RE: Securing Backups via Encryption

["Beauford, Jason" <jbeauford () EightInOnePet com>]

Good question.  Here I am not encrypting the data as it is archived to
the tape.  I am using Veritas BackupExec with LTO-2 as my archive
solution.  With the recent rash of data theft and lost backups (Citibank
and Motorola), I too have become very interested in this topic.  As of
now I have an open case with Veritas (waiting for a call back) and I am
hoping they can steer me in the right direction.  Although I doubt it is
an integrated feature.

-JMB

-----Original Message-----
From: Dave Nardoni [mailto:dnardoni () firstresponseconsulting com] 
Sent: Wednesday, June 15, 2005 11:50 AM
To: security-basics () securityfocus com
Subject: Securing Backups via Encryption


I am interested in how many of you are securing your backups via
encryption.

If you would not mind sharing some of your solutions.

What are you using to encrypt data that goes to tape? 
What are you using to encrypt data that goes to disk?
What are you using to encrypt data that goes to an offsite storage
facility via web (ie. Xdrive or similar service offsite service)? What
services do you employ to handle secure backups offsite?

Any other ideas around this would be helpful.

Thank you in advance for sharing your comments,

David Nardoni CISSP, EnCE
dnardoni () firstresponseconsulting com
PGP Signature: 9CE4 C240 BBC7 2945 BDD6  C97A 0E3D 2547 DB0A 104C