Browse Definitions :
Definition

encryption as a service (EaaS)

Encryption as a Service (EaaS) is a subscription model that allows cloud service customers to take advantage of the security that encryption offers without having to install and use encryption on their own. 

EaaS takes advantage of the “as a service” concept to make data encryption a simple, pay-as-you go service the customer purchases from their cloud provider. This approach can provide customers who lack the resources to manage encryption themselves with a way to address regulatory compliance concerns and protect data in a multi-tenant environment. Cloud encryption offerings may include full-disk encryption, database encryption or file encryption. EaaS is often marketed as a value-added enhancement for desktop as a service (DaaS), hosted virtual desktop infrastructure (VDI), software as a service (SaaS) and infrastructure as a service (IaaS) offerings. Some subscription models allow the customer to create and manage their own encryption keys

EaaS may also be referred to as cryptography as a service or crypto as a service.  The concept of EaaS can be contrasted with BYOE (bring your own encryption), an approach that allows customers to use a virtual instance of their own encryption software. 

 


 



 

This was last updated in February 2014

Continue Reading About encryption as a service (EaaS)

SearchCompliance

  • compliance risk

    Compliance risk is an organization's potential exposure to legal penalties, financial forfeiture and material loss, resulting ...

  • information governance

    Information governance is a holistic approach to managing corporate information by implementing processes, roles, controls and ...

  • enterprise document management (EDM)

    Enterprise document management (EDM) is a strategy for overseeing an organization's paper and electronic documents so they can be...

SearchSecurity

  • denial-of-service attack

    A denial-of-service (DoS) attack is a security event that occurs when an attacker makes it impossible for legitimate users to ...

  • information security (infosec)

    Information security, often shortened to infosec, is the practice, policies and principles to protect data and other kinds of ...

  • user authentication

    User authentication verifies the identity of a user attempting to gain access to a network or computing resource by authorizing a...

SearchHealthIT

SearchDisasterRecovery

  • risk mitigation

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • call tree

    A call tree is a layered hierarchical communication model that is used to notify specific individuals of an event and coordinate ...

  • Disaster Recovery as a Service (DRaaS)

    Disaster recovery as a service (DRaaS) is the replication and hosting of physical or virtual servers by a third party to provide ...

SearchStorage

  • cloud storage

    Cloud storage is a service model in which data is transmitted and stored on remote storage systems, where it is maintained, ...

  • cloud testing

    Cloud testing is the process of using the cloud computing resources of a third-party service provider to test software ...

  • storage virtualization

    Storage virtualization is the pooling of physical storage from multiple storage devices into what appears to be a single storage ...

Close