Software offers total visibility electronic risk management.

Reconnex Corporation Feb 10, 2005

Press Release Summary:

Able to accurately identify and mitigate security threats originating from within enterprise, inSight platform simplifies task of electronic risk management. Integrated solution empowers non-technical users with actionable knowledge that lets them register, detect, remediate, and report electronic risks in real-time. Components include iController content registration appliance, iGuard content analyzer appliance, and e-Risk Module policy engines and reporting templates.

Original Press Release:

Reconnex Insight Platform First to Combine Real-Time Electronic Risk Reporting and Comprehensive Forensic Analysis for 'Total Visibility' Electronic Risk Management

Pre-Defined Policy Engines Define and Report Multiple Levels of Corporate Risk: Compliance Risks, Critical Information Security Risks, Corporate Governance Risks, and Competitive Risks to Intellectual Property

MOUNTAIN VIEW, Calif., Feb. 7 -- Radically simplifying the task of electronic risk management for Fortune 1000 corporations and large government agencies, Reconnex today announced its inSight platform, an integrated solution that can accurately identify and mitigate security threats originating from within an enterprise 20x faster than alternatives. Consisting of the iController content registration appliance, the iGuard content analyzer appliance, and e-Risk Module (ERM) policy engines and reporting templates, the inSight platform provides a meaningful context for electronic risk that, for the first time, empowers the non-technical user with knowledge that is actionable.

Beyond their legal and liability ramifications, electronic risks can quickly spiral into larger operational risk issues, including the loss of competitive advantage through the accidental or intentional disclosure of intellectual property. The inSight platform is the only solution to provide total visibility into internal risks, through its multi-faceted approach to electronic risk management:

-- Register any type of confidential information for accurate detection of breaches

-- Detect risks with high-speed content analysis and sophisticated policy engines for real-time alerting of policy violations

-- Remediate risks with state-of-the-art forensic capabilities, allowing "after-the-fact" analysis of trends and events contributing to confidentiality breaches, and

-- Report and quantify a company's exposure, with standardized reporting templates that communicate cost of exposures to the key business stakeholders, while maintaining a record for compliance regulations

"Our customers are the executives and directors within corporations who would suffer the most exposure and highest liability in the event of an internal electronic security breach, either because of stiff compliance penalties, loss of intellectual property and competitive edge, class-action-suits resulting from lack of corporate oversight, or risks to their critical infrastructure," said Donald J. Massaro, president and CEO of Reconnex. "We've learned that most organizations do not have a clear picture of who has access to confidential data and where it goes, creating a high-level of risk and anxiety for business stakeholders. The Reconnex inSight platform gives enterprises and government agencies a straightforward way to register their intellectual property or confidential data; detect compliance, personal, and legal policy breaches in real-time; and uncover the hidden threats to internal security through forensic analysis. The inSight reporting capabilities clearly spell out the severity of issues and the business case for remediation in language decision makers can understand."

"Electronic risk management is good for business. We want to lead our industry with a best practice that allows us to continually assess our risk, accurately report this risk to key business stakeholders and protect our competitive advantage," said Ann Harten, chief information officer for SIRVA, Inc. (NYSE:SIR), a leading provider of relocation and moving solutions to corporations, consumers and governments around the world. "We evaluated a number of alternatives, but we chose the Reconnex inSight platform because of the 48-Hour e-Risk assessment, robust forensic capabilities and scalable architecture. Reconnex made it easier for us to understand our risk, communicate that risk clearly to non-technical business stakeholders, and help address electronic risk management issues."

Register, Detect, Remediate and Report Electronic Risks, in Real-Time

Reconnex's inSight platform provides real-time, comprehensive visibility into the information leaving an enterprise network to identify disclosures that can cause devastating financial losses and irreparable competitive damage. The inSight platform is an integrated solution of three different product components that work together in the following ways.

The Reconnex iController enables organizations to register all types of sensitive or proprietary content, whether these are customer records or design files stored in a database, intellectual property stored in a source code repository, or a sensitive email created by a user. Using Reconnex's patented Document Biometrics(TM) technique that creates thousands of overlapping digital signatures to register content, the iController creates a unique digital fingerprint for each piece of information registered. The iController can fingerprint virtually any type of digital data, including graphical or textual formats, office documents, PDFs, source code, emails, images or multimedia files. The iController does not store a company's confidential information within the registration appliance; instead it stores the unique digital signatures associated with the files and securely destroys all copies of the files. The iController stores these signatures in its database repository and broadcasts updates of the signature database to all Reconnex iGuards deployed throughout an enterprise network.

Armed with the signature database record from the iController and its high-speed content analysis engine, the iGuard captures and stores all the content leaving the network, resolving confidentiality breaches associated with electronic risk policies or registered content in real-time. When sensitive information travels somewhere defined as "off-limits," the iGuard identifies the breach and signals an alert at wire speed. By using Reconnex's Document Biometrics(TM) technique, the iGuard can also recognize complete, partial, or "cut-and-pasted" content from any electronic communication. For example, if registered content were copied into the body of an e-mail, Webmail, Instant Message or another document or image file, the Reconnex iGuard would detect it.

The iGuard is a passive, purpose-built hardware appliance that can be deployed off of a switch or router port, without ever impacting network performance or business workflow. It is the only solution capable of processing all content, in real-time on a full-duplex gigabit network in one 3U appliance. This industry first was achieved with the patented Reconnex File System(TM) (RFS) embedded in the iGuard appliance working within a large government agency. Invented out of necessity, the RFS overcomes the traditional performance bottlenecks encountered with commercially available, off-the-shelf file systems, which are limited by the amount of data that can be captured and stored to disk. This performance breakthrough translates to a much lower cost of ownership for customers who would rather manage one 3U appliance than load balance 20-40 servers running content-monitoring software.

Automated Policy Engines and Reporting Templates

Reconnex ERMs are designed to help customers implement an effective electronic risk management strategy out-of-the-box. ERMs are automated policy engines, consisting of pre-defined rule sets combining industry expertise and standardized reporting templates aligned to the electronic risks present in an enterprise. Reconnex provides four types of ERMs:

-- Compliance ERMs, for compliance monitoring and reporting of Sarbanes- Oxley (SOX), Health Insurance Portability and Accountability Act (HIPAA), Graham-Leach-Bliley Act (GLBA), and California privacy act SB 1386 violations

-- A Competitive Advantage ERM, defining policy for IP theft, defensibility of trade secrets, and information flow to competitors

-- A Corporate Governance ERM, targeting workplace safety issues and appropriate use of corporate resources

-- A Critical Information Security ERM, safeguarding against insider threats, social engineering, and other information security vulnerabilities such as spyware detection

Templated reporting capabilities support a wide range of reports, from executive-level summaries of compliance violations to detailed incident reports based on severity or frequency of violations. Companies can drill down to receive the level of information they require to remediate the issues. Working from information defined by the policy engines, inSight creates detailed risk management reports for results business stakeholders can understand. Administrators can view reports through a web-based report-generation interface, or arrange for them to be sent electronically to various recipients, on a regular and ongoing basis.

Comprehensive Forensic Capabilities

In addition to real-time detection of risk, the Reconnex inSight platform is the first electronic risk management solution to retain a copy of all content flowing over an organization's network -- whether flowing inbound or outbound -- for after-the-fact forensic analysis. While competitive products discard content objects, the Reconnex inSight platform provides a comprehensive view into the events taking place in an enterprise using iGuard's Forensic Event Correlation(TM) engine, for detailed data mining on all captured data. Now, organizations needing to comply with various industry regulations can store all electronic communication sessions, including emails, webmails, instant message and chat communications, and any content forwarded or attached. They can also analyze this information with instantaneous "Google-like(TM)" quick search queries into the stored data and create a complete audit trail using iGuard's easy and intuitive web-based interface. All forensic searching queries can be replayed for investigation by auditors, lawyers, and compliance experts, fulfilling an important need in this new age of compliance and complex requirements regarding disclosure of non-public information.

"We wanted a solution that could give us a constant view of the environment and the ability to record and play back events that we needed to investigate," said Shawn Farshchi, CIO and vice president, Technical Operations, WebEx Communications. "Reconnex was the only vendor who could provide this level of detail when viewing electronic risks."

Pricing and Availability

The Reconnex inSight platform is currently in beta trials, and integrated components of the platform will begin shipping in Q2. Entry-level pricing for one iController content registration appliance is US $85,000 and US $70,000 for one iGuard. ERM policy modules are priced separately starting at US $10,000. iGuard appliances with reporting templates will be available February 28th and iGuard software updates will be available to current Reconnex maintenance customers as a no-charge upgrade beginning February 28th.

About Reconnex

Reconnex enables companies to guard against information security breaches that originate within an organization. Reconnex pioneered the only enterprise security platform of its kind that has the capacity to run at gigabit speeds, is non-invasive and can be deployed in hours not weeks; businesses now have a realistic and cost-effective solution to assess their operational and compliance risks. With Reconnex, companies across various industries and government agencies now have the demonstrable proof they are in continuous compliance with real-time monitoring, detection and reporting of compliance risks. For more information, visit us on the web at reconnex.net or call 1-866-940-4590.

Kim Getgen
Reconnex Corporation
650-940-4558
kgetgen@reconnex.net

Robb Henshaw
Engage PR
510-748-8200, x.217
rhenshaw@engagepr.com