Making Information Security Real: RSA & EMC Drive Business Acceleration through Information-Centric Security
Share:
o Initiatives Announced at RSA® Conference 2007 Focus on Securing Data - and Access to Data - Wherever it Resides
o Agreement to acquire Valyd Software Private Ltd., a leading file and database encryption innovator, signals major expansion of RSA's enterprise data protection offering
SAN FRANCISCO, Feb. 6 -- RSA® CONFERENCE 2007 -- RSA, The Security Division of EMC (NYSE:EMC), today announced a series of new initiatives and products designed to make information security a reality for organizations worldwide, and help them solve their most sensitive and complex security challenges.
The announcements include the integration of EMC's and RSA's flagship products -- the Symmetrix® DMX-3 enterprise storage platform with RSA SecurID® two-factor authentication -- and a definitive agreement to acquire Hyderabad, India-based Valyd Software Private Ltd. as part of a major expansion of RSA's enterprise data protection (EDP) strategy designed to effectively secure information wherever it resides.
"For too long, information security has been an embarrassing misnomer: despite billions of dollars of investment, data breaches are not slowing down and four out of five organizations admit to having little confidence in the security of their information," said Art Coviello, EVP at EMC Corporation and President at RSA, The Security Division of EMC. "It is time to re-focus information security -- away from the perimeter and onto the information itself -- in order to provide customers with the confidence that their assets, brands and end-users are protected and to free them up to realize new business possibilities."
"Security thinking needs to catch-up to the reality that corporate and customer data is dynamic, and forever on the move both inside and outside the network. This negates the capabilities and efficacy of static, traditional gateway-based approaches and can lead to various points of vulnerability and exposure," commented Jon Oltsik, Senior Analyst, Information Security at Enterprise Strategy Group. "The rising tide of global regulatory compliance is driving what will soon become a fundamental tenet of good corporate citizenship: building security into the information infrastructure from the outset, so that it protects data wherever it is and whoever is accessing it."
The initiatives announced today will help enable customers to gain the necessary level of confidence in the security of their critical assets. Protecting information is one of the core elements of EMC's information infrastructure strategy, and RSA's information-centric approach -- which binds security directly to information and the people who need it -- supports the strategy through the delivery of end-to-end protection.
Information-centric security includes the following key elements:
1. Secure the information
Preserve the confidentiality and integrity of critical business
information wherever it resides
2. Secure access to the information for
a. Your employees
Enable secure access to key corporate resources - anytime, anywhere
b. Your customers
Offer self-service channels, prevent fraud, and enhance consumer
confidence
c. Your partners
Open internal systems to ease collaboration with trusted partners
3. Manage the information for compliance & security audits
Achieve compliance with security policy and regulations
New initiatives and solutions include:
RSA-enabled security integrated with EMC Symmetrix DMX-3 storage system
EMC and RSA today unveiled new security features that distinguish the market-leading EMC® Symmetrix DMX-3 enterprise storage platform as the most secure high-end storage array in the industry. Integrating advanced technology from its RSA division, EMC is introducing stronger authentication, authorization and audit capabilities to its enterprise storage portfolio to further secure the overall foundation of customers' information infrastructures.
EMC & RSA expand growing information-centric security services portfolio
The company announced that it is expanding its portfolio of information- centric services with three new security services designed to accomplish the following: help customers classify their data according to business risk; maintain confidentiality and privacy of sensitive corporate data; and cost- effectively manage security-related information for compliance and security audits.
o Classification for Information Security: is an RSA consulting service
that is designed to classify levels of sensitive information in a
customer environment. This consulting service aligns information based
on different security sensitivities at different stages of its
lifecycle, helps customers achieve predictable handling of information
based on security requirements, and avoids the expense of
overprotecting information that is not sensitive
o Design and Implementation for Storage Encryption: is a service
designed to ensure that a customer has an end-to-end data-encryption
solution for adequately securing data in a tape backup, on a Fibre
Channel-based storage array or in an IP-network environment. With
encryption appliances from leading security partners, RSA's Design and
Implementation for Storage Encryption will deliver an appliance-based
encryption solution, with key management integrated into a customer's
storage environment
o Design and Implementation for Security Information Management: is a
service designed to provide a consolidated collection, management,
reporting, analysis and storage system for security-related events and
data. This service integrates appliances from the RSA enVision(TM)
product line with EMC Centera® and EMC Celerra® networked storage
solutions into customer environments, helping to more cost-effectively
manage security information and events to assure security policy
effectiveness and ease the burden of compliance
Enterprise data protection technology expansion through acquisition of Valyd and new strategic partnerships
RSA announced today a major expansion of its EDP strategy designed to secure information and protect data effectively, wherever it resides. Core to this development is the definitive agreement to acquire Hyderabad, India-based Valyd for an undisclosed sum, that will - upon the acquisition's close - immediately provide RSA's customers with new solutions for effective enterprise-wide encryption management, including:
o RSA® Database Security Manager, designed to deliver highly secure
data protection for a variety of database management systems
o RSA® File Security Manager, designed to provide protection of
sensitive data maintained in files
In addition, RSA has established strategic partnerships with CipherOptics, Decru and NeoScale Systems to bring these best-of-breed encryption solutions to market with RSA and create common standards for key exchange and management across all encryption endpoints. RSA has also established a strategic technology alliance with Epicor|CRS which will provide the first RSA key management-enabled point-of-sale solution to retailers. The CRS RetailStore(TM) solution will be integrated with RSA(SM) Key Manager software, a stand-alone key lifecycle management offering that enables businesses to effectively control encryption keys by providing centralized, secure and simplified administration for all applications.
Continuing the drive towards ubiquitous stronger authentication (as announced on February 5th)
RSA has announced new and expanded strategic partnerships that extend its drive to bring confidence, flexibility and choice in strong authentication to consumers, enterprises and government organizations. The strategic partnerships accelerate RSA's initiative to enable secure access to information -- whether by customers, partners or employees -- and foster ubiquitous stronger authentication by embedding the industry-leading RSA SecurID algorithm into everyday devices. RSA has formed new technology partnerships with biometrics technology vendors MXI Security, Privaris and UPEK, Inc., and is pleased to announce new technology and partnership developments -- and plans for additional, future integration -- with existing partners RedCannon, Research In Motion and SanDisk.
Wachovia Selects RSA to Accelerate its Business through Strengthened Online Security (as announced on February 5th)
As part of its comprehensive Security Plus suite of services, Wachovia has deployed the RSA® Adaptive Authentication solution and joined the RSA eFraudNetwork(SM) community to further protect its customers, their funds and personal information when banking online -- while imposing minimal impact on the online user-experience.
RSA Solutions Enable EDS To Solve Business Problems Securely (as announced on January 29th)
EDS, a leading global technology services company, has been successfully using a suite of RSA solutions, including the RSA enVision solution acquired from Network Intelligence, with several EDS clients. EDS is also using the solution to monitor its own devices and network. Deploying the RSA enVision solution internally to help with SAS 70 compliance has given EDS the ability to develop repeatable processes and templates for compliance reporting under complex environments that can now be rolled out to customers worldwide to help meet multiple rules, regulations, guidelines and standards including Sarbanes Oxley, Health Insurance Portability and Accountability Act (HIPAA), Gramm- Leach-Bliley Act (GLBA), Payment Card Industry (PCI) and North American Electric Reliability Council (NERC).
More information on RSA's announcements and related initiatives may be found online at rsa.com/rsaconference2007/. In addition, RSA's information-centric solutions will be featured at Booth #1316 at RSA Conference 2007, February 5-9, 2007, at the Moscone Center in San Francisco.
About RSA
RSA, The Security Division of EMC, is the premier provider of security solutions for business acceleration, helping the world's leading organizations succeed by solving their most complex and sensitive security challenges. RSA's information-centric approach to security guards the integrity and confidentiality of information throughout its lifecycle - no matter where it moves, who accesses it or how it is used.
RSA offers industry-leading solutions in identity assurance & access control, encryption & key management, compliance & security information management and fraud protection. These solutions bring trust to millions of user identities, the transactions that they perform, and the data that is generated. For more information, please visit www.RSA.com and www.EMC.com
CONTACT:
Matt Buckley
RSA, The Security Division of EMC
(781) 515-6212
mbuckley@rsa.com
Sandra Heikkinen
OutCast Communications
(212) 905-6040
rsa@outcastpr.com
Source: EMC Corporation
Web site: http://rsa.com/rsaconference2007
http://www.rsa.com/
http://www.emc.com/
