Ticker - September/October 2008 - (Page 6)

Advertorial Your single solution for compliance and risk-management Using Multi-core Tech to Improve Insider Awareness Any analysis of IT security spending reinforces the fact that most organizations follow a traditional approach to IT security — protecting against outside threats with virtual private networks, ﬁrewalls, intrusion detection and prevention, anti-spam services, and anti-malware protection. At the same time, nearly all IT and security managers will admit that this classic approach is outdated and ﬂawed. Even when the enterprise is protected by the most effective perimeter security, the network remains vulnerable to insiders. Not surprisingly, most organizations seek an efMost Important Security Issues fective way to monitor what insiders do on the network. In a 2008 Whitney Marketing survey of security and network management personnel at 1,150 companies, almost all reported Employees, vendors, contractors looking at private data that they lack the means to have complete insight into how company insiders are using vital resources available from the corporate network. In fact, 94 percent of respondents wanted greater visibility into the actions of inIT staff or other privileged users improper access ternal users. More speciﬁcally, the top network 0% 10% 20% 30% 40% 50% security concerns cited in the survey included employees looking at private or sensitive data, Source: Whitney Marketing, July 2008 vendors, contractors or offshore employees accessing and changing ﬁles, and IT staff or other privileged users improperly accessing information and records. 50% 29% 14% 4% 2% 29% 29% 24% 12% 5% 1 Not Important 2 Somewhat Important 3 Average Importance 4 Important 5 Very Important The Power Approach to Security: Want Greater Internal-User Visibility Yes 94% No 6% 0% 20% 40% 60% 80% 100% Source: Whitney Marketing, July 2008 If IT managers are so concerned about insiders, then why do security budgets focus on protecting against outside threats? The longstanding answer has been that deploying effective internal security is too great an obstacle considering the cost, complexity and inherent risk to key applications — unless a compliance mandate forces the issue. That argument is becoming obsolete when faced with the relentless advance of Moore’s Law. New multi-core processors coupled with innovations in software and database technology now make it possible to create security appliances that can provide deep, broad coverage for monitoring insider behavior, without crippling network or application performance. These appliances can track user behavior with unprecedented detail and then record that activity and share that information with other security information management applications. They also offer the advantage of being easy to deploy and operate, and they can be used to implement control activities for both regulatory compliance and general business risk management. PacketMotion, Inc. WSTA® Ticker - September/October 2008 6 110 Baytech Drive, Suite 200 San Jose, CA 95134 http://www.packetmotion.com

Table of Contents Feed for the Digital Edition of Ticker - September/October 2008

Ticker - September/October 2008 Contents What's New: Companies, Products & Services ROI-Rich Intelligent Agents Automate Data Mining & Analysis for Financial Services Search Driven User Interaction Management: Orchestrating User Experience

Ticker - September/October 2008

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.