wm11 wells getronics

							Data Security in a
Mobile World

 Emmitt Wells – Getronics
                      Hitting Close to Home
               September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California




If you think mobile
security isn’t a real
subject, just consider
the possibility that
there is someone out
there right now with
your name, email,
phone number, and
birth date and more
stored on a digital
device that was just
left in a taxi cab – not
a comforting thought.




                                                                                          3
                                                                  www.ITEXPO.com
      View of Endpoint Security…
September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California




                                          http://www.jacobsen.no/anders/blog/archives/images/project.jpg
                                                                                                           4
                                                           www.ITEXPO.com
                 Compliance Demands are Mounting
           September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California



• All Sectors
     – SOX, Combined Code, Companies Bill, IAS
     – Privacy, Data Protection, Human Rights
• Finance Sector
     – Basel II, FSA, SEC Act 17a-3/4, NASD Rules 3010/3110
• Retail Sector
     – Payment Card Industry (PCI) Security Standard
• Health Sector
     – HIPAA
• Interception legislation
     – RIPA, European Data Retention Directive
• Local legislation with Global consequences
     – Californian Law SB 1386


                                                                                      5
                                                              www.ITEXPO.com
      Securing Data in Motion
September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California




                                                                           6
                                                   www.ITEXPO.com
      Ensuring Data Integrity
September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California




                                                                           7
                                                   www.ITEXPO.com
      Data Theft
September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California




                                                                           8
                                                   www.ITEXPO.com
      Policy
September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California




                                           Establish




                                                                           9
                                                   www.ITEXPO.com
                      Technology Available
              September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California


• Endpoint Products
    – Anti-virus, anti-spam, Message
      Cleaning, HIDS for the desktop
• Controlling Access
    – Identity Management and
      Authentication
• External Protection
    – Firewalls and NIDS
• Data Protection
    – Policy Enforcement Tools
• Backup and Retrieval
    – Secure Archival
• Stolen Equipment
    – Data low-jack

                                                                                        10
                                                                 www.ITEXPO.com
                What if I do nothing?
          September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California


• “Gartner estimates cleanup costs for any data loss
  to be $90 per customer record when you calculate
  notification, legal expenses, and the damage done
  to a corporate brand."




             =                      +                        =
                                                                                    11
                                                             www.ITEXPO.com
             How do I convince my executives of the need?
       September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California




  Discuss                                                   Discuss
Technology                                                  Business
                                                             Impact


                                                                                 12
                                                          www.ITEXPO.com
      Balanced Security
September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California




                                                                          13
                                                   www.ITEXPO.com
                 Requirements for Mobile Endpoint Security
           September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California



• Policy
   – Define rules, promote best practices and minimize risks
• Technology
   – Enforce policies, detect violations of policy, and deliver evidence
     of compliance with corporate policy and regulatory requirements
• Education
   – Equip employees to recognize potential sources of risk and to
     safeguard information and transactions in hostile environments
• Management
   – Setup reactive and proactive management to help measure how
     your endpoints are performing against the policy you have
     established




                                                                                     14
                                                              www.ITEXPO.com
              Keep it Simple
        September 10-12, 2007 • Los Angeles Convention Center • Los Angeles, California




"Aye sir, the more they over-tech the
plumbing, the easier it is to stop up the
drain." – Mr. Scot, Star Trek III: The
Search For Spock




                                                                                  15
                                                           www.ITEXPO.com
Thank you