Information Security: Protecting the Business and its Information

The role of Information Security is to protect and support the safe delivery of business operations across all sectors of industry. That simple sounding challenge leads directly into a more complex conversation about what it is exactly that each organisation needs to protect. Business operations constantly change in order to meet evolving operational demands, additional data has to be maintained to sustain new activities, and the latest service and information delivery channels have to be brought on stream to facilitate fresh access demands. The security solutions that each organisation needs to deploy have to be capable of protecting the business from all external and internal threats. This involves securing systems and applications and the information that they hold. It also includes the protection of the vast range of users who require access to those facilities.

Report Highlights
KEY FINDINGS
* Data assets must be equally well protected from both insider and outsider threats.
* A balance between value for money from corporate IT security spend and retaining a comprehensive level of business protection needs to be achieved.
* The protection of sensitive data to avoid regulatory fines, unwanted publicity, and loss of brand value should remain a high business priority.
* Business collaboration demands that security protection must be capable of operating across corporate boundaries.
* Shrewd organisations are doing a lot more with their IT security assets than simply maintaining a defensive shield.
* The components of an integrated security strategy extend to the provision of all forms of business, user, and information protection.
* The security of endpoint devices involves users acting responsibly, as well as IT-based protection being available.
* Organisational security policy must integrate consideration of remote endpoint use with all other aspects of security protection.
* The Web, with its universal information accessibility, has enabled business to cut costs, increase operational efficiency, and deliver 24x7 serviceability, but with this comes a host of new threat opportunities.
* The presence of unregulated Web facilities, including socially driven Web 2.0 products, is blurring the lines between the core business value of the Web and the unacceptable personal use of corporate resources.
[Studien Infos ausblenden]

Section 1: Management Summary 7
1.1 Management Summary 9
Section 2: Introduction and Business Perspective 15
2.1 Report Introduction and Objectives 17
2.2 Information Security – Business Impact 18
2.3 Making Better Use of Security to Improve Business Operations 22
Section 3: Data Loss Prevention 27
3.1 Protecting Corporate Data 29
3.2 Key Aspects of a Data Loss Prevention Strategy 30
3.3 Dealing with Service Delivery in an Overpopulated Data Loss Prevention Market 35
3.4 Delivering Usable Data Loss Prevention Solutions 40
Section 4:Web Security 43
4.1 Web Usage – Balancing the Need for Protection 45
4.2 Web Applications – Delivering Business Value 47
4.3 The Business Case for Better Protection 52
4.4 Maintaining Control Over Web Usage 55
Section 5: Endpoint Security 59
5.1 Endpoint Security – A Critical Requirement 61
5.2 Endpoint Diversity and Independence 62
5.3 Information Protection at the Endpoint 65
5.4 Securing Endpoint Devices Between Connections to the Enterprise 68
Section 6: Market Analysis 73
6.1 Butler Group Information Security Features Matrix 75
6.2 Butler Group Information Security Decision Matrix 91
6.3 Butler Group Information Security Market Analysis 103
Section 7: Vendor and Product Profiles 113
Aladdin Knowledge Systems Ltd. 115
BigFix Inc. 116
Bloxx 117
Blue Coat 118
CA 119
Check Point 121
Cisco Systems, Inc. 122
Clearswift 124
Code Green Networks 125
F5 Networks 126
Finjan 127
IBM 128
Juniper Networks 131
Kaspersky 132
McAfee 133
Microsoft 135
PGP Corporation 137
RSA 138
Safend 140
SmoothWall 141
SonicWALL 142
Sophos 143
Sourcefire 145
Symantec 147
Tier-3 149
Trend Micro 150
Tripwire 153
Tufin 154
Voltage Security 155
WatchGuard 156
Webroot 157
Websense 158
Section 8: Glossary 161
[Inhaltsverzeichnis ausblenden]