1. Security for Data Transfers Protecting Customer Data

2. Security for Data Transfers The Business Need Volkswagen Germany (VWAG) Volkswagen Germany (VWAG) wants information on the daily cash position of Volkswagen Credit (VCI-US)

3. Security for Data Transfers The Problem  How do we protect non-public customer data that is being electronically transmitted from the United States to Germany

4. Security for Data Transfers Problem Specifics Legal 1. Federal laws have specific rules & guidelines on what type of information is allowed out of the country. 2. US Consumer & Privacy laws must be followed in all cases.

5. Security for Data Transfers Problem Specifics Data For that information that can be sent: 1. Both parties must agree on data mappings, definitions, and data types. 2. The originating data source is Sybase 3. The receiving data source is Oracle / SAP

6. Security for Data Transfers Problem Specifics Transport A secure mechanism for transport must be selected that is acceptable to both parties A secure mechanism for transport must be selected that is acceptable to both parties Solution -> Secure FTP was chosen Solution -> Secure FTP was chosen

7. Security for Data Transfers Problem Specifics Encryption The data must be encrypted to ensure privacy, confidentiality, and integrity for: The data must be encrypted to ensure privacy, confidentiality, and integrity for:  Both the Corporation & Customer Solution: GNU Privacy Guard Solution: GNU Privacy Guard  128-bit Open PGP

8. Security for Data Transfers Solutions Legal – Adhere to Data privacy & exportation laws Data – Only send what the receiver needs Transport – Compatible for receiver and sender Encryption – Must be secure and standard