Protect Your Sensitive Data; Increase Compliance with Cloud Encryption!

[Sultan Dawood]

Encryption is regarded as one of the most effective approaches to data security. By applying encryption and practicing secure encryption key management, organizations can help ensure only authorized users have access to sensitive data. Even if lost, stolen, or accessed without authorization, encrypted data is unreadable and essentially meaningless without its key.

Cloud Encryption is a new data-at-rest encryption offering from ServiceNow that customers can access via the Platform Encryption bundle. The service uses hardware security modules (HSMs) validated under FIPS 140-2, to help protect the confidentiality and integrity of encryption keys. This Cloud Encryption offering conforms with our NIST 800-57 compliant key lifecycle management, the same key management framework that supports Column Level Encryption and Column Level Encryption Enterprise.

Cloud Encryption delivers several key benefits to customers:

Security: Encryption offers protection of sensitive information, including customer data, while at rest

Compliance: Data privacy and protection regulations as well as standards such as FIPS (Federal Information Processing Standards) and HIPAA (Health Insurance Portability and Accountability Act of 1996) require organizations to encrypt sensitive customer data

Customers can use keys generated by ServiceNow, or alternatively, bring and manage their own keys. ServiceNow managed keys (SMK) are initially provisioned for Cloud Encryption and then customers can opt-in to use their own customer managed keys (CMK). Please note, this process is a one-way option in the San Diego release. In the future, customers will have the option to revert to SMK, if they choose to do so. Key rotation operations are completely managed by customers from within their ServiceNow instance, providing flexibility and autonomy, as well as avoiding the need to involve ServiceNow support teams.

ServiceNow® Cloud Encryption differs from our Database Encryption offering as it is designed to be database agnostic. Our Database Encryption product only supports MariaDB. In the San Diego release, our Cloud Encryption product will only support MariaDB. In future releases we plan to add support for additional database types.

ServiceNow’s ubiquitous data encryption capabilities will allow customers to bring more of their data to the cloud, while assisting with strict data security and compliance standards. 

.............................................................................................................................................................................

Join us for the The Now Platform San Diego event.

Mark your calendar for the Now Platform San Diego release broadcast  

Join us for the San Diego release broadcast —a global digital experience where we’ll be unveiling exciting, new innovations in the San Diego release across different markets.  

The broadcast digital event is April 6 and is part of the Knowledge Digital Experience. Your registration for this broadcast provides free access to all that the Digital Experience has to offer, including 200+ sessions beginning in May.

Make sure to watch the San Diego release introduction session with Dave Wright, chief innovation officer, as well as 21 sessions on demand, where we’ll highlight different ServiceNow^® products, innovations, demos, and the Now Platform. The times of the broadcasts are:

• AMS: April 6 at 9:00 am PT/12:00 pm ET,
• EMEA: 7 April at 8:00 am GMT/9:00 am CET
• APJ: 7 April at 9:00 am SGT /11:00 am AEST

Register now

................................................................................................................................................................................

© 2022 ServiceNow Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company names, product names, and logos may be trademarks of the respective companies with which they are associated. 

servicenow.com