EMC: Vendor cooperation key to data security
681159
The cool reception from Wall Street this summer after EMCâs announcement that it would buy RSA Security had EMC executives feeling a bit flummoxed -- like the guy who elopes, only to find out that his friends didnât like his girlfriend to begin with.
698751
High-tech companies are working with the U.S. government to develop a secure data-sharing system.
657408
(Source: Arsenal Digital)  Hackers, disgruntled and careless employees, equipment failure, broken pipes, fires, and natural disasters all pose threats to your data. Savvy IT and business managers have recognized that in order to deal with these challenges, they need to deploy a company-wide data protection infrastructure. Unfortunately, traditional data protection strategies that rely on tape backup are often too expensive and too difficult to manage in today's business environment where an increasing amount of data resides in branch offices and on employees' PCs and laptops. To help IT managers conquer their biggest data protection challenges, Arsenal Digital has released "Solving the Distributed Data Problem: The Rise of Remote Data Protection Services." This report discusses: - The changing corporate environment where more and more business-critical information is generated and stored outside of headquarters - The growing need to protect data for compliance, customer assurance, and business continuity reasons - The advantages of using an on-demand, distributed data protection service that automatically, reliably, and securely backs up off-site PCs and servers.
472704
A reconfigurable handheld device could foster a community of hardware hackers.
691631
Researchers at Toshiba have developed a method that they say makes possible to absolutely secure distribution of encryption keys across a network.
739698
Businesses and non-commercial entities have much to consider when it comes to securing their web applications and the data they keep on customers and patrons.
513844
InfoWorld - EMC has signed a definitive agreement to acquire Valyd Software, a Hyderabad, India, vendor of software for securing enterprise data. EMC did not disclose the sum it will pay for Valyd, a privately held company.
61682
Four small security software vendors have teamed up to develop a set of technical criteria for tools designed to secure Web applications. They also invited Cisco and other large IT vendors to take part in the certification program.
383169
Grid architecture aims to protect corporate networks from interior security threats.
765964
Delivering the capabilities of traditional EAI products within a light-footprint, standards-based infrastructure supporting incremental integration
553163
Vendor uncertainty and instability is highly correlated to perceived risk, and there are some big storage vendors out there with some large question marks hanging around their necks, including Sun, Symantec and HP.
679573
The importance these days of protecting your business from security threats is clear. But how to do it well often remains a vexing problem. Major IT vendors have faced this challenge like everyone else -- but with a twist. As providers of security technology and IT systems vulnerable to threats, they've had to stay a step ahead of everyone else. That's why CIOs of technology stalwarts IBM and Intel and security technology provider Symantec have taken on security management as one of their key functions. All three companies have shared their lessons learned with InfoWorld.These CIOs have had to do more than take on the usual responsibility for driving their respective companies' efforts to defend their infrastructure, employees, and corporate reputations from any fallout related to data breaches or compliance violations. They've also had to be the in-house beta testers for a generation of new technologies their organizations hope to sell to customers. This balancing act demands more of their time and energy now than at any other point in their careers, all of the executives said.Security affects all of it "When I look at the risks here at Symantec, I know that we have to maintain a multilayered approach to protecting our IT assets: our ERP data, intellectual property, customer data, and personnel data. Managing the risk around all of that is a significant responsibility for me and my team," said David Thompson, CIO at Symantec."We have multiple large pools of information that are critical to our organization, and we're seeing more of that data move further toward the boundaries, toward the end points," he said. "My job is getting more data into the hands of our business units, but that creates a lot of risk in terms of where it goes, who has access to it, and what they are using it for, along with the risk of it being exposed."Even Thompson, who ranks his ability to "eat Symantec's own cooking" -- or use all of its security and compliance technologies -- as a huge advantage compared to CIOs working in other firms, admits that trying to keep up with all of the threats and regulations, as well as all the new products, is an effort that can become all-consuming.The key to staying ahead of the attacks and laws, while not spending too much of his time focused on security, is delegating to a strong team of experts and prioritizing which projects to tackle based on their criticality to Symantec's business. "As a business leader and IT executive, if you take the view of trying to fix everything, you'll never sleep a wink. You have to assess risks, and just as we'll never be able to completely secure our borders in the United States, you have to prioritize efforts to reduce risk as much as possible," Thompson said. "CIOs themselves must have a team that can help carry a good portion of the load so that they can stay focused on business relationships, clearing roadblocks, and being the public face of that team."Among the most critical roles that any CIO or technology executive must play in aiding the efforts of their security staff is to drive high-level assessments of risk and figure out how their companies must strategize to complete projects that address the most significant threats and compliance regulations, Thompson contended. The most effective strategy, he noted, is to determine which projects most readily address specific threats or government requirements and focus on them, he said. Otherwise, a broad-brush approach to security will lead to unnecessary complexity and eat up all of your time. Thompson also noted that even with the latest security technology available to him, the security strategy is more important than just having good security tools.At IBM, CIO Mark Hennessy also stressed the importance of delegating to his team of security experts and of conducting near-constant risk assessment. But even with that delegation, security remains a top focus for him, he said. "The world is changing, and there are a lot of new realities around security to address. Fostering stronger security across the board is a core tenet, as it helps to bring more value to everything we do," he said. "We want to make our employees more comfortable and more productive, and drive greater success for the clients we serve, so it's something we constantly need to remain focused on," he added.The security-vs.-complexity challenge Malcolm Harkins, general manager of Intel's Information Risk and Security unit, works directly with the chip giant's CIO Douglas Busch on issues of internal operational security and compliance. Harkins said that one of the biggest challenges that organizations such as Intel face is the process of improving security in the face of rapidly advancing IT complexity.On top of that, ongoing efforts to lower the total cost of securing a company the size of Intel -- while keeping up with emerging threats and regulations -- is driving the firm to seek greater standardization in some areas, and to integrate larger groups of technologies in others. "We currently have over 40 individual security software and hardware providers that we are doing business with, and that's a lot of different pieces to have to integrate," Harkins said. "It's almost crazy from an IT standpoint, so we want to employ greater levels of standardization to help us with issues of consistency; we'll always have a very heterogeneous environment, but we really need a more consistent set of tools. The more standardization you have, the easier it is to make things more secure."One of the most crucial steps any company can take in terms of improving its security is driving understanding of the attacks and laws across their highest executive ranks and ensuring that leaders who become involved in matters of security maintain realistic goals and objectives, Harkins said.But that does not mean being heavy-handed in terms of the security levels demand, he noted. C-level executives who take an extremely conservative approach and desire to aggressively lock down all their IT systems may in fact do more harm than good, he said. "Some companies believe that by severely limiting the use of technologies that pose risks, they are improving their defenses, but the truth is they may just be creating a false sense of security," Harkins said."In reality, they are limiting the ability of their business to operate effectively and are increasing risk by creating barriers and policies that can't be enforced practically," he said. In IT, "you have to work with [C-suite] to change their approach from one that is focused on responding to fears to one that is focused on key controls that solve real problems. You have to have executive buy-in, but by taking the wider approach of considering legal, compliance, and security issues together, you will end up with stronger protection, lower costs, and less complexity."
679853
Many corporations today employ multiple techniques to protect against data loss. Unfortunately, the various approaches are often applied and managed in an uncoordinated manner. Ironically, the nightly backup, for some critical classes of applications, becomes almost irrelevant, representing a tertiary, "last ditch" level of data protection.
685106
Someday, encryption features built into a wide range of IT products -- from operating systems and messaging gateways to hard drives and storage systems -- may work in concert to offer central policy enforcement across different types of network assets and devices.
690847
Acquisition of consumer-authentication specialist designed to augment services offered by EMC's security division, RSA.
496304
Every security professional is intimately familiar with the Law of Unintended Consequences; sometimes it even works in their favor. Case in point? The data-protection advances that RxHub needed to build to protect their real-time data-transport operation.
350223
Well, here's your problem right here, ma'am Cisco, EMC, and Microsoft are joining forces to help the US government build a secure IT system for agencies to manage and share data.â¦