Capability Domains met by DataLocker
DataLocker Offerings for Access Control
DataLocker's FIPS validated encrypted drives paired with SafeConsole Device Control allow for simple encryption of CUI on external devices that can only be used within approved networks.
FIPS 140-2 validation
This certification is crucial for meeting the first control. DataLocker drives are tested and validated up to FIPS 140-2 Level 3.
DataLocker's encrypted USB drives can safely store CUI and allow for secure transfer outside the contractor's protected environment due to the rigid FIPS validation.
Brute force protection ensures should a device be lost or stolen, the CUI will be inaccessible via brute force password attempts.
SafeConsole
SafeConsole allows for remote management and configuration of encrypted DataLocker drives. Using SafeConsole allows admins to make use of role-based access controls and allows admins to assign devices to an owner/user.
SafeConsole is also policy-driven, which allows admins to create multiple configurations based on the needs of the user and the organization. SafeConsole also includes advance logging, so admins can see when devices have been accessed. Further, Device State prevents devices from being used if left unused for a certain timeframe.
Zonebuilder, a feature of SafeConsole, allows admins to create a trusted geographical zone. Should a device leave the zone, a user will be unable to unlock the encrypted drive, even if the user knows the password. This adds an extra layer of security for devices should they leave a trusted network. SafeConsole also allows admins to determine which workstations are approved for use with managed devices. meaning managed devices can only be used on trusted workstations.