Securing the Zoom for Government platform

Protecting the Zoom Platform for Government Use

As more government agencies adopt Zoom as their primary communication tool, ensuring the security of the platform becomes increasingly important. In response to this growing need, Zoom has taken several steps to secure the platform for government use, including:

• Implement robust encryption and security protocols: Zoom uses state-of-the-art encryption and security protocols to protect the privacy of your data and communications.
• Certification and Accreditation Received: Zoom has received certifications such as FedRAMP, SOC 2 Type 2, and ISO 27001, which are recognized industry standards for secure cloud services.
• Provision of government security features: Zoom offers government security features such as support for multi-factor authentication and the ability to disable recording, screen sharing, and file sharing.
• Partnering with Security Experts: Zoom has partnered with leading security experts to ensure our platform remains secure and compliant with government regulations.

With these security measures, Zoom provides a secure platform for government agencies to communicate and collaborate effectively while protecting sensitive information.

“Ensuring the security of vital information

with Zoom for Government Because sharing sensitive information is a critical aspect of government business, it is imperative that the right controls are in place to ensure secure communications.

To meet this critical requirement, Zoom has developed a specialized platform – Zoom for Government – specifically tailored to the unique security needs of the public sector.

Zoom for Government is equipped with robust security features and supports various compliance requirements to ensure the safe exchange of information. Here are the top six ways Zoom for Government protects your information: ”

1. End-to-End Encryption (E2EE)

Zoom Meetings

The Zoom for Government client enables this feature in the meeting settings, which helps encrypt communications between registered meeting participants when using the Zoom for Government client, using Zoom’s default 256-bit AES-GCM encryption is used. Consequently, only the devices of the meeting participants know the cryptographic keys, which is a significant difference. There can be no third party access to the meeting private keys, therefore third parties, such as B. Zoom, do not access it.

zoom phone

The Zoom Phone feature is available for Zoom for Government users on the same Zoom for Government Account to make Zoom Phone calls through the Zoom client, where Zoom for Government users are in the same Zoom for Government account and their Zoom for Government accounts are in the same Zoom for Government account and can therefore Upgrade to E2EE. It is possible to escalate a call to an encrypted call during an ongoing call by clicking “More” and then selecting “Encrypted” when selecting “More”. As soon as E2EE is activated, the call is made encrypted Use of Cryptographic Keys which can only be decrypted by the caller’s and recipient’s devices. A unique security code is also passed from one user to another to verify that they are part of the E2EE protocol.

2. A growing list of certifications

It has been approved by Zoom for Government as a mid-level FedRAMP product. Provisional approval has been granted by the Defense Information Systems Agency (DISA) to conduct meetings at Impact Level 4 (IL4) within the Department of Defense (DoD) and an Operating Authorization (ATO) has been granted by the Department of Air Force to conduct meetings at Impact Level 4 (IL4) in the United States. It also has reached a StateRAMP Moderate approval and supports HIPAA, CJIS, and CMMC compliance requirements and HIPAA, CJIS, and CMMC compliance requirements.

There are a few other certifications Zoom has received, all of which can be found in our Trust Center, along with these regulatory approvals. Zoom has in stores also acquired a number of other relevant certificates.

3. Nomadic E911

The Zoom Phone for Government applications provide enhanced 911 (E911) capabilities that can be used in the event an emergency call is made using the Zoom Phone for Government. This feature can be used to direct emergency services to an accurate location based on the location of the emergency call itself. Zoom Phone soft and hard phones, in combination with Zoom’s Nomadic E911, can receive a call from an emergency operator to tell the dispatcher where a user is while moving around a facility, allowing the dispatcher to know the exact location of the user can indicate during an emergency.

It’s a standard feature in Zoom Phone and it’s called Nomadic E911 and uses Nomadic E911 technology that helps modern government agencies comply with RAY BAUM guidelines action, that requires modern organizations to report an out-of-the-box location when it comes to staff safety. It is very important for agencies to have this feature as they adopt flexible working practices that help keep employees safe wherever they are.

It is important Note that the nomadic E911 cannot be configured on Zoom phones. For more information, see this guide.

4. United States Employees and Data Centers

An example of this type of solution would be the Azure public cloud, which is part of Amazon’s GovCloud infrastructure, along with data centers in the United States. A US-based company is responsible for deploying and managing the system. There is no commercial Zoom version with this feature. It is only available with Zoom for Government.

5. Watermark

The zoom Watermarking is a feature that meeting hosts can enable to protect sensitive information shared during a meeting and prevent leaks.

• As part Image watermarking superimposes part of a meeting participant’s email address over an image on a shared screen. This image is not only injected through the content that someone is presenting, but also displayed as a video.

• Watermarks are invisible, inaudible marks that are added to any offline meeting recording that contains a user’s information. There’s a chance Zoom can help find out who recorded the meeting if the audio file is shared without permission.

6. Authenticated Login

As part of Zoom for Government’s effort to ensure users are authenticated when logging into the client, we are offering a single sign-on (SSO) feature that makes it very secure and fast for users to log into the client . It’s still possible to add an extra layer of security to the process by combining two-factor authentication with single sign-on if you can’t use single sign-on. To achieve a Zero Trust architecture, two-factor authentication and single sign-on have become essential, which have been identified as key factors that will strengthen government security posture as a result.

“Increasing public sector safety measures

Zoom for Government offers a range of security features and authorizations to ensure secure communications for the public sector. Both the government and commercial versions of Zoom are equipped with numerous security-focused options, from meeting controls to privacy notifications, to make security an integral aspect of government communications.

Effective and secure communication is critical to government business. Whether sharing policy updates or working on a team project, government employees can trust Zoom for Government to provide fast, flexible, and seamless sharing of sensitive information while strengthening the public sector’s security posture.”