CASE STUDY
Controlled Access to Protected DataControlled Access to Protected Data
Enabling secure, policy-controlled access to Microsoft Purview Information Protection data
Studies show that the benefits of using encryption for protection against threat actors far outweighs the costs and complexity that accompanies the technology itself.
Encryption alone isn’t enough to maintain compliance with federal regulations. There must also be a way to securely decrypt the information for later use. This is the gap that Public Key Infrastructure (PKI) and Public Key Enablement (PKE) bridge. Using Public Key Infrastructure (PKI) to facilitate encryption comes with a set of standards, policy, and compliance guidelines that need to be meticulously followed to stay within audit specifications. Zeva has been providing PKI and PKE services since 2005 to multiple agencies of the Federal Government and many corporations in the United States and Europe. We can help you meet the applicable regulations and best practices for your industry.
A secure recovery solution is a common requirement within PKI infrastructures, and is needed to replace a lost employee credential, to support legal investigations, or access legacy keys. this needs to be added.
For key recovery, an important part of PKI is protecting keys using compliant hardware, such as using a FIPS 140-2 level 3 hardware security module (HSM). Government regulations often dictate specific requirements in this area.
Inspection of electronic data is an integral step in supporting legal eDiscovery, compliance investigations, and Freedom of Information Act (FOIA) requests. In such cases, any encrypted data needs to be decrypted in advance.
complies with FPKI, KRP, and FIPS 140-2 level 3 requirements.
API encryption libraries to facilitate integration with HSMs and Certificate Authorities.
secure encryption key escrow and storage.
secure key recovery with access control.
certificate migration for technology changes or mergers & acquisitions.
Zeva, Inc. has built strong relationships with other leading technology companies to push the limits of IT together.
At Zeva, Inc., we believe that collaboration breeds innovation. No single entity can tackle all of the challenges we face alone. When industry experts come together to face those challenges, the resulting solutions are greater than the sum of their parts. To that end, we’ve formed long-term partnerships with the following technology leaders to help engineer the solutions of tomorrow.
CASE STUDY
Controlled Access to Protected DataEnabling secure, policy-controlled access to Microsoft Purview Information Protection data
BLOG
Could Code Signing Have Prevented the CrowdStrike-Microsoft Outage?If there’s one lesson to be learned from the CrowdStrike outage, it’s this: Code signing must be an integral part...
CASE STUDY
Enabling End-to-End Encryption for Email Communications under a Zero Trust Model Within a Major Federal Government DepartmentDive into the lessons learned as a major U.S. Department pioneered the use of government-wide public key infrastructure for improving confidential email communications
CASE STUDY
Achieving NARA Capstone Compliance with In-Transit Email DecryptionDiscover how an intelligence agency partnered with Zeva to decrypt 400,000 emails per day
CASE STUDY
Creating a Custom Inbound & Outbound Email Decryption Solution For a Federal SSPEmpowering efficient, OMB M-19-17-compliant email decryption in support of eDiscovery and FOIA requests
CASE STUDY
How Zeva Inc. Helped the IRS Capture Nearly $1 Billion in Asset ForfeitureThe role a customized, colocation platform played in supporting the joint task force for federal crimes and thwarting tax evasion
CASE STUDY
Automating On-Site Code Signing at a Prominent Aerospace & Defense Contractor to Prevent Zero-Day AttacksBuilding automation into the code-signing process