The document discusses information and identity protection solutions from Symantec. It outlines the key threats to data security, such as data breaches, non-compliance, and external attacks. It then describes Symantec's information-centric security approach and solutions portfolio, which includes tools for identity management, data awareness, and data protection through encryption and data loss prevention.

1. Information & Identity Protection
Data Loss Prevention, Encryption, User Authentication
Information & Identity Protection Overview 1

2. Agenda
1 People and Information-Centric Security
2 Symantec’s Information & Identity Protection Suite
3 Next Steps
Information & Identity Protection Overview 2

3. Data Breaches are Top of Mind
Insiders and Partners
• Employees and partners stealing customer data and IP
• 68% of breaches are caused by user negligence and system
glitches
Compliance
• Breach notification and encryption enforcement laws are
pervasive and now have real costs
• Average cost of a data breach is up to $7.2 million
External Threats
• Lead to the most expensive cost per record breached: $318
• Attackers are profit driven or politically motivated
Information & Identity Protection Overview 3

4. Evolving to Information-Centric Security
System- Information- People &
Centric Centric Information-
Centric
NEW BUSINESS TRENDS NEW THREATS
• Collaborative apps and social • WikiLeaks
media • Hacker Collectives
• Information explosion • LulzSec
• Virtual infrastructure and cloud • Anonymous
• Mobile workforce • State-sponsored, targeted attacks
Information & Identity Protection Overview 4

5. As companies focus on securing their
data, security professionals increasingly
recognize that access control and information
management are key components of data
security. Proper management and control of user
accounts, access permissions, and privileges is
one of the most effective avenues to ensuring
that data doesn’t walk out the door. Often, you
Khalid Kark must demonstrate controls around segregation
CISO Advisor, Forrester of duties, privileged access, and stronger
authentication for Internet-facing applications to
meet regulatory requirements.
Information & Identity Protection Overview 5

6. Key Components of Information-Centric Security
• Where is the sensitive data?
AWARENESS
• How is it being used?
IDENTITY • Who should have access to sensitive data?
• How to enforce data policies?
PROTECTION
• How to prevent breach?
Information & Identity Protection Overview 6

7. Reducing Risk with Information and Identity Protection
IDENTITY AWARENESS PROTECTION
Authentication DLP Encryption
Passwords Network Email
+
RISK
Heuristics +
Endpoint Endpoint
Two Factor
+ +
Biometric Storage Storage
Information & Identity Protection Overview 7

8. Information & Identity Protection Solution Portfolio
Map
Storage DLP Network DLP Endpoint DLP
• Where is the sensitive data?
AWARENESS
• How is it being used?
User Authentication
IDENTITY • Who should have access to that data?
Behavior Two-Factor PKI
Shared Storage Email Endpoint
• Encryption
How to enforce data policies?
Encryption Encryption
PROTECTION
• How to prevent breach?
Information & Identity Protection Overview 8

9. Information & Identity Protection
Solutions
Information & Identity Protection Overview 9

10. Symantec User Authentication Products
Risk-Based Tokens & Mobile Certificate
• Machine and • Cloud based
configuration • Multiple form factors infrastructure
registered
• Over 700 handsets • Certificates for
• Risk score determined supported devices and people
by machine, access
pattern
Symantec™ Management Platform
Symantec™ VIP/PKI Authentication Services
Information & Identity Protection Overview 10

11. Symantec Encryption Products
Storage Endpoint Email
• PGP™ • PGP™ Whole Disk
• PGP™ Gateway Email
NetShareEncryption Encryption
Encryption
• PGP™ Command Line • Symantec Endpoint
• PGP™ BlackBerry/iOS
Encryption Encryption™
Encryption
Removable Storage
• PGP™ Desktop Email
Encryption
Symantec™ Management Platform
PGP™ Universal Server
Information & Identity Protection Overview 11

12. Symantec Data Loss Prevention Products
Storage Endpoint Network
• Symantec™ • Symantec™ • Symantec™
Data Loss Data Loss Data Loss
PreventionNetwork PreventionEndpoint PreventionNetwork
Discover Discover Monitor
• Symantec™ • Symantec™ • Symantec™
Data Loss Prevention Data Loss Prevention Data Loss Prevention
Data Insight Endpoint Prevent Network Prevent
• Symantec™
Data Loss Prevention
Network Protect
Symantec™ Management Platform
Symantec™ Data Loss Prevention Enforce Platform
Information & Identity Protection Overview 12

13. Defense-In-Depth: Encryption + Data Loss Prevention
Network DLP / Email Gateway Encryption
• Automatically encrypt emails containing sensitive data
• Notify employees in real time/context about encryption policies and tools
Storage DLP / Shared Storage Encryption
• Discover where confidential data files are stored and automatically apply
encryption
• Ease the burden to IT staff with near transparence to users
Endpoint DLP / Endpoint Encryption
• Target high risk users by discovering what laptops contain sensitive data
• Protect AND enable the business by targeting encryption efforts to
sensitive data moving to USB devices
Information & Identity Protection Overview 13

14. The Symantec Advantage
Integrated Flexible User
Broad DLP
Encryption Authentication
Protects data across Identifies sensitive Strong authentication
laptops, mobile devices, information requiring for people and their
servers, and email protection across devices
communications endpoints, network, and
storage
Information & Identity Protection Overview 14

15. Thank you!
For more information, download:
Whitepaper: Data Protection Strategies
Copyright © 2011 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in
the U.S. and other countries. Other names may be trademarks of their respective owners.
This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or
implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.
Information & Identity Protection Overview 15