Comprehensive software reviews to make better IT decisions
New York State Leads the Charge in Upcoming Zoom Security Enhancements
The Office of the Attorney General of the State of New York has reached a settlement with Zoom Video Communications. The agreement promises enhanced data security and user controls.
New York State Attorney General Letitia James made the announcement on May 7, 2020, following a state-led investigation into the video conferencing service launched in March 2020. The inquiry focused on the security concerns around the sudden widespread use of Zoom’s service during the COVID-19 pandemic lockdown.
The enhanced data security measures include encryption of data at rest, protection from hacker attempts at account access, and the implementation of a vulnerability management program and regular penetration testing. The enhanced privacy controls will be applied to all account tiers, including free accounts and accounts used in K-12 education.
User privacy has also been addressed by the agreement. This results in a severance of Zoom’s user-data sharing practice with Facebook and LinkedIn, particularly in cases where the user has explicitly selected the “anonymity” option. Zoom has agreed to provide the New York State Attorney General’s Office a copy of its annual security assessment report.
Full details of the agreement can be viewed on the New York State Attorney General’s website.
On a related note, federal US officials recognize the benefit to US citizens of web conferencing during the pandemic. This had led to the Office for Civil Rights division of the US Department of Health and Human Services announcing in March 2020 the temporary suspension of penalties for HIPAA noncompliance when using video conferencing services for telehealth.
The New York State Attorney General’s Office’s settlement with Zoom brings great benefit to all users of the service. Zoom will need to build the security mechanisms to comply with the settlement, and much of these enhancements address security concerns that have been raised about the service. Therefore, Zoom can incorporate the security enhancements in a comprehensive way while ensuring that it remains compliant with the terms of the agreement.
Of note in the settlement letter is Zoom’s requirement to encrypt data at rest in addition to data in transit. While this addresses the issue of user data stored in Zoom’s data centers, it does not explicitly mention end-to-end encryption per se; there is still an implied intermediary step between the encryption-in-transit and the encryption-at-rest states that is not explicit addressed in the agreement. Zoom customers are advised to wait and see how Zoom implements the security measures before concluding that Zoom is as secure as its rivals.
Info-Tech Research Group continues to stay on top of these developments. Watch this space for more updates.
Want to Know More?
On September 1, 2020, Info-Tech briefed with Cisco about current and upcoming features of its Unified Webex app for September. Significant changes include the introduction of Cisco Webex Classrooms and the Webex Control Hub, with notable updates also coming to Webex for Education, Webex Meetings, and Webex Teams.
On September 4, 2020, Info-Tech briefed with Zoho about current and upcoming features of Zoho Workplace, a global enterprise collaboration platform. Organizations, especially SMBs, that want to look outside of Microsoft’s and Google’s office productivity suite duopoly should consider shortlisting Zoho Workplace as a viable option.
Enterprise Connect’s virtual conference and expo for 2020 featured a wide variety of sessions on communications and collaboration for the enterprise. In this fourteenth note of fourteen, I report on Recon Research’s latest study on how COVID-19 has cemented web conferencing as the future of the workplace.
Zoho Workplace – a global enterprise collaboration platform – has reported that it is now supporting 15 million users and is experiencing a surge in usage for its business applications. However, compared to Microsoft’s Office 365 and Google’s G Suite, Zoho still has a long way to go in this marketspace.
Google has announced several updates to its G-Suite offering, which aims to heavily integrate and better secure its teamwork applications. The move represents a clear attempt by Google to directly compete with Microsoft’s office productivity suite, with several of the G-Suite updates mirroring the logical architecture of Office 365.
As of July 1, 2020, over 70,000 small business users receiving their Microsoft 365 services from Navisite will now receive them from Intermedia. The move means that Navisite’s users now have access to a range of Intermedia offerings, including Unite, Contact Center, and AnyMeeting.
Zoom recently announced Zoom for Home: an all-in-one hardware and software for home users designed to enable the work-from-home user with a single home appliance for web conferencing, phone calling, and interactive whiteboard collaboration.
Thinking about choosing a new software vendor but don't know where to start? Narrow down your shortlist by focusing on software that has received an Info-Tech Research Group award. New data from SoftwareReviews shows that organizations reported higher satisfaction when they switched to software that had received an Info-Tech award.
University researchers used artificial intelligence in an experiment to determine the extent of privacy risks that come with the use of this web conferencing tool. Publicly available data scraped from social networks was cross-referenced as part of this research.