How EgoMind Secured Hybrid Work Data with Kingston IronKey

Background

When hybrid working mainstreamed the office/remote working model, ensuring data security while maintaining flexibility became a major challenge. EgoMind GmbH, an innovator in custom software development services, needed a reliable solution to safeguard sensitive data, such as personal information, company intellectual property, and critical client data in a hybrid work environment. With employees alternating between office, home, and other remote locations, the balance of keeping data secure yet having flexible access became paramount.

Challenge

EgoMind GmbH faced the complex challenge of finding a data storage solution that was not only secure but also user friendly and versatile. They evaluated several options, including local network storage, cloud storage, and USB drives, each with its own set of benefits and drawbacks:

• Local/On-premises, with VPN access: For remote VPN connections, this can be slow for large files and problematic with limited bandwidth, especially when collaborating with external partners. Plus, it can introduce a further vulnerability, allowing a single point of failure when it comes to compromise, or cyber-attack.
• Cloud storage: Though flexible and easy to use, it raises concerns about security risks, as data is stored on third-party servers, potentially vulnerable to hacking. An encrypted cloud means that it is software-encrypted. A company must manage its encryption keys, which are constantly required to encrypt and decrypt the data and therefore exposed to computers. Someone with access to the keys can cause a lot of damage.
• USB drives: If using cheap consumer drives, they can pose significant security risks if lost, stolen, or relying on software-based encryption alone.

Given these challenges, EgoMind needed a solution that combined the robust security of hardware based encrypted drives with the flexibility typically associated with local storage with VPN access or cloud solutions.

EgoMind's primary goal was to ensure the secure handling of sensitive data while providing employees with the flexibility to work efficiently across different locations. They needed a solution that allowed secure data access without relying on internet connectivity, which is often unstable, unavailable, or even unsafe in remote work environments. Public Wi-Fi has become a key attack mode for bad actors to steal data at airports, hotels, coffee shops, and other public areas where employees may need the internet to connect to their corporate or external cloud.

Solution

EgoMind ultimately decided to use Kingston IronKey hardware-encrypted USB drives and external SSDs. As data security became the key driver for this project but needed to be user friendly, the next challenge was to ensure that hardware-encrypted storage was as easy as possible for their employees to adopt.

To ensure that only these secure devices are used and to prevent unauthorized devices, they implemented a Zero Trust Storage Access solution (Appterix) according to their technical guideline that only allows Kingston IronKey storage. The Vault Privacy 80ES and Keypad 200 series were particularly convincing. Both models are portable and are OS independent. Additionally, the simple setup and deployment processes of these devices ensure easy adoption by employees.

VP80ES is a FIPS 197 Certified and XTS-AES 256-bit hardware-encrypted external SSD that offers password-protected access via a touchscreen, without the need for additional software on the target system. The Keypad 200 series USB boasts FIPS 140-3 Level 3 (Pending) certification, with XTS-AES 256-bit hardware encryption.

While smaller in form factor, the KP200 offers similar functionality, but with a physical numeric keypad. Both devices offer the advantage of flexible data access, even from mobile devices such as smartphones and tablets. They both excel as OS-independent drives for added flexibility.

Results

The adoption of IronKey VP80ES and Keypad 200 series drives significantly enhanced EgoMind's data security hygiene. Employees can now securely carry essential files and applications on these compact devices, ensuring business continuity without requiring internet connectivity to access their data.

This solution has eliminated the need for cloud storage when sharing large files with colleagues or partners, further reducing the risk of data breaches. VP80ES drives can store up to 8TB of data. Moreover, the drives' compatibility with various operating systems makes them versatile and adaptable to different work environments.

Conclusion

EgoMind GmbH's decision to implement hardware-encrypted USB drives has proven to be a strategic move in safeguarding sensitive data within the hybrid work model. Kingston IronKey VP80ES and KP200 drives have provided the perfect balance of security, flexibility, and ease of use, empowering the company to maintain high standards of data protection while adapting to the dynamic needs of modern work environments.