Symantec Data Loss Prevention. Las tendencias mundiales nos muestran que el mayor porcentaje de perdida y robo de datos responde a la falta de visibilidad y el error en el manejo de los mismos. Conozca como prevenirse.

1. Symantec Data Loss Prevention Las tendencias mundiales nos muestran que el mayor porcentaje de perdida y robo de datos responde a la falta de visibilidad y el error en el manejo de los mismos. Conozca como prevenirse. Ariel Beliera, Account Systems EngineerFrancisco Della Paolera, Corporate Business Manager Symantec South of Latin-American Region Vontu: Now Part of Symantec

2. 2 Key Questions Facing Today’s CISO What are the challenges? What is Data Loss Prevention (DLP)? Why Symantec DLP and how does it work? Why customers choose Symantec DLP?

3. 3 CORPORATIONSWITHOUT WALLS DATA EXPLOSION THE ROLEOF SECURITY The Vanishing Perimeter The Office is “Anywhere” Outsourcing and Offshoring Data is Everywhere Structured Data, Unstructured Content IP, Customer, and Classified Data Risk and Compliance Business Enabler Limited Budget Security for a Wide Open World CONFIDENTIAL

4. Do You Know… How best to prevent its loss? How is it being used? Where is your confidential data? 4

5. What is Data Loss Prevention? DISCOVER PROTECT MONITOR DATA LOSS PREVENTION (DLP) 5

7. Create inventory of sensitive data

8. Manage data clean up

9. Understand how data is being used

10. Understand content and context

11. Gain enterprise-wide visibility

12. Gain visibility into policy violations

13. Proactively secure data

15. Define unified policy across enterprise

16. Detect content accurately6

18. Run scan to find sensitive data on network & endpoint data

19. Inspect data being sent

20. Monitor network & endpoint events

21. Block, remove or encrypt

22. Quarantine or copy files

24. How Is Symantec DLP Different? 8

26. High performance, parallel scans

27. Flexible deployment options

28. Targeted scanning

29. Automatic identification of data owners

30. Systematic re-scanning

31. Broadest file server coverage

32. Distributed laptops and desktops

33. All SQL databases natively

34. Major document repositories

35. Key email servers

36. Internal and external web sites9

38. Maximum visibility

39. Continuous coverage

40. Highest detection accuracy

41. Monitor online and offline users

42. Monitor unmanaged devices

43. Email, Web, IM

44. FTP, PTP, TCP

45. Removable Media

46. Print/Fax

47. Copy/Paste10

49. Active blocking at the endpoint

50. Conditional encryption

51. Selective web content removal

52. Automatically quarantine, copy, remove data in violation of policy

53. Automated encryption

54. Broadest scan coverage

55. Real-time notification

56. On-screen pop-ups

58. Pre-defined and customizable policies

59. Over 20 response actions

60. Automatic incident prioritization

61. 5-second incident triage

62. Trend and risk reporting

63. Analyze content and context

64. Structured data in databases and tabular format

65. Unstructured content in documents

66. Describe content using keywords and lexicons12

68. HIPAA Compliance

69. Automate protection

70. Intellectual Property

71. Competitive advantage

72. Detection technology

73. Financial & Customer data

74. Protect brand & customers

76. Symantec DLP Architecture MTA or Proxy NETWORKPROTECT DISCOVER STORAGE NETWORKPREVENT ENFORCEPLATFORM MONITOR NETWORK MANAGEMENTPLATFORM ENDPOINTPREVENT SPAN Port or Tap DISCOVER ENDPOINT DMZ SECURED CORPORATE LAN Disconnected 15

77. Continuous Risk Reduction Baseline 1000 Remediation 800 Notification 600 Incidents Per Week 400 Prevention 200 0 Risk Reduction Over Time 16

78. Gartner Magic Quadrant for Content-Aware Data Loss Prevention Symantec positioned in the leaders quadrant in the Gartner Magic Quadrant for Content-Aware Data Loss Prevention, 2009 This Magic Quadrant graphic was published by Gartner, Inc. as part of a larger research note and should be evaluated in the context of the entire report. The Gartner report is available upon request from Symantec. The Magic Quadrant is copyrighted June 2009 by Gartner, Inc. and is reused with permission. The Magic Quadrant is a graphical representation of a marketplace at and for a specific time period. It depicts Gartner’s analysis of how certain vendors measure against criteria for that marketplace, as defined by Gartner. Gartner does not endorse any vendor, product or service depicted in the Magic Quadrant, and does not advise technology users to select only those vendors placed in the “Leaders” quadrant. The Magic Quadrant is intended solely as a research tool, and is not meant to be a specific guide to action. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. Source: Magic Quadrant for Content-Aware Data Loss Prevention; by Eric Ouellet, Paul E. Proctor; June 22, 2009 17

79. Why Symantec DLP is the Safe Choice Measurable Risk Reduction Complete Coverage Only Unified Data Loss Prevention Solution Global Market Leader 18

80. Next Steps Evaluation Workshop & Demo Evaluation Customer Reference Checks 19

81. Thank You! Ariel Beliera Ariel_Beliera@symantec.com +5491167151656 © 2008 Symantec Corporation. All rights reserved. THIS DOCUMENT IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY AND IS NOT INTENDED AS ADVERTISING. ALL WARRANTIES RELATING TO THE INFORMATION IN THIS DOCUMENT, EITHER EXPRESS OR IMPLIED, ARE DISCLAIMED TO THE MAXIMUM EXTENT ALLOWED BY LAW. THE INFORMATION IN THIS DOCUMENT IS SUBJECT TO CHANGE WITHOUT NOTICE. 20

82. Appendix 21

83. The Shift in Data Security Threat Insider vs. The Hacker Inadvertent vs. Malicious Breaches since 2005: 1380 and counting > 318M records 96% of leaks are due to faulty processes or oversight 1% malicious Other 1% manager approved 50% of leakage is due to business process 46% of leakage is due to employee oversight Hacker 48% Insider 52% Data compiled from industry sources including EPIC.org and PerkinsCoie.com. Source: Symantec Data Loss Prevention Risk Assessment findings. 22 Symantec Confidential - Do Not Copy or Distribute

84. Impact of Data Loss £47 per Consumer Record in UK 318 Million Records Breached Since 2005 $600 Billion IP Theft a Year Globally Cross Industry…. 23 Symantec Confidential - Do Not Copy or Distribute

85. 318 million personal records have been exposed by data breaches since 20051 85% of security execs claimed at least one reportable security breach involving data loss in the last year2 52% of Chief Information Security Officers believe data leakage to be a top driver of their security spending3 65% increase in spending on Data Loss Prevention since 06, as the number one most promising new security technology4 Top of Mind for Chief Information Security Officers 24 Growing Concern

86. What is Data Loss Prevention? How best to prevent its loss? How is it being used? Where is your confidential data? DISCOVER PROTECT MONITOR DATA LOSS PREVENTION (DLP) 25

87. Data Loss Prevention Drivers Customer Data Social Security Numbers Credit Card Numbers Protected Health Info Corporate Data Financials Mergers and Acquisitions Employee Data Intellectual Property Source Code Design Documents Pricing Confidential Data Types 1:400 messages contains confidential data 1:50 network files is wrongly exposed The Risk The Risk 4:5 companies lost dataon laptops 1:2 companies lost dataon USB drives 26

88. Symantec Data Loss Prevention PROTECT MANAGE DISCOVER MONITOR Endpoint Network Storage Symantec Data Loss Prevention Endpoint Discover Symantec Data Loss Prevention Network Monitor Symantec Data Loss Prevention Network Monitor Symantec Data Loss Prevention Endpoint Discover Symantec Data Loss Prevention Network Discover Symantec Data Loss Prevention Network Discover Symantec Data Loss Prevention Network Protect Symantec Data Loss Prevention Endpoint Prevent Symantec Data Loss Prevention Network Prevent Symantec Data Loss Prevention Network Prevent Symantec Data Loss Prevention Network Protect Symantec Data Loss Prevention Endpoint Prevent Symantec Data Loss Prevention Endpoint Prevent Management Platform Symantec Data Loss Prevention Enforce Platform

89. Network Symantec Data Loss Prevention Network Monitor Symantec Data Loss Prevention Network Prevent Symantec Data Loss Prevention Endpoint Storage Symantec Data Loss Prevention Endpoint Discover Symantec Data Loss Prevention Network Discover Symantec Data Loss Prevention Endpoint Prevent Symantec Data Loss Prevention Network Protect Management Platform Symantec Data Loss Prevention Enforce Platform

90. DLP Complements Symantec Solutions Symantec Data Loss Prevention Complementary Symantec Solutions Network Symantec DLP Network Prevent Symantec DLP Network Monitor Symantec Brightmail Gateway* Symantec IM Manager Endpoint Symantec DLP Endpoint Prevent Symantec DLP Endpoint Discover Symantec Management Console Symantec Endpoint Encryption Symantec Network Acess Control Symantec Endpoint Protection Storage Symantec Backup Exec System Recovery Symantec DLP Network Protect Symantec DLPNetwork Discover SymantecVeritas Netbackup SymantecEnterprise Vault SymantecBackup Exec ManagementPlatform Symantec DLP Enforce Platform Symantec Control Compliance Suite Symantec Security InformationManager** Symantec Enterprise Security Manager 29 *Formerly known as Symantec Mail Security 8300 ** In the process of being incorporated into Symantec Control Compliance Suite

92. Partners

93. Contractors

94. Country

95. Department

96. Branch office

97. European

98. Asian

99. Document type

100. Network protocol

101. Encrypted

102. Billions of records

103. Millions of documents

104. <100ms latency

105. Gb+ throughput

106. Scan TBs per day

107. 1000’s of endpoints

108. PHI

109. PII

110. Inventory

111. Design documents

112. Source code

113. Media files

114. Financial results

115. Credit Cards

116. SSNs

117. Dictionaries

118. KeywordsLocation Unstructured + + Language Described Storage Container 30

119. Symantec DLP TrueMatch™ Detection IDMIndexed Document Matching EDMExact Data Matching DCMDescribed Content Matching Structured DataCustomer Data Unstructured DataIntellectual Property Described Data • Non-indexable data• Lexicons• Data identifiers • Designs/Source/Financials• Derivative & passage match• Near perfect accuracy • Customer/Employee/Pricing • Partial row matching • Near perfect accuracy • 5M+ docs per server • 300M+ rows per server 31 31

120. Complete Coverage: Discover Find data wherever it is stored File servers Distributed machines Document and email repositories Web content and applications Databases Create inventory of sensitive data Scheduled scanning Incremental scanning “Out of compliance” scan mode Manage data clean up Incident match count File details (date, owner) Access control information Data owner look up 32 32 32

121. Complete Coverage: Monitor Understand how data is being used Network protocol coverage Endpoint event coverage Content- and context-aware detection Automated sender/manager notification Monitor on the network Standard hardware Signature-based protocol recognition Gigabit monitoring without “sampling” or dropped packets Queue incidents Monitor at the endpoint Online and offline Unmanaged devices and OSes On-screen pop up notification

122. Complete Coverage: Protect Proactively secure stored data Relocate data to an encrypted location Automatically quarantine, copy, or remove data Broadest scan target coverage Prevent confidential data loss Real-time blocking on network and endpoint Conditionally quarantine/route emails for encryption Selectively remove content from web postings Certified ICAP integration with leading web proxies Support for all SMTP compliant MTAs Enforce confidential data policies Real-time email notifications Seamless interaction with Web 2.0 sites On-screen pop-up notification on the endpoint “Ransom note” in place of relocated stored data 34

123. Complete Coverage: Manage Universal DLP Policy “Define once, enforce everywhere” 60+ pre-built policy templates Custom detection and response rules Accurate TrueMatch Detection Content and context, enterprise scale Comprehensive EDM, IDM, and DCM Automated Remediation and Workflow Automated action and response “5 second incident triage” “One-click response” Comprehensive Reporting 40+ pre-configured reports Business unit risk assessment Scalable and Secure Management Distributed architecture with high-availability Advanced security design 35 35 35

124. Symantec DLP Success Model Focus Target High-Risk Data and Identify Exposure Communicate Manage Risk, Deliver Results Design Prepare Data Loss Policy, Remediation and Risk Reduction Blueprint ACCUMULATED KNOWLEDGE Implement Protect and Prevent: Engage Users

125. Successful DLP Workflow 37

127. Most experts dedicated to DLP

128. 30% of the FORTUNE 100

129. 9 of the top 10 commercial and universal banks

130. 9 of the top 10 insurance companies

131. 7 of the top 10 healthcare providers

132. 4 of the top 5 credit card companies