Surviving the Mandate to Encrypt: Best Practices for Managing Encryption 
Marc Massar, Principal Solutions Architect
Venafi
Presentation Abstract:
With regulatory concerns and news of the latest security breaches reaching unparalleled levels, executives are demanding that encryption be deployed wherever data exists. Some security folks have jumped in feet first but others are dragging their feet because they recognize the real difficulties and costs properly managing encryption certificates and keys encryption will require. Most that are already broadly encrypting have to rely on costly and error-prone manual maintenance and management processes, which increase the risk that un- or under-managed encryption will lead to system downtime and failed audits. So, how are people getting this done?
In this presentation, we will define the most significant challenges surrounding encryption management and suggest a series of best practices that can be implemented to increase security and compliance with industry regulations. The speaker will offer real-life experiences gained from his previous position as lead architect for First Data Corporation’s Global Encryption Program, and his current position helping some of the world’s largest organizations implement systems management for encryption. He will also offer tips to help InfoSec better collaborate with IT operations to make the entire encryption management process a much easier chore.
Bio:
As a leader in encryption, security and technology management, Marc Massar has been sought after and consulted by both Government and Industry for assistance with political policy, strategic roadmaps and product development. Currently a principal solutions architect for Venafi, inventor of systems management for encryption, Massar's insight into encryption management was critical at First Data Corporation, the world's largest processor of electronic payment transactions. As the lead architect for the Global Encryption Program, Massar developed and deployed the global encryption strategy, encompassing all aspects of data protection with encryption. He enjoys asymmetric algorithms, long keys and Mountain Dew.
He is a member of the OASIS Enterprise Key Management Infrastructure Technical Committee, has found particular interest in data at rest solutions in the marketplace and has been a vocal advocate for application integration to encryption services. Massar warns of "Snap-On" security solutions: "You can't simply buy a box and start encrypting data. It's just not that easy." He holds a degree from Occidental College, is a Certified Information Systems Security Professional and is also Infosec Assessment Methodology certified by the National Security Agency.
