Ticker - September/October 2008 - (Page 7)

Certainly these new deep and broad appliance solutions offer new possibilities for monitoring insider activity. That said, there are several best practices to follow as IT organizations deploy them to gain the greatest business and security value. First, managers should use the appliance systems to help them answer the following questions: What insider activities present the greatest risks to the organization? Where is the sensitive data and who’s accessing it? Focus on the activities of the users to locate the data. Who are the highest-risk users? Contractors? Offshore users? Super-users like network or IT administrators? Departing employees? Disgruntled employees? Eager employees who might fall victim to social engineering ploys? To maximize the investment in any deep and broad network monitoring system, it is also important to consider what other compliance and event management (SIM/SIEM) systems are already in place and what visibility gaps exist, especially with respect to user-centric analysis. As the deployment progresses, continue to evaluate and adjust alerts and reports in the system to ensure important risks are spotted, while redeﬁning what activities are considered safe. Most importantly, seek to partner with the lines of business to develop policies that reﬂect true business risk, thereby elevating the role of the IT/security team to one more aligned with business objectives. By following these practices, organizations can gain the advantages of the faster and more actionable reporting that is now possible and available, while making sure these systems deliver the right level of value to suit individual enterprise security and compliance requirements. — Jonathan Gohstand Vice President of Marketing PacketMotion Full Text Search Capability Customizable, Real-Time Dashboard File Access Reporting For more information: Visit: www.packetmotion.com E-mail: info@packetmotion.com Call: (408) 449-4300 ©2008 PacketMotion, Inc. All rights reserved. WSTA® Ticker - September/October 2008 7 http://www.packetmotion.com

Table of Contents Feed for the Digital Edition of Ticker - September/October 2008

Ticker - September/October 2008 Contents What's New: Companies, Products & Services ROI-Rich Intelligent Agents Automate Data Mining & Analysis for Financial Services Search Driven User Interaction Management: Orchestrating User Experience

Ticker - September/October 2008

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.