According to Dropbox, this arrangement is fine even for large enterprises for about 80 percent of data, with about 20 percent requiring the enterprise to retain encryption keys for the sake of compliance. The challenges of this are twofold - key management and the task of identifying which data is critical. Enterprises must embrace device encryption to secure synched or shared data -individual devices can be 'linked' to or unlinked from accounts with a remote wipe facility if they are lost.
Dropbox - third-party integration
A major strength of Dropbox Enterprise going forward is the ability to add additional security layers through the Dropbox Business API. Popular sectors mentioned by Dropbox in theservice's official security guide in addition to SSO include SIEM, Data Loss Prevention (DLP), eDiscovery, Digital Rights Management, migration and dedicated backup, and custom workflow management.
Dropbox has not been immune from security scares, including a small breach in 2012 and a more contentious one in 2014 in which hackers appear to have reused passwords from other sites to target weakly-secured consumer accounts. But its Business and Enterprise services have evolved into offerings that go far beyond the humble file storage game where the firmstarted.There is some way to go.
The Enterprise service is still in its infancy and the migration from serving general business needs at a departmental level to being something developers embrace presents a big challenge. The advantage of Enterprise v Business is still not sharply defined enough. Competition is also incredibly tough, not least because platform vendors such as Microsoft and Google also have file storage and collaboration systems of their own before you even get to rivals such as Box. It remains a consumer file storage and sharing service but it is the Business and Enterprise services that will decide its future success.
Source: Computerworld UK
Sign up for Computerworld eNewsletters.