Quantum announces multi-layered data security framework for backup, recovery and archiving

Quantum Corp unveiled a comprehensive, multi-layered data security framework focused specifically on backup, recovery and archive processes. Addressing security for standalone tape drives, tape cartridges, and tape automation and disk-based backup systems, this framework encompasses three types of controls: those governing physical access, administrative access and data access. Quantum is incorporating these controls into a range of robust but cost-effective security offerings to be introduced in phases over the coming year. In developing its security framework, the company has focused on providing a range of options that are easy to implement and manage and that enable customers to meet required levels of data confidentiality, integrity and availability, with no disruption to their backup and recovery processes.



Quantum's initial security offerings will include DLTSage Tape Security, a solution designed to prevent unauthorized access to data on tape cartridges that will be particularly valuable in protecting tapes that must be transported offsite. At no additional cost to customers, this feature will be provided in the company's newest DLT tape drives and supported in its tape automation systems. DLTSage Tape Security will also serve as a complement to other elements of Quantum's security framework, including a new strategic partnership with Decru and native encryption on Quantum's DLT tape drives.



“Quantum is building on its industry leadership with a solid, multi-layered security framework for customers of all sizes,” said Jon Oltsik, senior analyst for Enterprise Strategy Group. “The DLTSage Tape Security solution is particularly unique, as it addresses an immediate end-user need, does not impact backup or recovery performance and is offered free-of-charge. By combining this security protection with encryption and other types of access controls, Quantum has clearly demonstrated that it understands the importance of a layered approach to data security.”



Over the past year, there have been several high profile reports of major companies losing tapes containing private information on millions of individuals, raising concern about exposure and misuse of such information. The incidents have forced these companies to bear the financial cost of mitigating potential damage to impacted customers and employees, exposed them to legal risk, and harmed their reputations. These incidents have also led to federal and state efforts to create new laws and regulations governing data security. However, while many businesses are beginning to recognize the increased importance of securing their data, they are struggling with how to respond. A study earlier this year by the Enterprise Strategy Group found that less than 20 percent of companies regularly encrypt their data as it's backed up to tape. In many cases, the reluctance to take action in the area of storage security is due to concerns about cost, performance degradation, and the impact on recovering data, as well as the sense that many solutions don't meet the full range of security needs.



Quantum's security framework addresses these customer concerns by taking a defense-in-depth approach, with controls on physical access, administrative access and data access in backup, recovery and archive processes. In addition to physical locks Quantum currently provides on its storage systems, the company will offer administrative controls such as user authentication and authorization and role-based access privileges that allow only authorized administrators to access Quantum systems. Other administrative controls will include audit logging and Secure Socket Layer/Secure Shell (SSL/SSH) support. Audit logging enables tracking of all attempts to access Quantum systems, whether successful or not, as well as tracking of activity once access is granted. SSL/SSH support provides secure network-based access and login access to administrative information about Quantum's storage systems.