CipherTrust adds compliance features to IronMail

14.03.2005
Von Bob Francis

Messaging security vendor CipherTrust Inc. on Monday announced Compliance Control, the latest version of its IronMail appliance with enhanced compliance capabilities targeted at customers concerned with recently adopted government regulations.

To identify terms associated with HIPAA, the Gramm-Leach-Bliley Act (GLBA), the Sarbanes-Oxley Act (SOX), and other regulatory requirements, CipherTrust has upgraded IronMail"s existing compliance dictionaries and tool sets. Compliance Control includes content filtering dictionaries specific to each regulation, and regular expression scanning has been enhanced to search for predefined patterns, including social security numbers, phone numbers, and credit card numbers. Customized policies to detect specific expression patterns for a specific enterprise also can be created at the customer"s discretion. These tools work in conjunction with IronMail"s other e-mail scanning techniques, which include attachment scanning and filtering, and scanning of encrypted messages at the gateway.

For example, Compliance Control can be configured with policies to generate automatic approval digests for compliance officers; require pre-approval from the compliance officer to release messages that have flagged policy violations within IronMail; or to archive messages for retention purposes depending on specific content within the messages. For compliance officers, Compliance Control provides several reporting options to evaluate the effectiveness of their compliance programs, including an executive-level report that provides a high-level summary of actual compliance results and a compliance actions and effectiveness report that provides more-in depth data for administering and reviewing the product"s effectiveness.

"As regulations such as HIPAA, GLBA and SOX have evolved, so have the policy enforcement capabilities within IronMail," said Mike Rothman, vice president of marketing at CipherTrust. "Compliance Control actively prevents policy violations from occurring. Enterprises truly concerned with regulatory compliance deserve, and should expect, nothing less."

Compliance Control is available to all existing CipherTrust customers as part of IronMail 5.0, which becomes available this month. IronMail 5.0 starts at US$4,995 for 1,000 or less users and $20,000 for the large enterprise version. For organizations with high message loads, CipherTrust also offers Compliance Control functionality in a dedicated IronMail Compliance Server. It starts at $25,000.