HP's focus on security strategy, not security products
162870
HP will focus its efforts on security services, security management integration, data security and the intersection of security and corporate governance.
356771
While corporations are monitoring ports and using advanced security tools to fend off infection and attack, home users -- who have less technical sophistication -- are left more susceptible, sometimes
753082
(Source: Credant)  New technology to meet security, operations, and compliance needs Security has evolved beyond merely encrypting "bits on disks". The paradigm must shift from Full Disk Encryption to Full Data Encryption to protect against insider threats and avoid significant manageability and usability issues.
563928
London -- The plethora of security technologies on the market are enough to overwhelm even the most knowledgeable IT managers, but in sorting through all of the options, it may be helpful to look at what is not needed, according to Gartner Inc. research detailed hereÂ at its IT Security Summit conference.
690455
Hewlett-Packard Co has added to its HP-UX 11i v2 operating environment by extending data protection for its HP Integrity servers.
562916
The big bucks companies are spending on security often don't cover the biggest threat, survey finds.
347403
No sense pointing the finger at Hewlett-Packard anymore; we have Congress and the FBI to do that. But I did want to discuss the âI didnât know what my employees/vendors/executive staff were doingâ defense -- which was, of course, made famous by Enron , so you have to know it just wonât do. Instead of looking backward, I spoke with a couple of experts on governance, privacy, risk, and compliance assessment about how companies can do the right thing in the future.
217789
HP&#39;s Virus Throttler technology, due early next year, won&#39;t be the killer app, the &quot;silver bullet,&quot; that will stop viruses in their tracks, Tony Redmond, vice president and chief technology officer of HP Services, cautioned Tuesday at HP&#39;s security event
724744
(InfoWorld) - Intel Corp. and Symantec Corp. plan to release a firmware-based PC security product in the first half of 2007 to stop hackers from disabling virus shields. This "virtual security solution" will run beneath the OS of a PC using Intel's vPro business bundle, such as Hewlett-Packard Co.'s Compaq dc7700 or Lenovo Group Ltd.'s ThinkCentre M55p desktops. The product could help to slow the trend of viruses and malware attacks that succeed only because the target PC has already lowered its defenses, either because of a well-meaning user or a malicious earlier hack, said Leo Cohen, vice president of the security technology group at Symantec. "The trend is for the disabling or misconfiguring of security safeguards, so we will move security out of the user and operator environment," he said Wednesday at the Intel Developer Forum in San Francisco. "This is something Symantec takes seriously: How do you make your security solutions tamper-resistant? We're working with Intel to put security in the hardware, in the firmware," Cohen said. Security experts increasingly say thatÂ a PC's biggest weakness is its own user, not a faulty firewall or defective virus shield. No matter how much security policies and tools improve, they are worthless unless they're enforced by the IT department, said Malcolm Harkins, general manager of Intel's information risk and security division. TheÂ HP spy scandal has shown how easy it is for hackers to use "social engineering" tactics to breach defenses, whether they are obtaining private phone records by pretending to be account holders, or planting tracking software on a reporter's PC by embedding it in an e-mail with a fake news tip. Likewise, companies have learned from battling viruses like Code Red, Slammer and Nimda to use networked controls to push patches out to 95 percent of their PCs immediately. But they could spend just as much time and money patching the last five percent, and they can't rely on users to apply the updates themselves, Harkins said. "If you're using real-time antivirus, desktop firewall, data encryption and weekly hard drive scans, that could slow your system, so some end-users will turn that off," said Harkins. "People say the perimeter is vanishing, with extranets and mobile computing. But it's not vanishing, it's just just shifted to the people, and they can forget to update their antivirus or talk too loudly on a cell phone in an airport. If you ignore that component, that's going to be the thing that gets you every time." Indeed, IT administrators say that 28 percent of malicious attacks work because of compromised security, according to an August survey commissioned by Symantec. Whether that security is misconfigured because of employees, poorly-written OS and application patches, or hackers themselves, the trend is increasing, the survey said. Â
443241
Hewlett-Packard bolstered its security portfolio Tuesday, announcing availability of an identity management product for enterprises and a security management initiative for small and midsize businesses.
154369
Hewlett-Packard next year will take a fresh approach to its utility computing initiative with a product designed to reduce the cost of running corporate computing systems.
394179
HP introduces a security technology that ensures printed documents get to the right people and protects against malware.
700845
HP (NYSE:HPQ) (Nasdaq:HPQ) has been awarded a multiyear contract by the U.S. Army to provide desktop PCs, notebook PCs, printers, scanners and displays as part of a U.S. government requirement to ensure the operational readiness of the U.S. armed services worldwide.
435666
Few corporations deserve to be equated to Richard Nixon's White House or Enron, but Hewlett-Packard seems richly entitled to that comparison. And unlike those two arch-villains, HP awaits your judgment the next time you walk into any computer or electronics store. What do you do?
508961
com September 15, 2004, 9:01 PM PT. Most IT Managers won&#39;t question the importance of security, but this priority has been sliding between the third and fourth most important focus for companies.
405976
Letters: Going deeper on the question of security and operating systems.
266836
Across the security industry, experts are encouraging businesses to abandon piecemeal IT systems and data-defense efforts in favor of overarching risk management strategies.According to some customers, consultants, and vendors, the strategy is starting to prove particularly helpful in addressing issues of identity management and access control.Long identified by industry analysts as an area where businesses often end up "chasing rainbows" and getting involved in never-ending projects, experts contend that by adopting a risk-based model to drive identity management, customers' goals are actually being realized."When developing our architecture, it became very clear that one of the processes that was important to tackle before starting to change things in one region or business unit was to do risk assessment and integrate all the subjects related to access control," said Paulo Martins, enterprise identity and access manager at financial services giant ABN AMRO.In 2006, the banking company made a decision to rework its identity infrastructure as part of an effort to make access control an even more central focus of its enterprise security strategy.Rather than simply looking for a new technology to improve its standing, ABN AMRO found that by getting a fix on the areas of its business where controlling access to sensitive data was most crucial -- and then assessing the varying levels of efficacy within its existing operations -- it found a way to move its project forward faster and with a greater sense of direction."As companies get larger and the numbers of applications increase, and they grow through mergers and acquisitions, they find that they have different levels of maturity related to identity and access," said Martins. "We built our strategy considering all of these things. The first year was dedicated to process and access control reviews; the second year involved implementation of those processes and use of risk analysis for critical applications."Among the most valuable topics that ABN AMRO was led to consider as part of its process, he said, was where it made sense to automate identity-based control for its applications and where it did not.By gauging the number of users and criticality of the data involved in each area of its business, the company was able to set its priorities and get controls in place where the risk of information loss was most widespread or severe, said Martins.Using risk management to prioritize security As part of its project, ABN AMRO brought in consultants from PricewaterhouseCoopers (PwC) to help map out its areas of need and define where its greatest data and identity risks lay.Jerry Lewis, a principal and national identity management leader at PwC, said that his company is advising more customers to tackle their projects using a risk management strategy because it allows them to refine their plans and improve their security standing with greater alacrity."We're definitely seeing risk management becoming the next real extension of identity management," Lewis said. "Most large companies we see have spent a lot of time and money putting solutions into place to drive various requirements -- such as in addressing compliance regulations -- and once they have the infrastructure installed, they realize that they need to use more of a risk-based approach."Lewis said that more customers than ever are starting to adopt the risk-based identity management approach to get a better fix on handling applications and systems access from an enterprise-wide manner.Those companies' immediate goals tend to revolve around their desire to improve identity management reporting capabilities, and to create dashboards that garner metrics related to potential compliance audits, he said."People are looking at this issue from more of a broad perspective, based on regulatory drivers, and focused on very specific applications or needs," Lewis said."Doing so, these companies are able to take a step back and find out what they really need to address first," he said. "They want the company-wide view, but they're also realizing that they typically can't have a complete end-to-end solution across the organization that is one size fits all and that they need use this risk-based approach."As a result of the success that companies are having using the strategy, the consultant said that more customers have earmarked funds to buy products that apply the risk-based approach to identity during 2008.One of the vendors PwC works with in the space, and the software provider to ABN AMRO, is SailPoint, a startup founded in 2005 whose products are focused squarely on identity auditing and analytics as well as policy enforcement and the creation of automated controls.SailPoint executives said that customers are looking for a new generation of identity management tools that address the issues that will help them pass audits and give them more of a top-down view into where their organizations stand in terms of securing access."People began getting pressured to address issues of compliance and audit around Sarbanes-Oxley, but traditional identity tools were not designed to solve those problems, they were mostly about improving operational efficiency, and people have been stretching those technologies to do things they weren't designed to do," said Mark McClain, chief executive and founder of SailPoint."Most of these systems were initially designed to set up accounts and do password resets, but with compliance needs, it has to become more about governance and risk assessment," he said. "Customers are frustrated because they've spent all this money dealing with the terms of the regulatory audits, yet the breaches have continued because they haven't been able to address the real risks."