Encrypted Database Extra
The Encrypted Database Extra generates a random AES-256 bit encryption key and then uses that to encrypt sensitive text with a long, random, password prior to it being inserted into the SimpleRisk database. This prevents anyone from being able to view or modify the data without using the SimpleRisk application directly.
What are SimpleRisk Extras?
SimpleRisk Core is our widely acclaimed, award winning, free and open source product that has been downloaded over 60,000 times and contains all of the basic Governance, Risk Management and Compliance (GRC) functionality needed to establish a foundational GRC program. As an organization’s GRC program matures, extended functionality is often required to meet requirements beyond what is available in the SimpleRisk Core offering.
To address these expanded needs, SimpleRisk has developed a variety of plug-and-play modules termed "Extras" that provide functionality above and beyond our SimpleRisk Core offering. These plug-and-play modules will be essential to the success of your GRC program as your organization grows and matures its processes. While all of our Extras are available in packaged bundles with both SimpleRisk On-Premise and Hosted deployment models, they can also be purchased A La Carte for those organizations that choose to deploy our platform on-premise.
Why was the Encrypted Database Extra created?
The Encrypted Database Extra was designed for organizations that store highly sensitive data such as Personally Identifiable Information (PII), Confidential Business and Intellectual Property, or Protected Health Information (PHI).
How is the Encrypted Database Extra used?
This Extra is often used by organizations in the financial services space, healthcare, government agencies, eCommerce or any organization that stores sensitive data. In recent years it has become a requirement to employ database encryption to comply with regulatory mandates as well, like PCI DSS, HIPAA, or FIPS and it has proven to be an effective safeguard to protect data at rest.
What users would benefit from the Encrypted Database?
Because the Encrypted Database Extra is designed to protect an organization’s sensitive data, the benefits derived are realized by the organization as a whole. Not only does the Encrypted Database provide reputational protection it also protects against financial loss resulting from regulatory fines, potential downtime tied to a security compromise, and loss of business to competitors due to the negative publicity incurred by an exploit.
How can I learn more about the Encrypted Database Extra or try it out for myself?
To learn more about the Encrypted Database Extra or discuss specific use cases for how your organization could use it, feel free to schedule a demo online. If you would like to try out the Encrypted Database Extra functionality for yourself, we offer a free (no credit card required!) 30 day trial. Please reach out to SimpleRisk Support if you have any additional questions about the Encrypted Database Extra or any of the additional functionality that we offer.
