Guardium, Inc. 230 Third Avenue Waltham, MA 02451 USA www.guardium.com Real-Time Solutions for Safeguarding Databases

Agenda Guardium overview Database activity monitoring Importance It’s all about compliance…or is it? Problems Guardium solves SQL Guard overview Customer Case Study Conclusion

Guardium overview

Database activity monitoring

Importance

It’s all about compliance…or is it?

Problems Guardium solves

SQL Guard overview

Customer Case Study

Conclusion

Corporate Background Founded in 2002 Rapid customer acceptance Top 5 U.S. bank Top 10 European financial institution Global consumer products manufacturer with 100,000+ employees Top 5 independent oil & gas company in N.A. with $10B revenues Top 5 individual life insurance direct provider Telecommunications, pharmaceuticals, media, retail, government… Member of IBM’s prestigious Data Governance Council Partnerships: Oracle, IBM, Microsoft, Sybase, EMC, HP Recently announced investment by Cisco Systems and other investors

Founded in 2002

Rapid customer acceptance

Top 5 U.S. bank

Top 10 European financial institution

Global consumer products manufacturer with 100,000+ employees

Top 5 independent oil & gas company in N.A. with $10B revenues

Top 5 individual life insurance direct provider

Telecommunications, pharmaceuticals, media, retail, government…

Member of IBM’s prestigious Data Governance Council

Partnerships: Oracle, IBM, Microsoft, Sybase, EMC, HP

Recently announced investment by Cisco Systems and other investors

Real-Time, Network-Based Database Security Protects sensitive information Enforces system access & change control policies Automates compliance monitoring & reporting

SQL Guard Networks Applications Databases

SQL Guard Networks Applications Databases Client IP Client host name Client OS MAC TTL Origin Failed logins Server IP Server port Server name Session SQL patterns Network protocol Server OS Timestamp Source programs ALL SQL commands Actual SQL Fields Objects Verbs DDL DML DB user name DB version DB type DB protocol Origin DB errors etc. Automatically filters and focuses

Scalability for Distributed Environments

A modular suite of integrated security applications that makes the impossible practical : SQL Guard Security Suite All without turning on database audit logging! SQL HealthGuard ™ SQL PolicyGuard ™ SQL AuditGuard ™

A modular suite of integrated security applications that makes the impossible practical :

Case Study: Improving DB Security for SOX WHO: Leading North American energy producer with $10B revenue & 6,000 employees NEED: Quickly improve security of financial/ERP databases for SOX compliance ENVIRONMENT: Large number of databases: Oracle, MS-SQL Server Running on Sun Solaris & MS Windows servers RESULTS: Immediate proactive response to security incidents Passing internal and external SOX audits “… interactions with the SOX auditors were greatly simplified by using a purpose-built solution for database activity monitoring and auditing.” Enhanced change controls: Real-time alerting whenever changes to specific tables are made; identify all users accessing database via application that only provides generic ID Optimized ERP performance by identifying unresolved database errors ROI: “Solid financial return” ROI = 55% and payback period = 11 months Commissioned case study

WHO: Leading North American energy producer with $10B revenue & 6,000 employees

NEED: Quickly improve security of financial/ERP databases for SOX compliance

ENVIRONMENT: Large number of databases: Oracle, MS-SQL Server

Running on Sun Solaris & MS Windows servers

RESULTS: Immediate proactive response to security incidents

Passing internal and external SOX audits

“… interactions with the SOX auditors were greatly simplified by using a purpose-built solution for database activity monitoring and auditing.”

Enhanced change controls: Real-time alerting whenever changes to specific tables are made; identify all users accessing database via application that only provides generic ID

Optimized ERP performance by identifying unresolved database errors

ROI: “Solid financial return”

ROI = 55% and payback period = 11 months

Guardium, Inc. 230 Third Avenue Waltham, MA 02451 USA T: +1.781.487.9400 F: +1.781.487.7900 www.guardium.com Contact Us: [email_address]