This webinar discussed how DataStax and Thales eSecurity can help organizations comply with GDPR requirements in today's hybrid cloud environments. The key points are: 1) GDPR compliance and hybrid cloud are realities organizations must address 2) A single "point solution" is insufficient - partnerships between data platform and security services providers are needed 3) DataStax and Thales eSecurity can provide the necessary access controls, authentication, encryption, auditing and other capabilities across disparate environments to meet the 7 key GDPR security requirements.

1. Aligning GDPR Requirements with
Today’s Hybrid Cloud Realities
1 © DataStax, All Rights Reserved.
Presented by:
Bob Brady, Business Value Consulting, DataStax
Mark Royle, Solutions and Partner Marketing, Thales eSecurity
September 20, 2018

2. © DataStax, All Rights Reserved.
• GDPR is Real – and It’s the New Normal
• Hybrid-Cloud and Multi-Cloud are Real – and
They Are Becoming the New Normal
• You Cannot Buy a GDPR “Point Solution”
• Partnerships Matter:
– Data Platform
– Data Security Services
To Remember from this Webinar
The Four Things
2
Key Points to Take Away:

3. GDPR Security Requirements
Contents
3
Introduction to DataStax
Overview of Hybrid Cloud and Multi Cloud
GDPR At-a-Glance
1
2
3
4
Introduction to Thales eSecurity
The Seven Key Security Capabilities for GDPR
How Thales & DataStax Can Help
5
6
7
Questions?8

4. Introduction to DataStax
For Techies:
• DataStax powers the Right-Now Enterprise with the always-on, distributed cloud
database built on Apache Cassandra and designed for hybrid cloud.
4 © DataStax, All Rights Reserved.
For Non-Techies:
• DataStax is the next-generation database technology, conceived and developed over
the past ten years to meet the data & analytics needs that are unique to our time:
o The need to handle massive volumes, speeds and varieties of data…
o To apply state-of-the-art analytical techniques…
o To do all of this instantaneously, securely and globally…
o Running inside an on-premises data center, in the cloud, or potentially both…
o Without ever going out of service for planned or unplanned maintenance

5. Introduction to DataStax Enterprise
5 © DataStax, All Rights Reserved.
• Built on Apache CassandraTM Database
– Always-On, Real-time, Massively Scalable,
Distributed Database

6. Introduction to DataStax Enterprise
6 © DataStax, All Rights Reserved.
• Built on Apache CassandraTM Database
– Always-On, Real-time, Massively Scalable, Distributed
Database
• Multi-Model
– Manages data in multiple formats and schema

7. Introduction to DataStax Enterprise
7 © DataStax, All Rights Reserved.
• Built on Apache CassandraTM Database
– Always-On, Real-time, Massively Scalable, Distributed
Database
• Multi-Model
– Manages data in multiple formats and schema
• Enterprise Ready
– Advanced Performance, Security, Replication
– Integrated Search, Analytics, Operations
Management
– Fully-supported

8. Introduction to DataStax Enterprise
8 © DataStax, All Rights Reserved.
• Built on Apache CassandraTM Database
– Always-On, Real-time, Massively Scalable, Distributed
Database
• Multi-Model
– Manages data in multiple formats and schema
• Enterprise Ready
– Advanced Performance, Security, Replication
– Integrated Search, Analytics, Operations Management
– Fully-supported
• Active-Everywhere / Cloud Native
– On-Premises
– Public Cloud
– Hybrid/Multi-Cloud

9. Overview of Hybrid Cloud and Multi Cloud
9 © DataStax, All Rights Reserved.
• Hybrid Cloud vs. Multi Cloud
• Why Hybrid/Multi Cloud
– Data Autonomy
– Data Sovereignty
– Best-of-Breed Services
– 100% Uptime

10. GDPR At-A-Glance
• The General Data Protection Regulation (GDPR) was instituted by the European Union
in an attempt to give consumers/citizens “ownership” of their personal data.
• Went into full effect on May 25, 2018
• Affects any company that conducts business within the EU – including US multinational
companies
• Replaces/Supersedes multiple other country-specific privacy rules which were
hellacious to manage.
• The only thing more burdensome than one big regulation is a bunch of little ones that conflict
with each other.
10 © DataStax, All Rights Reserved.

11. Key Tenets of GDPR
• “Affirmative Permission” required to collect personal data
• Data must physically reside where the customer lives
• Data must be “portable” from one company to another
• Customer has the “right to be forgotten”
• Penalties for non-compliance can be Enormous (“Dissuasive”)
• Data Security is Paramount
11 © DataStax, All Rights Reserved.

12. Data Security Requirements for GDPR
1. Internal & External Authentication
2. Fine-grained Access Control
3. Encryption for Data In Transit and At Rest
4. Strong Key Management
5. Auditing and Central Visibility across Disparate Environments
6. Simplified Data Deletion
7. Data Autonomy and Data Sovereignty
12 © DataStax, All Rights Reserved.

13. www.thales-esecurity.com
Introduction to Thales eSecurity
Mark Royle

14. GDPR Security Requirements
Contents
14
Introduction to DataStax
Overview of Hybrid Cloud and Multi Cloud
GDPR At-a-Glance
1
2
3
4
Introduction to Thales eSecurity
The Seven Key Security Capabilities for GDPR
How Thales & DataStax Can Help
5
6
7
Questions?8

15. Thales Group – global leadership
15 © DataStax, All Rights Reserved.
N°1
worldwide
Payloads
for telecom satellites
Air traffic management Sonars Security for interbank
transactions
N°2
worldwide
Rail signalling systems In-flight entertainment
and connectivity
Military tactical
radiocommunications
N°3
worldwide
Commercial avionics Civil satellites Military surface radars
€15
billion
in revenues

16. Thales eSecurity – world leader in data protection
16 © DataStax, All Rights Reserved.
Years of securing the
world’s most sensitive
data40+
Deep expertise and track
record in applied
cryptography
Long-standing history of
industry certifications and
validation
Customers of
Fortune 10
9
Security for 19of the 20largest banks
Security for 4of the 5largest
energy companies
130+Partnerships with leading
technology providers of cloud
computing, digital payments
and more
Protection of the
world’s POS
transactions80%

17. Thales eSecurity – supporting a wide range of use cases
17 © DataStax, All Rights Reserved.
Customer
use cases
Cloud
security
Data
security
IoT security
Payments
Code signing
PKI
Tokenization
data masking
Digital
signing
Key
management
App
encryption
Data
encryption
Container
security
Hardware
security
modules

18. Data Security Requirements for GDPR
1. Internal & External Authentication
2. Fine-grained Access Control
3. Encryption for Data In Transit and At Rest
4. Strong Key Management
5. Auditing and Central Visibility across Disparate Environments
6. Simplified Data Deletion
7. Data Autonomy and Data Sovereignty
18 © DataStax, All Rights Reserved.

19. #1: Internal/External Authentication
• Employees, 3rd party contractors, partners, customers
• Supporting a range of protocols
• Preserving a positive user experience
• Supporting Multiple environments: on-premise, cloud, and hybrid
environments
19 © DataStax, All Rights Reserved.

20. #2: Fine-grained Access Control
• Granular access controls, applied uniformly across multiple clouds and data
centers
• Policies applied down to individual rows of data
• Multi-tenant environments, such as public cloud implementations, require
strong, persistent controls for user and administrator access to specific data
sets
20 © DataStax, All Rights Reserved.

21. #3: Encryption for Data In Transit and At Rest
• Flexible
• Mix of mechanisms/levels
• Tokenization as an option
• Minimize application changes
21 © DataStax, All Rights Reserved.

22. #4: Strong Key Management
• Keys stored compliant with FIPS and Common Criteria
• Supports multitude of environments, and BYOK
• Supports data mobility
22 © DataStax, All Rights Reserved.

23. #5: Auditing and Central Visibility Across
Disparate Environments
• Application-level auditing
• Security auditing
• Unified view of customer’s data
23 © DataStax, All Rights Reserved.

24. #6: Simplified Data Management
• Customer’s “right-to-be-forgotten”
• Efficiently control and schedule removal of data
• Central key management
• “Time to live” records management
24 © DataStax, All Rights Reserved.

25. #7: Data Autonomy & Data Sovereignty
• Collecting organizations responsible for their data
• Establish controls at the schema level
• Support multi-cloud and data center environments
25 © DataStax, All Rights Reserved.

26. How DataStax and Thales Can Help
• Granular Access Controls
• Robust Authentication
• Advanced Encryption
• Audit and Logging Features
• Unified Visibility / Customer 360
• Schema Level Controls
– Data Sovereignty
• Consulting Expertise
26 © DataStax, All Rights Reserved.

27. How DataStax and Thales Can Help
27 © DataStax, All Rights Reserved.

28. © DataStax, All Rights Reserved.
• GDPR is Real – and It’s the New Normal
• Hybrid-Cloud and Multi-Cloud are Real – and
They Are Becoming the New Normal
• You Cannot Buy a GDPR “Point Solution”
• Partnerships Matter:
– Data Platform
– Data Security Services
To Remember from this Webinar
The Four Things
28
Key Points to Take Away:

29. Additional Resources & Key Contacts
Additional Resources
 Aligning GDPR Requirements with Today’s Hybrid Cloud Realities
 Seven Requirements for Compliance
 The EU GDPR Pocket Guide
 Written by Alan Calder, published by DataStax
 DigitalRights 360: How DataStax Helps Enterprises Comply with
the GDPR, by Martin James
 http://www.dataarchitect.cloud/digitalrights-360-how-datastax-helps-
enterprises-comply-with-the-gdpr/
Key Contacts
 Bob.Brady@DataStax.com
 Mark.Royle@ThaleseSecurity.com
© DataStax, All Rights Reserved.29

30. Questions?
30 © DataStax, All Rights Reserved.