Symantec Endpoint Protection and Management Seminar May 13, 2008

Transcription

1 Symantec Endpoint Protection and Management Seminar May 13, 2008

2 Agenda 8:00 8:30 am Registration and Breakfast 8:30 9:30 am Revolutionizing Endpoint Security Teresa Chen - Symantec 9:30 9:45 am Break 9:45-10:45 am Endpoint Security & Management Group A Winning Combination Dave Swanson Altiris, now part of Symantec 10:45-11:45 am Total Operational and Economic Impact Analysis Stanley King Alchemy Solutions Group 11:45 12:00 pm Closing Remarks

3 Symantec Partners Carahsoft has a proven history in helping government agencies find the best possible solutions at the best possible value. Carahsoft offers needs analysis, configuration support, ease of ordering and special government pricing. The leading provider of key solutions to help government agencies keep critical information safe, available, and compliant. Altiris, recently acquired by Symantec, combines its endpoint management capabilities with the security and back-up expertise of Symantec to deliver a unique set of solutions to the government market. Symantec@carahsoft.com or 877-GOV-SYMC

4 Carahsoft Symantec Solutions for Government Strategic Partnership Platinum Partner - Symantec (Largest Public Sector Partner) Platinum Partner Altiris Merging Technologies to fit Government Customer Needs Key Technologies for Government Server and Application Virtualization Compliance around various Federal Mandates/ Regulations Vista Migration Carahsoft Delivers Altiris Solutions Trained and Knowledgeable Personnel Configuration, Design, Implementation Services, and Expertise Carahsoft GSA Schedule No. GS-35F-0131R Other Federal GWACs, and Agency specific BPA s

5 Upcoming Events Symantec Events May 28, 2008 Symantec PureDisk Webcast June 17, 2008 NetBackup User s Group June 26, 2008 NetBackup 6.5 for VMware Webcast Register and learn more about all upcoming Symantec events at:

6 Symantec Contact Information Carahsoft Symantec Solutions 877-GOV-SYMC

7 Revolutionizing Endpoint Security Teresa Chen Product Marketing Manager, Endpoint Security May 2008

8 Agenda 1 Security Trends at the Corporate Endpoint 3 A Complete Enterprise Security Solution 4 Call to Action! Copyright Symantec Corporation

9 Security 2.0 New technologies are changing the way we communicate Businesses are sharing information across their extended enterprises and engaging in more complex electronic interactions New technologies are also introducing new security risks No longer focused on just the device it s about the information and interactions Phishing, ID theft, malicious users and non-compliance are all risks Must keep the threats out, and ensure the information stays inside Symantec is bringing together an ecosystem of products, services and partners that help create a safe and connected world Symantec s mission is to deliver solutions that protect customers connected experiences Copyright Symantec Corporation

10 Protecting Information External Threats Such As Viruses, Spyware & Crimeware Exploiting System Vulnerabilities Internal Threats Such As Data Theft and Data Leakage Exploit Lack Of Supervision For Corporate Information Flow Non-Compliance With Policies Or Regulations (SOX, FISMA, etc) Lack Of Adequate Controls Or Evidence Collection Copyright Symantec Corporation

11 Endpoint Security Copyright Symantec Corporation

12 Business Problems at the Endpoint Endpoint management costs are increasing Cost of downtime impacts both productivity and revenue, productivity hit largest in enterprise Costs to acquire, manage and administer point products are increasing, as well as the demand on system resources Complexity is increasing as well Complexity and man power to manage disparate endpoint protection technologies are inefficient and time consuming Growing number of known and unknown threats Number of Zero Day threats Stealth-based and silent attacks are increasing, so there is a need for antivirus to do much more Source: Internet Security Threat Report Vols. XI & XII; March & Sep 2007 Copyright Symantec Corporation

13 Changes in the Threat Landscape From Hackers To Thieves Fame motivated Financially motivated Noisy and highly visible Silent Indiscriminate Highly targeted Few named variants Overwhelming variants Copyright Symantec Corporation 2007

14 The Need for Complete Endpoint Security: Endpoint Protection + Endpoint Compliance Protection Viruses Worms ID Theft Bots Unknown Attacks Compliance Endpoint Security Policy Antivirus On Antivirus Signature Updated Personal Firewall On Service Pack Updated Patch Updated Status Copyright Symantec Corporation

15 Key Ingredients for Endpoint Protection AntiVirus World s leading AV solution Most (37) consecutive VB100 Awards Virus Bulletin April 2008 Antivirus Copyright Symantec Corporation

16 Key Ingredients for Endpoint Protection Antispyware Best rootkit detection and removal VxMS = superior rootkit protection Antispyware Viruses, Trojans, Worms Antivirus Source: Thompson Cyber Security Labs, August 2006 Copyright Symantec Corporation

17 Key Ingredients for Endpoint Protection Firewall Industry leading endpoint firewall technology Gartner MQ Leader 4 consecutive years Rules based FW can dynamically adjust port settings to block threats from spreading Firewall Spyware, Rootkits Antispyware Viruses, Trojans, Worms Antivirus Copyright Symantec Corporation

18 Key Ingredients for Endpoint Protection Intrusion Prevention Intrusion Prevention Worms, Spyware Firewall Spyware, Rootkits Antispyware Combines NIPS (network) and HIPS (host) Generic Exploit Blocking (GEB) one signature to proactively protect against all variants Granular application access control TruScan TM - Proactive Threat Scanning technology - Very low (0.0049%) false positive rate Detects 1,000 new threats/month - not detected by leading av engines No False Alarm 25M Installations Viruses, Trojans, Worms Antivirus False Alarms Fewer than 50 False Positives for every 1 MM PC s Copyright Symantec Corporation

19 Intrusion Prevention System (IPS) Combined technologies offer best defense Intrusion Prevention (IPS) (N)IPS Network IPS (H)IPS Host IPS Deep packet inspection Generic Exploit Blocking Attack-facing (Can create custom sigs, SNORT-like) Vulnerability-facing (Signatures for vulnerability) System Lockdown TruScan TM Controlling application s ability to read, write, execute and network connections Behavior-based (Whole Security) Copyright Symantec Corporation 2007

20 Key Ingredients for Endpoint Protection Device and Application Control Device and Application Control 0-day, Key Logging Intrusion Prevention Prevents data leakage Restrict Access to devices (USB keys, Backup drives) Whitelisting allow only trusted applications Worms, Spyware Firewall Spyware, Rootkits Antispyware Viruses, Trojans, Worms Antivirus W32.SillyFDC targets removable memory sticks spreads by copying itself onto removable drives such as USB memory sticks automatically runs when the device is next connected to a computer Copyright Symantec Corporation

21 Key Ingredient for Endpoint Compliance Network Access Control Device and Application Control Network Access Control Comes ready for Network Access Control add on Agent is included, no extra agent deployment Simply license SNAC Enforcement Intrusion Prevention Firewall Antispyware Antivirus Copyright Symantec Corporation

22 Solution: Symantec Network Access Control Checks adherence to endpoint security policies NAC is process that creates a much more secure network Antivirus installed and current? Firewall installed and running? Required patches and service packs? Required configuration? Fixes configuration problems Controls guest access Network Access Control helps prevent malware from spreading throughout the network Copyright Symantec Corporation 2007

23 Network Access Control (continued) Restricts access to your network by creating a closed system Offers automatic endpoint remediation before access is granted Checks adherence to endpoint security policies even when connected to network Employees Non-employees Unmanaged Managed On-site Remote Corporate Network Copyright Symantec Corporation 2007

24 Presenting Network Access Control Device and Application Control Intrusion Prevention Firewall Antispyware Antivirus Symantec Endpoint Protection 11.0 Symantec Network Access Control 11.0 Copyright Symantec Corporation

25 Single Agent, Single Console Results: Increased Protection, Control & Manageability Reduced Cost, Complexity & Risk Exposure Managed by Symantec Endpoint Protection Manager Copyright Symantec Corporation

26 Beta Customer Value Data Single console Customers will reduce management hours by 75% Security Related Reporting One customer expects to save 97% of the hours on weekly security related reporting Application Control One customer: will eliminate nearly $800,000 in cost of servers currently being used to maintain performance and sufficient drive space because of music downloading Another: anticipates recovering over $2.0 million from network outages caused by unauthorized peer to peer applications Copyright Symantec Corporation 2007

27 What analysts are saying Symantec is moving ahead of competition in this space as most competing solutions either lack the company s integrated approach, functionality or manageability. Therefore, we are very confident that Symantec s new solutions for endpoint protection and network access control are a safe bet for any business. Copyright Symantec Corporation 2007

28 What the press is saying Symantec Endpoint Protection 11.0 Winner of Best Security Suite for SMB s - PC World Awards Mexico 2007 Symantec Endpoint Protection 11.0 will definitely simplify administration efforts and therefore help to save money in the long-term. - Johann Baumeister, Searchsecurity.de, November 2007 Symantec's new offering looks very solid...we were particularly impressed with Symantec's management capabilities McAfee's completely new epolicy Orchestrator (epo) is a major disappointment. - Information Security, November 2007 Copyright Symantec Corporation 2007

29 What customers are saying We re aiming to increase our manpower by 20% in the next 12 months and the number of hosts is expected to double in the same period. Using Symantec Endpoint Protection we will not need any extra staff to manage this growth. - Carsten Klitgaard Villumsen, CIO of the Scandinavian environmental company, The Solum Group, October, 2007 Symantec Endpoint Protection has the kind of consolidated security I m looking for to simplify management of our 10,000 PCs With secure endpoints, we can consolidate security with a single management console. - Enrico Fedeli, Chief Information Security Officer, Comune di Milano Copyright Symantec Corporation 2007

30 Recent SEP 11.0 Wins Southeast Communications company Deployed SEP on more than 9,000 nodes Displacing Trend Micro Antivirus Company implementing advanced protection features (including Device and Application Control) The administrative console in Symantec Endpoint Protection 11.0 allows us to give remote IT members access to the machines under their control. This takes a lot of the burden off of the centralized security group they don't have to comb through logs and alerts anymore and enables us to quickly detect infections and to notify field offices before the intrusion becomes an epidemic. Largest Medical Staffing Solutions Provider in the US Displaced McAfee I had the unique opportunity to compare Symantec s product with McAfee s, in terms of speed to write new virus signatures and central management tools, and I thought the McAfee product paled in comparison... Large Semiconductor corporation in Oregon Displaced Trend Micro Antivirus Trend was good enough at finding the viruses, but it couldn t do much about them once they were there It didn t have the remediation capabilities we needed With Symantec Endpoint Protection, I feel like our data is protected and that we re not sending our sheep to the wolves, so to speak. Copyright Symantec Corporation 2007

31 Redefining Endpoint Security Solution Endpoint Protection Symantec Endpoint Security Endpoint Compliance Definition Endpoint Protection proactively protects laptops, desktops and servers from known and unknown malware such as viruses, worms, Trojans, spyware, adware and rootkits by combining these capabilities: Antivirus Antispyware Desktop firewall Intrusion Prevention (Host & Network) Device & Application Control Endpoint Compliance securely controls entry into networks Ongoing endpoint integrity checking Centralized endpoint compliance policy management Automated remediation Host based enforcement of access policies Monitor and report System configuration checking, remediation & enforcement Prove compliance by monitoring effectiveness of IT controls in real time Key Products Symantec Endpoint Protection 11.0 * SNAC-ready out of the box Symantec Network Access Control 11.0 Also available in a Starter Edition Other Products Symantec Mobile Security Symantec Critical System Protection Symantec Endpoint Encryption Symantec Security Information Manager Symantec On-Demand Protection (for OWA & Web Apps) Copyright Symantec Corporation

32 Symantec Global Intelligence Network + 200, Millions Hundreds malware Systems of security threat of submissions MSS Worldwide reports alerts customers per per 30% month month of World s Traffic + >6,200 Managed Security Devices Symantec Security 4 Symantec SOCs 74 Symantec Monitored 40,000+ Registered Sensors Countries in 180+ Countries Response Centers Advanced Honeypot Network Tokyo, Japan Calgary, Canada San Francisco, CA Redwood City, CA Santa Monica, CA Dublin, Ireland Twyford, England Munich, Germany Taipei, Taiwan Alexandria, VA Pune, India Sydney, Australia Copyright Symantec Corporation

33 For More Information Copyright Symantec Corporation

34 Thank You! Copyright 2007 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice. Copyright Symantec Corporation

35 Endpoint Security & Management Group A Winning Combination Dave Swanson, DOD/Intel National Accounts Engineer

36 A Well-Managed Endpoint is a More Secure Endpoint Evil geniuses who attack us with zero-day attacks < 5% 30% can be resolved through Patch Management System configuration represents 2/3 of all system weakness Source: SearchSecurity.TechTarget.com 2

37 A Well-Managed Endpoint is a More Secure Endpoint 3

38 A New Threat Is Discovered 1 Threat Alert Announced Kick off automatic response process > Notify risk management 4

39 5

40 A New Threat Is Discovered 1 Threat Alert Announced Kick off automatic response process > Notify risk management 2 Identify Exposure Create Incident > Audit systems > Prioritize risks CMDB 6

41 7

42 A New Threat Is Discovered 1 Threat Alert Announced Kick off automatic response process > Notify risk management 2 Identify Exposure Create Incident > Audit systems > Prioritize risks 3 CMDB Deliver Signatures and Patches Update signatures > Issues patches > Block attacks 8

43 9

44 A New Threat Is Discovered 1 Threat Alert Announced Kick off automatic response process > Notify risk management 2 Identify Exposure Create Incident > Audit systems > Prioritize risks 3 Deliver Signatures and Patches CMDB Update signatures > Issues patches > Block attacks 4 Validate Remediation Track compliance > View Dashboard > Close Incident 10

45 80 / 20 Rule of Management 11

46 IT Lifecycle Management 12

47 Potential Opportunities Tracking assets from receiving to disposal Zero-touch deployment & migration Integrated software management Software license compliance & harvesting Incident management & resolution capabilities 13

48 Do these sound familiar? I need to manage a growing and increasingly complex environment. We have an upcoming hardware migration project. My helpdesk staff spends too much time troubleshooting and I m not sure how many incidents are still open. I think we are paying too much for software licenses, but I can t get an accurate count in my environment. I need a way to track my assets where are they located, how are they configured and how do they interact with one another. 14

49 Altiris Platform & Solutions 15

50 Analytics Drive Intelligent Decisions 16

51

52 Convergence is Around the Corner We are changing the security management game. We will be integrating Symantec Endpoint Protection into the Altiris platform as a top priority. Brad Kingsbury Senior Vice President Endpoint Security and Management Group 18

53 Altiris Product Family Total Management Suite Client Management Server Management Service & Asset Management Deployment & Migration Inventory & Application Metering Software Packaging & Delivery Software Virtualization Remote Control & Diagnostics System Provisioning Inventory & Baselining Hardware & System Monitoring Virtualization Management Remote Diagnostics Incident & Problem Management Asset Management License Compliance CMDB Add-On Solutions Workflow Solution Software Virtualization IT Analytics Free Symantec Integration Components Symantec Endpoint Protection BackUp Exec System Recovery Veritas Configuration Manager 19

54 Best of Breed Solutions The Forrester Wave is copyrighted by Forrester Research, Inc. Forrester and Forrester Wave are trademarks of Forrester Research, Inc. The Forrester Wave is a graphical representation of Forrester's call on a market and is plotted using a detailed spreadsheet with exposed scores, weightings, and comments. Forrester does not endorse any vendor, product, or service depicted in the Forrester Wave. Information is based on best available resources. Opinions reflect judgment at the time and are subject to change.

55 Passionate about Partnerships 21

56 Competitive Top 3 Silver Bullets 1 Multiplatform Support (#1 versus Microsoft) Multiple OS, multiple virtualization environments 2 Single Best of Breed Vendor (#1 versus non-ms Vendors) Only Vendor that is Leader in Security, Management and Availability. Symantec is market-leading, best in class, the gold standard 3 Collaborative Architecture Collaborative architecture provides a more nimble, efficient and costeffective IT infrastructure. 22

57

58 The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact (TOEI) Analysis By The Alchemy Solutions Group For Symantec Endpoint Protection 11.0 Research and Analysis Conducted by: Sponsored by: Total Operational and Economic Impact 1

59 Purpose and Objectives The SEP 11.0 Beta VDR Purpose and Objectives were to: To identify, document, and validate the measurable value (Total Operational and Economic Impact) SEP 11.0 is providing customers in a post implementation environment as defined by the customer. To establish the creation of a repeatable customer engagement process that enables customers to help determine the Business Case for specific products and services. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 2 2

60 The Alchemy Solutions Group, Inc All Rights Reserved. Purpose and Objectives To enhance the relationships with senior IT executives by communicating the operational and economic benefit versus features and functions of product and services. To transition the go-to-market planning from feature based to economic based acumen for all product related communications. Total Operational and Economic Impact 3

61 SEP 11.0 Beta Customer Demographics 40 Symantec customers were interviewed and subsequently qualified. Customer participation required a significant commitment to support the TOEI Research: Provide executive and staff resources to participate in two, on-site interviews ranging from four to six hours each Install and extensively test the SEP 11.0 beta software immediately upon release Make resources available throughout the process with both a technical and business acumen related to IT security operations Were willing to share with Symantec and Alchemy privately, the potential TOEI impact SEP 11.0 would have on their respective organizations. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 4 4

62 SEP 11.0 Beta Customer Demographics 12 Customers agreed to these terms and conditions 4 customers cancelled participation due to job transitions, acquisition activity and competing priorities. 8 Customers fully participated in the VDR Research End User communities ranged from 170 to 30,000 Remote support locations ranged from 2 to 126 globally Focused on the SEP 11.0 product areas where the highest customer benefit was assumed. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 5 5

63 The Alchemy Solutions Group, Inc All Rights Reserved. SEP 11.0 TOEI Engagement Process Total Operational and Economic Impact 6

64 The Alchemy Solutions Group, Inc All Rights Reserved. Total Number of End Users by Customer Total Operational and Economic Impact 7

65 The Alchemy Solutions Group, Inc All Rights Reserved. Total Number of Support Locations by Customer Total Operational and Economic Impact 8

66 The Alchemy Solutions Group, Inc All Rights Reserved. Annual Contribution by TOEI Area Total Operational and Economic Impact 9

67 The Alchemy Solutions Group, Inc All Rights Reserved. Common TOEI Findings by Application Area Client UI- End user self diagnosis once unthinkable is now being reconsidered based on a tightly controlled and graphically driven interface at the endpoint. Benefits could reduce calls to the help desk by 65% Automatic Deployment- of AS, AV and Personal Firewall software and updates could reduce current IT man hours by 75%. Device Control- Managing the introduction of unprotected computers and/or devices to the endpoint and/or network and there immediate disposition provides a significantly higher control point for network and endpoint security best practices. Application Control- Controlling unauthorized or recreational applications (peer to peer) avoids significant network performance issues and outages. Total Operational and Economic Impact 10

68 The Alchemy Solutions Group, Inc All Rights Reserved. Common TOEI Findings by Application Area Admin UI- Graphical user interfaces greatly simplify and automate the process of monitoring for possible threats including detection, identification, classification and dispatching the recovery against that the threat. Threat Monitoring combined with Device Control- allow the opportunity to deal with threats in a timely proactive manner which is a major consideration in cost avoidance. Report Generation- Totally automated reporting for network security operations in meeting requirements for the auditing and compliance communities (SOX, GLBA, HIPAA) could reduce man hours by 85% on average. Account Creation and Role Based Administration- real time creation, rollout and updating of accounts including sharing rights at the end user level from a single management console eliminates most if not all travel for user specific set up at the end point. Total Operational and Economic Impact 11

69 TOEI Findings by BETA Customer Global Electronics Manufacturer -TOEI $5.3 million in savings from deploying the SEP 11.0 solution. The primary areas of savings are in application control and reduction in help desk support time to resolve security related issues County Government -TOEI $20k in savings by deploying SEP The primary areas of savings are application control, reporting and policy setting tasks managed from the Admin UI console. Regional Bank -TOEI $2.0 million in savings by deploying SEP Centralizing the management of many mundane security related task and more efficient endpoint PC scanning for virus and malware. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 12 12

70 TOEI Findings by BETA Customer State Government -TOEI Expects to realize more than $3.4 million by deploying SEP The primary areas of savings are in centralizing the management of many administrative task including application control, location awareness, and log file monitoring of over 130 government agencies and offices. SEP 11.0 will serve as a key enabler is a state wide reorganization of IT Security Operations and IT Risk Management organizations. Savings from this effort can not be estimated at this time. County Government-TOEI Estimates savings of almost $300,000 from deploying SEP 11.0 and benefiting from the much improved Admin and Client UI capabilities as well as displacing currently deployed point solutions. Healthcare Benefits and Pension Organization -TOEI Expects to save more than $315,000 by deploying SEP The areas of savings will be in Admin UI tasks and application control. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 13 13

71 TOEI Findings by BETA Customer National Landscape Company - TOEI Expects to save more than $326,000 by deploying SEP The key area of savings is in managing upgrades at over 120 remote locations. Behavioral Healthcare Organization - TOEI Expects to save more than $24,000 by deploying SEP The centralized management tools will give them greater access and control of users in remote locations. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 14 14

72 TOEI Findings - Global Electronics Manufacturer 1100 total end users with a very high percentage working remotely with laptops and traveling through the Far East and Europe. IT staff totals 33 globally. 8 have direct responsibility for security operations. Headquarters in CA, and facilities in Horseheads, NY; Nozay, France; San Donato, Italy; with manufacturing operations in both Shanghai, China; and Bangkok, Thailand. International presence presents many threat concerns to their environment include virus and malware, laptops stolen or compromised, threats through external devices entering their network and not being detected. Most significant losses are through non authorized peer to peer applications crippling the network. $5.3 million in savings from deploying the SEP 11.0 solution. The primary areas of savings are in cost avoidance through application control and reduction in help desk support time to resolve security related issues The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 15 15

73 The Alchemy Solutions Group, Inc All Rights Reserved. Global Electronics Manufacturer Ranks Greatest Areas of Data Exposure Total Operational and Economic Impact 16

74 The Alchemy Solutions Group, Inc All Rights Reserved. Global Electronics Manufacturer Estimates 30% Reduction in Calls to IT Support Total Operational and Economic Impact 17

75 The Alchemy Solutions Group, Inc All Rights Reserved. Global Electronics Manufacturer Network Outages due to Recreational Network Usage Total Operational and Economic Impact 18

76 The Alchemy Solutions Group, Inc All Rights Reserved. Global Electronics Manufacturer Idled Employees per Location per Incident Due to Recreational Network Usage Total Operational and Economic Impact 19

77 The Alchemy Solutions Group, Inc All Rights Reserved. Global Electronics Manufacturer Man Hours Lost per Location per Incident Due to Recreational Network Usage Total Operational and Economic Impact 20

78 The Alchemy Solutions Group, Inc All Rights Reserved. Global Electronics Manufacturer Loses $62,000 per Incident Due to Recreational Network Usage Total Operational and Economic Impact 21

79 TOEI Findings County Government 3500 end users located throughout the county in approximately 50 various buildings and remote locations. 35 IT employees with only two FTEs focused on security with daily threats are in the tens of thousands. Conservative estimate of $20k in savings deploying SEP 11.0 from application control and other reporting and policy setting tasks managed from the Admin UI console. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 22 22

80 The Alchemy Solutions Group, Inc All Rights Reserved. County Government Ranks Areas of Greatest Data Exposure Total Operational and Economic Impact 23

81 The Alchemy Solutions Group, Inc All Rights Reserved. County Government Estimates 50% Reduction in Calls to IT Support Total Operational and Economic Impact 24

82 TOEI Findings Florida Banking Institution Full-service financial serving customers through 83 branches in 13 coastal counties The IT department supports a total of 1500 end users with a staff of 74 IT employees with a budget for security tools of approximately $1.0 million Four planned audits per year from the Office of Thrift Supervision (OTS), and to numerous internal audits for system compliance. Employee down time due to a variety of security related issues is primary concern. Anticipated savings of $2.0 million deploying SEP Centralizing the management of many mundane security related task and more efficient endpoint PC scanning for virus and malware from a single management console. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 25 25

83 The Alchemy Solutions Group, Inc All Rights Reserved. Florida Banking Institution Ranks Greatest Areas of Data Exposure Total Operational and Economic Impact 26

84 The Alchemy Solutions Group, Inc All Rights Reserved. Florida Banking Institution Reduction in Man Hours by Functional Area Total Operational and Economic Impact 27

85 The Alchemy Solutions Group, Inc All Rights Reserved. Florida Banking Institution Productivity Lost per Location Total Operational and Economic Impact 28

86 The Alchemy Solutions Group, Inc All Rights Reserved. Florida Banking Institution Productivity Lost per Location Total Operational and Economic Impact 29

87 TOEI Findings State Government This organization represents all state government agencies totaling 13 secretariat level offices that support 133 agencies. This organization supports 30,000 end users which include a wide variety of skills and specific functions including all executive level, all state funded agencies and extending into hospitals, libraries and other local state offices. They have 1000 employees in the IT organization comprised of 300 staff in the centralized corporate IT functions and 700 staff members working at the divisional or other department levels. A total of 400 of these staff members are focused on security functions or an average of three FTEs per agency. The IT department is decentralized across the major agencies and cascades their support to sub agencies and smaller departments creating a very costly support model. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 30 30

88 The Alchemy Solutions Group, Inc All Rights Reserved. TOEI Findings State Government Due to the decentralized nature of the organization, processes and best practices are inconsistent from one agency to another. Each agency recognizes the importance of creating a secure environment but delays in communication or the execution of security related actions, has an impact on overall readiness. Anticipated savings of more than $3.4 million by deploying SEP 11.0 primarily in centralizing the management of application control, location awareness, and log file monitoring. Strategic Planning at the State level is now restructured Security Operations into a central location as a result of the utilities found in the SEP 11 product. Total Operational and Economic Impact 31

89 The Alchemy Solutions Group, Inc All Rights Reserved. State Government Ranks Greatest Areas of Data Exposure Total Operational and Economic Impact 32

90 The Alchemy Solutions Group, Inc All Rights Reserved. State Government Savings per Application Area Total Operational and Economic Impact 33

91 TOEI Findings County Government IT Organization supports 6000 end users across approximately 70 locations The County serves 1M citizens and city services and government including the Court System, Jail, Health & Wellness, Human Services, Registration & Elections, and Tax Assessment and Collection. There are 145 IT staff members in the central IT organization, 8 staff are dedicated to security. $28.2 million IT budget. Estimate savings of almost $300,000 from deploying SEP 11.0 and benefiting from the much improved Admin and Client UI capabilities as well as displacing currently deployed point solutions. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 34 34

92 The Alchemy Solutions Group, Inc All Rights Reserved. County Government Ranks Greatest Areas of Data Exposure Total Operational and Economic Impact 35

93 The Alchemy Solutions Group, Inc All Rights Reserved. County Government % Reduction in Man Hours by Functional Area Total Operational and Economic Impact 36

94 TOEI Findings Healthcare Benefits and Pension Company Have approximately 300 end users and process more than 700,000 pension and healthcare claims each year for more than 45,000 members Personal health and financial information of nearly every actor or actress in the motion picture or television business today. The sensitive nature of this information can not be understated. The IT team totals 25 including management percent of their time is spent on security related issues. Anticipate more than $315,000 by deploying SEP The areas of savings will be in Admin UI tasks and application control. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 37 37

95 The Alchemy Solutions Group, Inc All Rights Reserved. Healthcare Benefits and Pension Company Ranks Greatest Areas of Data Exposure Total Operational and Economic Impact 38

96 The Alchemy Solutions Group, Inc All Rights Reserved. Healthcare Benefits and Pension Company % Reduction in Man Hours by Functional Area Total Operational and Economic Impact 39

97 TOEI Findings National Landscape Company $1.0 billion company provides design, build and maintenance services and has 1,550 end users at over 120 branch offices The IT organization has 36 staff members with a budget of around $8.0M. million annually and a team of 36 staff members. Only one FTE is dedicated to security and is generally in reactive mode. Anticipate savings of more than $326,000 by deploying SEP 11.0 in many security areas including managing software upgrade deployments at over 120 remote locations. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 40 40

98 The Alchemy Solutions Group, Inc All Rights Reserved. National Landscape Company Ranks Greatest Areas of Data Exposure Total Operational and Economic Impact 41

99 TOEI Findings Behavioral Healthcare Organization Fully accredited HealthCare Organization specializing in innovative family centered behavioral treatment. The IT organization supports a total of 170 end users with four crosstrained staff members including the Director. 70 percent of the end users have laptops and are continuously moving between clinic and office locations. Their current IT budget is less then $250,000 per year of which 30 percent is directed to security tools. The large mobile work force presents the biggest security risk in the control of the endpoint. Expects to save more than $24,000 by deploying SEP The centralized management tools will give them greater access and control of users in remote locations. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 42 42

100 The Alchemy Solutions Group, Inc All Rights Reserved. Behavioral Healthcare Organization Ranks Greatest Areas of Data Exposure Total Operational and Economic Impact 43

101 Conclusions The SEP 11.0 solution will change the game for IT Security Operations globally: After 150 hours of interviews, technologies that are comprehensive enough to address the unique complexities of endpoint security have not been commercially available until now. SEP 11.0 will eliminate up to 75% to 100% of the mundane and redundant processes required to manage IT security solutions at the end point. Independent of the number of end users and remote support locations, the operating efficiencies and subsequent savings made available to IT organizations are significant. The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 44 44

102 The Alchemy Solutions Group, Inc All Rights Reserved. Conclusions An estimated $11.6M over the next two years for the 8 accounts that participated in the SEP 11.0 beta Efficiently executing IT Security best practices on a global level at the end point will make a positive economic and operational impact for both the end user and compliance communities. Adopting SEP 11.0 with enable organizational changes and the streamlining for IT security organizations that have organized themselves around point solutions without the benefit of the single management console. Total Operational and Economic Impact 45

103 Conclusions Based on four years of VDR research in the technology community, SEP 11.0 is one of those rare and unique technologies that will have an immediate economic and operational impact on the IT organizations at large Despite product quality issues, the customers who participated in the Hamlet VDR Research were largely overwhelmed by the utilities available in this product and the direct impact those functions will have on reducing operating cost and improving overall asset utilization The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact 46 46

104 The Alchemy Solutions Group, Inc All Rights Reserved. Total Operational and Economic Impact (TOEI) Analysis Thank You! Research and Analysis Conducted by: Sponsored by: Total Operational and Economic Impact 47