secure experiences, whether they’re crossing borders, making a purchase, accessing e-government services or logging into corporate networks. Entrust offers an unmatched breadth of digital security and credential issuance solutions at the very heart of all these interactions. With more than 2,500 colleagues, a network of global partners, and customers in over 150 countries, it’s no wonder the world’s most entrusted organizations trust us. To learn more, visit www.entrust.com.
View source version on businesswire.com: https://www.businesswire.com/news/home/20201007005080/en/
Ken Kadet, VP, Public Relations