|
| |
|
|
|
|
|
Information Security Services and Solutions
eIS³ |
|
| |
|
Information
Leakage
Prevention
(ILP)
|
| |
| Information has become one of the key business assets of our society - it assists organisations in building and maintaining market share; enables executives to make critical business decisions; increases operational efficiency. As such, an organisation's information assets need to be adequately and appropriately protected to ensure their continued value to the organisation. The threats and risks faced by an organisation's information assets are ever-present and ever-changing and organisation's need to be in a position to address these in a timely manner to ensure the least possible exposure and disruption to daily business operations. |
| |
 With the proliferation in communication channels and devices, it has become a daunting task for any organisation to ensure that these do not act as information leakage points. An Information Leakage Prevention (ILP) solution provides direct business benefit to customers by protecting information at
rest, in motion and in use.
According to Gartner there are some fundamental steps that need to be taken into consideration when an Information Leakage Prevention (ILP) strategy is developed to address the above issue. These are:
|
|
Management of content; |
|
|
Securing of workstations; |
|
|
Encryption of mass storage; |
|
|
Encryption of laptops; |
|
|
Monitoring of database activity. |
|
| Taking this into account together with international best practice guidance and own industry experience, eIS3 has selected to present ILP solutions as a combination of Data Classification, Information Vault, Content Filtering and Content Protection to answer the following questions: |
| |
|
|
What sensitive information is available within the organisation as well as at its business partners? |
|
|
Where is the information located? |
|
|
What communication channels are available and are they secured? |
|
|
Is the end point secured regardless of the device or communication channel? |
|
| |
| Data Classification |
| |
| One of the first steps in protecting corporate information is classifying it. This solution supports the definition, identification and subsequent classification of information through the use of state-of-the-art technology. |
| |
| Information Vault |
| |
| Every enterprise relies on a few priceless information items that may never be lost or exposed. The danger of losing or exposing these priceless information items is vital to the enterprise's business continuity and can even threaten its very existence. The Information Vault caters for the protection of static information that remains extremely sensitive over time and specific examples are: |
| |
|
|
Product roadmaps; |
|
|
Blueprints and formulas; |
|
|
Emergency passwords, encryption keys and root digital certificates ; |
|
|
Disaster Recovery Plans. |
|
| |
| Content Filtering |
| |
| Content filtering solutions can help organisations define and enforce internet use policies suited to their culture and business processes. With the arrival of virtual organisations and remote workforces it has increasingly become necessary to have the capability of enforcing an internet usage policy irrespective of the employee's location. |
| |
| Content filtering solutions aim at addressing the following business requirements: |
| |
|
|
Prevent corporate legal liability; |
|
|
Ensuring productive use of corporate assets and resources; |
|
|
Bandwidth optimisation. |
|
| |
| Content Protection |
| |
| There is an emerging threat to corporate security that originates from inside the organisation. A number of high-profile incidents in which customer records, confidential information, and intellectual property were leaked, lost or stolen have created an explosive demand for solutions that protect against the deliberate or inadvertent release of sensitive information. |
| |
| following business requirements can be addressed by a world class Content Protection solution: |
| |
|
|
Complying with government and industry regulations; |
|
|
Preventing violations of corporate policy and best practices; |
|
|
Stopping the loss of intellectual property and proprietary information; |
|
|
Preventing high-profile leaks of private information and customer records; |
|
|
Preserving corporate brand image and reputation. |
|
| |
| Solution Implementation Approach |
| |
| eIS³ provides solutions within an end-to-end methodology which incorporates the following: |
| |
|
|
Requirements Definition; |
|
|
Solution Architecture and Design; |
|
|
Project Management; |
|
|
Professional Implementation Services; |
|
|
Training. |
|
| |
| In addition to this methodology, eIS3 ensures that qualified resources are applied and that the client's environment is taken into consideration at all times. |
| |
| |
