Information security pros do put stock in encryption--it was named the
third-most-effective security practice in our most recent Strategic
Security Survey, behind only firewalls and antivirus products. However,
there have been obstacles along the path to ubiquitous encryption of
data, including weak ciphers, deployment and integration issues, and,
perhaps most notably, key management.
Public key infrastructure, or PKI, systems alone have simply failed to address the challenge of keeping encryption keys in order. Enter the Enterprise Key Management Infrastructure initiative, a promising program spearheaded by the Oasis consortium, with organizations including CA, Red Hat, the U.S. Department of Defense, and Wells Fargo represented on the technical committee.
URL: http://www.informationweek.com/shared/printableArticle.jhtml?articleID=2...
