People constantly exchange personal and professional unprotected emails containing confidential information often without considering the potential consequences of such transactions. Email is used both for communication and is often the preferred method of routing documents both within and outside company walls.
Corporate Espionage
Businesses of all sizes have succumbed to forms of corporate espionage. Some instances make the front page such as when a touted Ferrari engineer Mauro Iacconi reportedly passed wind tunnel data to Toyota(1) and Hewlett-Packard's legal fiasco with one of its former executives Karl Kamb. Email threads show that HP attempted to gain access to computer rival Dell's plans to enter the printer business(2).
Billions(3) are spent each year on firewalls, anti-virus and other security tools to protect internal information from threats beyond the corporate perimeter. While corporate dollars are allocated for such measures, relatively little effort is given to protect email data as it travels across the internet.
Outbound Email, a Valuable Commodity
With all the millions of email sent each day, why would anyone want to read my emails? Internal and outbound email communications can contain your most important company secrets. Think about the many invaluable pieces of collateral kept on your firm's computers and shared drives. Emailing any of these outside the firm could negatively impact your company's commercial relationships, clientele and prospects.
These documents represent your business's time. Edgar Kully of Crestwood Associates, a Market Research firm in Kirkland, Washington, spoke to ESS about how this practice impacts his business:
"When a client takes your proposal and passes it onto a competitor with the instructions of, 'this is a great approach, can you duplicate it for less money?' we are getting screwed. It's one thing to argue price with a client, but a whole other thing when your intellectual capital is given away to make your competition smarter."
Should smaller firms take this lying down? Each time intellectual property (IP) is stolen from small and medium sized firms, it essentially puts the economy at risk.
Small firms stimulate the economy and account for 99.7 percent of all employer firms(4) and are 60 to 80 percent of net new jobs annually over the last decade(5). SMBs need solutions to prevent IP from leaving its doors and inevitably affecting U.S. economic growth.
Protecting SMB Assets Every time an email is sent out by an SMB, a sender must rely on luck and the mercy of its recipient for assurance that sensitive information isn't leaked. All too often, data is "Frankensteined;" cut up, stitched together and then parceled out to the competition.
Here are just a few ways your email can be stolen:
- Insider leaks and redistributing sensitive content.
- Corporate scanning of outbound and inbound email content - insiders may be tempted to gain access to the companies email logs, thereby compromising executive and other departmental communication.
- Interception at the ISP server level- it is possible for an ISP insider to get a hold of your email and attachments.
- Cross-border interception - when emailing internationally there are often few legal safeguards to keep your email and attachments from being hijacked.
- Interception of your wireless (WiFi) signal
- Access to your email account is stolen
The only way to truly prevent your email from being intercepted and redistributed is to use email encryption with rights management controls (also referred to as DRM). Email encryption with robust controls like rights management ensures the secure transfer of email and attachments between sender and recipient.
SBRM Solutions What about the cost? DRM technology which was once exclusively for large Enterprise entities and the financially privileged. These tools are becoming accessible to the small and medium businesses. SMBs no longer have to rely on luck and the mercy of its recipients to keep sensitive information protected anymore.
SBRM Advantages Are SMB solutions just as good as Enterprise DRM? Small Business Rights Management (SBRM) software can be just as robust, flexible and support just as many file types as ERM (Enterprise Rights Management) solutions.
Email encryption and rights management used by small and medium firms level the business playing field when going toe-to-to against their large Enterprise business.
Email encryption can:
- Enable small businesses to quickly send protected email and files to anyone with an e-mail address and a PC, securing email privacy between intended recipients.
- Provide encryption to ensure safe transit of email, ensuring both sender and recipient is legitimate.
- Prevent forwarding, editing, cut/copy/paste, printing, and print screen capture. Also allows sender to set access dates to sensitive data.
- Ensure compliance with HIPAA and other data privacy legislation.
A SMB firm's intellectual property doesn't have to be a tool to make the competition smarter. Using an extra layer of security can be the difference between being a market leader or falling behind the competition.
- - - - - - - - - - -
End Notes:
- Leyden, John "F1 enfineers plan appeal in Ferrari espionage case," The Register, http://www.theregister.com , 30 April, 2007.
- Sandovall, Greg, "HP wins restraining order against former executive," CNET News.com, http://www.news.com , 26 January 2007.
- Heiman. Richard V. and Anthony C. Picardi "Worldwide Software 2005-2009 Forecast Summary", IDC, August 2005 http://www.idc.com/getdoc.jsp?containerId=33783 1 December, 2005
- SBA Office of Advocacy, "Frequently Asked Questions [pdf document] " October 2005, http://www.sba.gov/advo, 1.
- Ibid.