Category Archives: Compliance

The Holistic Z: Selective Encryption gives way to “At-Rest” & “In-Flight” Data Protection with Pervasive Encryption

IBM Z encryption moves the market from a selective encryption model to one that is pervasive. This represents a significant modification in the basic structure of computing and its effect on security will, in my opinion, have a major disruptive effect.

The overall concept is to not introduce a decision layer that says what will or will not be encrypted. Instead, it will be possible to have encryption be part of normal processing. The removal of the decision for selective encryption is a further saving in the overall cost and a reduction in the difficulty in using encryption in the current market.

The Holistic Z

The new IBM Z provides a bullet-proof platform for digital transformation, a base for strong cloud infrastructure (fortified clouds, which can be open, private, public, and hybrid), and allows back-end services to be securely exposed through secure APIs.

IBM have put security at the core of the new platform with “Pervasive Encryption as the new standardAnalytics & Machine Learning for Continuous Intelligence Across the Enterprise, and Open Enterprise Cloud to Extend, Connect and Innovate”.

The Z is arguably more powerful, more open, and more secure than any other commercial offering and makes serious moves in the rapidly evolving domains of Machine Learning, Cloud and Blockchain.

Positive Disruption with Pervasive Encryption 

But for me the focus of my interest comes back to Pervasive Encryption. The Z (“Zero Downtime“) appeals to many, on many different levels but for me it is Pervasive Encryption that piques my interest.

It is a seismic shift and legitimately makes the z14 the go-to platform for organisations who can afford their own and the Cloud platform of choice for those who cannot. The z14 mainframe has a tried-and-true architecture and excels with security features that are built into the hardware, firmware, and operating systems.

PervasiveEncryption3

True Cost & Performance Mitigation 

The largest barrier to doing full-scale encryption has been the cost of the encryption and the performance load that such activity puts on the computing platform.

Bolted-on solutions that are being deployed have caused system capacity to grow such that there are loads of up to 61% of the system load that is being consumed by security processes. This translates into significant infrastructure costs and performance drags.

Even without the newest advances the Z architecture delivered encryption (selective encryption) more efficiently and with a lower resource expenditure than other platforms.

It delivers over 8.5 times the security protection, at 93% less cost in overall expenditure, and with 81% less effort. The full impact of the faster encryption engine and the ability to encrypt information in bulk on the z14 creates a fully pervasive solution that runs more than 18.4 times faster and at only 5% of the cost of other solutions.

The Threat Landscape & GDPR Compliance 

IBM Z pervasive encryption provides the comprehensive data protection that organizations, customers, and the threat landscape demand.

Here are some stats on that threat landscape:

  1. Nearly 5.5 million records are stolen per day, 230,367 per hour and 3,839 per minute (Source:http://breachlevelindex.com/);
  2. Of the 9 Billion records breached since 2013 only 4% were encrypted (Source: http://breachlevelindex.com/);
  3. 26% is the likelihood of an organization having a data breach in the next 24 months(Source: https://www.ibm.com/security/infographics/data-breach/) ;
  4. The greatest security mistake organizations make is failing to protect their networks and data from internal threats. (Source:https://digitalguardian.com/blog/expert-guide-securing-sensitive-data-34-experts-reveal-biggest-mistakes-companies-make-data)

By placing the security controls on the data itself, the IBM solution creates an envelope of protection around the data on Z.

ENDS

Extracts, Source Material, References, & Acknowledgements to IBM Z Systems, IBM Security, IBM Systems, IBM Systems Social Program, and Solitaire Interglobal Limited.  

Using Positive Disruption To Beat The Touts, The Cartels & The Vested Interests

My Face Value is preparing for launch on 31st December 2017. To keep up to date with the latest news follow us on Facebook and Twitter

My Face Value is engaged in positive disruption. Positive disruption is a vital catalyst for change. We are committed to 100% compliance with all of the Rules / Terms & Conditions associated with the buying, selling and swapping of tickets including the complex subset of rules that relate to the transfer and exchange of unused season tickets (rules which vary widely between Leagues and even at the Club level – some of the challenges are clearly described in this page from the Liverpool F.C. website).

My Face Value will be compliant with all of the prevailing legislation with respect to ticket reselling in all of the locations in which we will operate initially. Presently those locations are the United Kingdom, the Republic of Ireland, France, Spain, Italy & Germany.

We will comply with all of the rules of all of the relevant governing bodies and / or associations who issue tickets which are processed in our community or the rules as stipulated by those who are responsible for the issuing of tickets on behalf of others.

Regardless of event type – Football, Cricket, Rugby, Concert, Festival – or geographic location there will be:

  • No compliance shortcuts;
  • No expedient “interpretations” of rules, regulations or terms & conditions;
  • No “let’s take a chance and see” attitude;
  • No headlong rush to “go live” & start generating revenues at the expense of compliance;

My Face Value are here for the long run to effect positive change. My Face Value has the patience, expertise & funding to see out the process to its conclusion. The positive disruption activities of My Face Value will and are upsetting the status quo.

My Face Value are challenging cartels & vested interests and barriers will and are being placed in our way.  The My Face Value Community Guidelines and Governance will be above reproach in order to prevent the vested interests / cartels / “competitors” from attempting to undermine our core mission – and they will try.

Our Core Mission?

Access to All Events – at Face Value – for True Fans

Our Commitment to Longevity 

My Face Value will not “go live” until all of the items on the critical path to ensure 100% compliance with all rules and regulations are complete and signed off by the relevant external interested parties.

With these prerequisites we estimate, at this time, that My Face Value will be in a position to “go live” for ticket BUY / SELL / SWAP functionality on:

Friday, 18th August 2017

This date is subject to change if needed and should an unforeseen delay occur in the compliance time line which is outside of the control of My Face Value.

Using Technology to Ensure Compliance & Eliminate Touting

The My Face Value Tech Team are currently completing the development of the My Face Value platform to support:

  • BUY/SELL/SWAP Features – Read about that in a future blog post;
  • Counterfeit Detection & Ticket Processing – Read about that in a future blog post;
  • Tout Detection – information on how we are preventing touting in the My Face Value community – Read about that in a future blog post;
  • Supporting the Grassroots – My Face Value are making our platform available for use by certain Clubs – free of charge – Read about that in a future blog post;
  • Completing the technology to support Affiliate Programs, Merchandising Sales, Travel & Accommodation Offers and Sportsbook Betting as incentives and rewards for My Face Value community members.

Getting The Support of The Clubs & Governing Bodies

My Face Value are also engaged in discussions with the Governing Bodies, Leagues and Clubs to clarify certain matters as they relate to ticket resales and ticket processing. My Face Value have developed technology and processes to implement rigorous enforcement and control of what we call “the ‘last’ official buyer will be the only person allowed to gain entry rule” at the turnstiles.

In partnership with the football clubs My Face Value proposes to combat the problem as follows:

  1. When a ticket is sold or swapped in the My Face Value community we will ultimately be seeking permission from the clubs to allocate a NEW ticket;
  2. The re-issued My Face Value ticket will be a mirror image of the original ticket with one significant difference – it will contain information unique to the My Face Value purchaser / swapper – namely an embedded photo, watermarking and a bar code;
  3. In the short term a visual inspection will verify that the person seeking to gain entry is the My Face Value purchaser / swapper;
  4. In the mid term this visual inspection will be augmented with a process where a scanner (which My Face Value will issue to the Clubs) will ensure with 100% certainty that the person seeking entry is the My Face Value purchaser / swapper and that the ticket is not a forgery;
  5. In the event that a “tout” or “forgery” is detected at the turnstiles by our scanners then all associated parties with that ticket will be immediately and automatically placed in the “Active Suspended (Pending Appeal)” Good Standing status on the My Face Value platform;
  6. This process is hugely summarised here to avoid writing a 50 page description but this is the essence of our approach.

My Face Value are not an Authorised Ticket Reseller for any league or club at this time. When we “go live” our only role will be to facilitate legal transactions. My Face Value will not sell tickets directly to community members but rather we will act as a facilitator for interactions between genuine fans who wish to BUY, SELL or SWAP tickets with other fans while complying with the My Face Value Community Guidelines.

We know there is a lot of information here and if after reading this post you need any further clarifications or have any questions or have any suggestions please email us at support@myfacevalue.co and we would be delighted to engage with you.

The My Face Value Team