CISOs: It’s Time to Rethink Encryption as You Know It

In a recent podcast episode from Digital Doorways, the featured guest Marene Allison advises CISOs everywhere to focus on a sustainable data-centric approach and recommends innovative encryption of data-in-use technology to address gaps within operational data security.

Marene is a highly respected cybersecurity and Information Technology (IT) leader, advisor, and board member with more than three decades of experience, including as the former Vice President and Chief Information Security Officer (CISO) for Johnson & Johnson. She is featured on the podcast with host Jason Siegel, founder of the cybersecurity-focused digital marketing firm Bluetext.

“Everyone needs to have a new primer on encryption and how it can be utilized,” Allison said in the episode. “It can be used at rest, in use, and in transit. You can encrypt all of that today.”
Marene continues to discuss how data is rarely in one place—it is moving around and needs to be accessible. And the only way to truly protect that data is with encryption-in-use technology.
“And that’s where I think Paperclip is absolutely unique,” Allison said. “It can encrypt in use, which is a game changer.”

Paperclip SAFE® as a Privacy Enhancing Technology (PET) platform leverages searchable symmetric encryption, NIST AES 256 encryption algorithms, patented shredding protocols and Privacy Enhancing Computation (PEC) to go beyond existing data encryption technology.

CISOs today are looking at rapidly evolving data privacy and security laws. It’s clear when analyzing the implications of data theft and growing ransom costs, we’re missing an obvious solution to many of these critical data control challenges. To control and secure the data it must be encrypted at rest, in transit, and in use. Allison stated that when she was a CISO at Johnson & Johnson this was a technology she was searching for, but a practical solution did not yet exist.

She encourages CISOs to look at what technologies have changed in encryption—it’s not as daunting as it once was. There are significant solutions available now that can change how they handle data management and data security—like Paperclip.

“I don’t understand why any company today takes any personally identifiable information (PII), HIPAA data, financial data, and doesn’t encrypt it,” she said. “Especially if they need to utilize it and protect it. It’s about protecting your company and its brand.”

To listen to the full episode, visit the Digital Doorways podcast. Learn more about Paperclip SAFE here.