High Security Module
Globalscape’s High Security Module (HSM) for EFT Server achieves or exceeds security practices mandated by the most rigorous standards, including PCI-DSS, FIPS 140-2 Validation, HIPAA, and Sarbanes-Oxley. Whether your business is obligated to comply or you simply desire the utmost in security standards, the HSM is your solution for securing data transfer, access, and storage.
Protection of Data at Rest
The HSM helps organisations meet high security standards with powerful features to protect data in storage. The HSM employs repository encryption and securely wipes deleted data so that it cannot be reconstituted.
Protection of Data in Transit
With support for multiple secure protocols and a built-in FIPS 140-2 validated cryptographic library, the HSM thoroughly protects data in transit. By enforcing the use of secure protocols, strong ciphers, encryption keys, and password policies, data transfers strictly follow all security guidelines.
Controlled Access to Data
The HSM enforces strong account access policy controls such as the automatic lock out of accounts, users and administrators, after a set amount of incorrect login attempts and the removal of inactive accounts after a certain period of inactivity. Additional security controls can be set to automatically expire passwords on certain dates, and notifications such as emails and banners can be configured accordingly.
Minimised Attack Vector
The HSM lets you leverage your existing Active Directory infrastructure for EFT Server administrator accounts, eliminating the need to create, maintain, and track standards compliance of built-in, administrator accounts typical of most MFT solutions.
Ongoing Standards Compliance
Compliance with security standards such as the PCI-DSS is not a “set it and forget it” process. The ultimate goal of securing sensitive company data requires continuous monitoring and validation of security policies and controls. Globalscape makes it easy for an administrator to create and maintain file-transfer services that meet or exceed these standards with an simple set-up wizard. Once enabled, the HSM is an ever-vigilant security tool that disallows low-security options, captures compensating controls, and generates reports for auditing the system’s compliance status.