To the Designer Where We Need Your Help Slide 7 Can you provide a similar high-res image? Slide 15 Can you polish up the content so it s not an eye chart? Slide 21, 22, 23 Can you polish up the content so they re not eye charts? To Catch A Thief: Preventing the Next Fortune 500 Data Breach SYMANTEC VISION 2014 1
Outline Data breaches in 2014 and beyond Key trends in Information Protection CDI Symantec vision for Information Protection Symantec roadmap for DLP Hercules Call to action 2
The Future of DLP: 5 Trends Shaping Symantec s Roadmap and Strategy Mario Espinoza Sr. Director of Product Management, Symantec The Future of DLP: 5 Trends Shaping Symantec s Roadmap and Strategy 3
Breaches increased by 62% in 2013. Presentation Identifier Goes Here SYMANTEC VISION 2014 4
Bring Your Own Cloud 5
40% of employees download business data to mobile devices. Presentation Identifier Goes Here SYMANTEC VISION 2014 6
Malicious Insiders 7
Possibly use visuals from keynote here (Information Governance) Information Protection 8
As DLP deployments evolve from reactive protection to an advanced proactive-protection-based model, contextual information becomes a critical core component. Eric Ouellet Research VP, Gartner 9
Key Findings from Our Research The Problem Pain Points Orgs are looking to holistically manage information risk and insider threat using DLP, information governance, and access management E-mail, cloud, and mobile are major concerns Orgs want to improve how they run their DLP program Sensitive Data 1:7 admit to major data breach Most concerned about customer, employee, and partner data; financial data; and IP Top repositories of concern: Databases and cloud file sharing What They re Doing Today Many use a combination of tools to accomplish DLP Majority using or considering cloud Majority support BYOD while less than half still issue mobile phones The Future of DLP: 5 Trends Shaping Symantec s Roadmap and Strategy SYMANTEC VISION 2014 10
Our Mission for Information Protection Help enterprises protect their sensitive information from: Accidental disclosure Malicious expropriation Unauthorized access while managing user risk and enabling the business to adopt new technology platforms with confidence. The Future of DLP: 5 Trends Shaping Symantec s Roadmap and Strategy SYMANTEC VISION 2014
Our Vision Content Identity Information Protection Access Context 12
Information Protection: Beyond Preventing Data Loss Information Protection Data Loss Prevention Context-aware User risk analytics Information governance Access and entitlements management Continuous monitoring Identity & content-aware Cloud & mobile Ready for next-gen. datacenter New, bigger jobs Same job new IT landscape 13
Information Protection SaaS & cloud applications DLP Detection Policies Incident management Endpoint Network Storage Classification Classification Knows: Content Context User identity Data flow Reputation Device Id. & Access Mgmt. Information Protection Analytics Info. Fabric Storage repositories Identity repositories Knows: App. usage User identity User location Federate existing and new data sources Analytics for contextual awareness Continuous monitoring Console for business users Knows: Data classification Data usage Meta-data Ownership Data location 14
Roadmap: DLP and Information Protection 1H 2014 2H 2014 1H 2015 2H 2015 1H 2016 2H 2016 Hercules Enabling the Business End-user remediation portal Manageability & Coverage OS X agent Windows 8.1, Office 2013, & Android support Support for OWA & Outlook.com Improved agent management, scalability & health monitoring IPv6 monitoring Policy & Detection Policy & detection enhancements Downloadable policy details Simplification Single-box DLP Pegasus Cloud Cloud e-mail (Office 365) Cloud storage (Box, Zone, etc.) Manageability & Coverage Windows Store apps Native Chrome support Enhanced support for collaboration and file sharing apps. Policy & Detection Group-based policy management Simplification & Cost Reduction Advanced analytics for user risk Performance improvements for VDI environments Lyra & Beyond Cloud DLP for Salesforce.com Manageability & Coverage Full OS X agent support Policy & Detection Policy lifecycle management Detection performance enhancements OCR support Integrations Mobile Information Fabric Symantec.cloud Simplification & Cost Reduction Insider risk profiling 15
Coming Soon DLP 12.5 Hercules 16
Key Themes for Hercules Enabling the business Improved manageability and coverage Enhanced policy management and detection Simplication and cost reduction 17
Self-Service Portal Data Loss Prevention Access Governance What? Resource Selection Find sensitive data in DLP Pull into the portal for distribution Use Data Insight to scan resources for permissions/monitor usage Who? Ownership Assignment Configure Data Owner mapping Review/edit Ownership Assignment Configure Data Owner mapping Review/edit How? Sensitive Data Clean-up Configure/setup workflow(s) Review progress/status Automated sync with Enforce 18 Entitlements Review Configure/setup workflow(s) Review progress/status Approve/launch Data Insight actions The Future of DLP: 5 Trends Shaping Symantec s Roadmap and Strategy SYMANTEC VISION 2014 18
19 Self-Service Portal Supports Business Processes Overall Process & Components Resource Selection Ownership Assignment Portal Admin Workflow Definition Self-Service Portal Identify sensitive files and open shares that need input from the business to remediate Define ownership based on usage, nature of data, or custodianship Customize user communications and the portal user experience Define actions users can take and the timeframe to complete remediation Deploy the tool to engage users Monitor and measure progress InfoSec/GRC Data Owner/Data Custodian 19
Self-Service Portal Users remediate incidents for files that they own. The user is notified via email to remediate incidents. The notification indicates urgency to remediate by incident severity. 20
OS X Agent Benefits Discover sensitive data-at-rest residing on OS X systems Supports DCM detection Managed alongside Windows endpoints from the same console 21
Single Box DLP Officially support single-tier deployments Support Enforce, detection servers, and the database collocated on a single physical server Windows and Linux support Support simultaneous, multichannel detection, including Network Monitor, Network Prevent, Discover, and Endpoint Benefits Reduces the amount of infrastructure needed to deploy DLP development and test environments Suitable for branch office or small production deployments 22
Dozens of new features in DLP 12.5! Endpoint Enhanced scalability up to 30K agents per Endpoint server Dynamic agent configurations Agent health birds-eye view Expanded Endpoint events Exact match IDM OWA and Outlook.com support Hyperlinks in popups Enhanced browser support Office 2013 file type support Policy & Detection Downloadable policy details Reusable sender/recipient patterns New HIPAA policy templates CJK tokenization Multi-token EDM Platform IPv6 monitoring 23
Conclusion & Call to Action 24
Thank you! Mario Espinoza mario_espinoza@symantec.com (650) 863-5459 SYMANTEC PROPRIETARY/CONFIDENTIAL INTERNAL USE ONLY Copyright 2014 Symantec Corporation. All rights reserved. The Future of DLP: 5 Trends Shaping Symantec s Roadmap and Strategy 25
Information Protection DLP DLP DLP DLP Access points Laptop Mobile / BYOD Email SaaS/Web Gateways (purpose built) DLP DLP Universal policies Advanced Analytics Servers DLP Identity SSO 2FA Transparent Encryption 2 Factor Authentication Storage DLP Information Fabric 29 DLP and Information Protection Roadmap SYMANTEC VISION 2014 29
Information Fabric Policy NBU Enterprise Vault Unified governance policies Enforceable actions Policy Visibility 3 rd Party Apps Visibility DLP Information Map Clearwell Risk Mitigation Metadata Data Centre Security Metadata Fingerprint Classification Owner Usage Location Size C-Date M-Date A-Date Name Data Type Tags DLP and Information Protection Roadmap SYMANTEC VISION 2014 30
Information Fabric Presentation Identifier Goes Here SYMANTEC VISION 2014 31
Roadmap: DLP and Information Protection Enterprise DLP Information Protection 1Q 2014 2Q 2014 3Q 2014 4Q 2014 1H 2015 2H 2015 1H 2016 2H 2016 Enterprise DLP Hercules End-user remediation portal OS X agent Android support Policy and detection enhancements DLP agent management enhancements Single-server deployment Phoenix Simplify DLP Detection performance and enhancements (OCR, IDM, Endpoint keywords, Server DI) Customer Satisfaction AD group based policy management Policy versioning and rollback First class meta data detection Pegasus Cloud e-mail support (e.g. Office 365) Cloud storage scanning (Box, Zone, etc.) Advanced analytics for user risk Information Protection Phoenix Embeddable DLP detection engine DLP for mobile, identity, and cloud Scalability enhancements for DLP cloud Lyra Information Fabric integration DCS integration Encryption integration Case management (workflow) Policy authoring framework Regulatory data retention control Insider risk profiling DLP and Information Protection Roadmap SYMANTEC VISION 2014 32