Software provides automated discovery of sensitive data.

Tizor Systems Jun 30, 2008

Press Release Summary:

Offering database monitoring solution, Mantra 6 finds and classifies databases and data within them to provide IT, security, and compliance professionals with visibility into location of data assets, type of data assets, and potential risks. Session termination allows companies to combine database monitoring and auditing with preventative controls for stopping unauthorized activity in real-time. Using drag and drop policy creation, enterprises can address various regulations and standards.

Original Press Release:

Tizor Announces Mantra 6 for Automated Discovery of Sensitive Data and Prevention of Unauthorized Database Activity

--Database Monitoring Solution Delivers Fastest Time to Value, Simplifies Data Security and Compliance--

Maynard, MA - June, 17, 2008 - Tizor Systems, a leading provider of enterprise database monitoring and protection solutions, today announced Mantra 6 with updated features for data discovery, database security and ease of use. Mantra 6 features include automated discovery for finding databases and specific classes of sensitive data; session termination for blocking unauthorized or suspicious database activity; and drag and drop policy creation for the fastest and easiest implementation of data auditing for risk mitigation.

"Many organizations are realizing that they don't know what data they have, where it is stored, and where it is processed. Successful organizations take a top-down approach, rather than creating a meticulous inventory of all the data within their environment. They identify the very specific pieces of data that can directly affect revenues or the business processes that handle very sensitive data, protect them appropriately, and then use templates and the lessons learned to classify and handle other data within the organization." Making Data Centric Security Real, February 5, 2008 by Paul Stamp, Analyst, Forrester Research

Most companies do not have a complete inventory of their databases or the types of data that exist within them. This lack of visibility creates risks that could lead to insider abuse, data breaches or failure to pass a compliance audit. Mantra 6 automates discovery tasks that previously took months and required a highly manual effort. It quickly finds and classifies databases and the data within them to provide IT, security and compliance professionals with unprecedented visibility into the location of data assets, type of data assets in use, and potential risks to those assets. Mantra's new discovery features are critical for companies that need to find credit card data for the Payment Card Industry (PCI) Data Security Standard compliance, account information for Gramm-Leach-Bliley Act (GLBA) compliance, or user information for personally identifiable or protected health information (PII/PHI) projects. The detailed information that Discovery provides can dramatically incre ase the effectiveness of an organization's security and compliance programs.

Mantra 6 also adds session termination to allow companies to combine database monitoring and auditing with preventative controls for stopping unauthorized activity in real time. Mantra's TAP, a lightweight, host-based agent for monitoring network and local database activity, has been enhanced to also prevent or block activity in real time. This enables companies to monitor and prevent unauthorized privileged user activity such as accessing sensitive customer data, granting privileges to unauthorized users or creating new tables or users. Unauthorized or inappropriate access can be prevented both over the network and by users going directly to the database console. The Mantra TAP is a completely transparent solution that does not require any changes to be made to the database. It also ensures separation of duties and cannot be manipulated or changed by DBA's or developers. With these new features, companies can now use Mantra as a preventative control to stop unauthorized activity
that could lead to data leakage, identity theft or fraud.

"Tizor's solutions are specifically designed to end the long, painful, and costly process many companies have experienced deploying enterprise security solutions," stated Joel Rosen, president and CEO of Tizor. "We have now extended that same philosophy to three of the most fundamental questions companies face around data security and data-oriented compliance: where is my sensitive data; who is accessing it; and how is it being used today? Companies need an easy-to-deploy but rigorous way to get the macro picture in order to focus their compliance and security efforts and that's just what Mantra 6.0 does."

About Mantra 6

Mantra 6 enables large and mid-sized enterprises to regain control of critical data, IT budgets and personnel resources. The only purpose-built solution for high-performance database monitoring and auditing, Mantra's architecture balances technically sophisticated analytical capabilities with an intuitive user interface and easy to use policy language.

Mantra's English-like policy language allows technical or non-technical users to create detailed compliance and security policies without the long learning curve typically associated with these tools. Using drag and drop policy creation along with Mantra's pre-built compliance templates, enterprises can address regulations and standards, such as SOX, GLBA, FFIEC and PCI in less time, with fewer people and at a lower total cost of ownership.

Mantra's innovations include:

o Automated, best-in-class data discovery - discovers and classifies data at rest inside of databases or as the data is moving across the network.

o Non-inline Blocking - provides policy-driven session termination without becoming a point of failure in your network.

o Drag and Drop policy creation and policy wizards - allows for the rapid creation and implementation of more security and compliance policies.

o Behavioral FingerprintingÂ® - automatically identifies suspicious behavior in real time, eliminating the need for complex baseline policies which generate volumes of false positives.

o Content Scanning - locates any type of sensitive or regulated data and includes in-the-box scanning policies for locating cardholder numbers from all of the major credit cards.

o Monitors encrypted traffic - first product to monitor encrypted traffic to the database supporting multiple encryption methods including IPSEC, SSL or SSH.

o Unstructured data - first product to provide unified auditing and monitoring of file shares.

The Forrester Wave(TM): Enterprise Database Auditing and Real-Time Protection, Q4 2007 states, "Tizor Systems is a Leader in the enterprise database auditing and real-time protection market because it provides strong support for alerting, audit and compliance reporting, performance, policy administration, the discovery of private data, integration with files and custom applications, auditing of structured and unstructured data, and end-to-end audit analysis." Noel Yuhanna, Forrester Research Principal Analyst, writes; "This broad support enables enterprises to implement a unified data auditing and protection solution across the enterprise."

Availability

Mantra 6 will be generally available on July 30, 2008.

About Tizor

Tizor provides the world's largest companies with the only enterprise database monitoring and protection solutions capable of monitoring, reporting and alerting on all critical data activity across the enterprise data center - databases, file servers and mainframe applications. Tizor's global enterprise customers include financial institutions, insurance companies, retailers, manufacturers, healthcare providers and airlines, among others. These companies rely on Tizor's Mantra to protect critical data assets, detect data breaches and provide data-related compliance, including SOX and PCI.

Headquartered in Maynard, Massachusetts, Tizor is a member of IBM's Data Governance Council. Visit Tizor's Website at www.tizor.com or data auditing blog at blog.tizor.com.