1 © Copyright 2011 EMC Corporation. All rights reserved.

RSA Data Loss

Prevention

An Introduction to data loss prevention, the technology behind it, and common business use cases.

2 © Copyright 2011 EMC Corporation. All rights reserved.

RSA Data Loss Prevention

• The Challenge

• What is DLP?

• The RSA Solution

• Short Demonstration

• How RSA Can Help

3 © Copyright 2011 EMC Corporation. All rights reserved.

RSA Data Loss Prevention

• Reduced Corporate Security

• Breached Personal Privacy

• Direct Financial Impact

• Litigation

• Tarnished Image

• Loss of Customer Trust

4 © Copyright 2011 EMC Corporation. All rights reserved.

Where Is Your Data?

5 © Copyright 2011 EMC Corporation. All rights reserved.

CCN’s

SSN’s

Health

Records Ops Plans

Mktg Plans M&A

Customer ID

CCN’s Ops Plans

Financials Mktg Plans

M&A

CCN’s SSN’s

Financials

Driver’s

License #s

Financials

Ops Plans

Account #’s

Data Sprawl

6 © Copyright 2011 EMC Corporation. All rights reserved.

PII

PCI HIPAA

SOX ITAR

Company IP

Financial Releases

CA SB-1386

Human Resources

Regulatory and Company Policy

7 © Copyright 2011 EMC Corporation. All rights reserved.

PII

PCI HIPAA

SOX ITAR

Company IP

Financial Releases Human Resources

CA SB-1386

Finds and Manages

Information Risks

What Does DLP Do?

8 © Copyright 2011 EMC Corporation. All rights reserved.

Finds and Manages

Information Risks

Data at

Rest

Data in Motion

Data in

Use

Where Does DLP Work?

9 © Copyright 2011 EMC Corporation. All rights reserved.

Where Does DLP Work?

Print & Burn Copy and Save As

•Local printers

•Network printers

•Burn to CDs/DVDs

•Copy to Network shares

•Copy to external drives

•Save As to external drives

USB

•External hard drives

•Memory sticks

•Removable media

File shares, Servers, Laptops Databases & Repositories

•Windows file shares

•Unix file shares

•NAS / SAN storage

•Windows 2000, 2003

•Windows XP, Vista

•SharePoint

•Documentum

•Microsoft Access

•Oracle, SQL*

•Content Mgmt systems

300+ File types

•Microsoft Office Files

•PDFs

•PSTs

•Zip files

Email Web Traffic

•SMTP email

•Exchange, Lotus, etc.

•Webmail

•Text and attachments

•FTP

•HTTP

•HTTPS

•TCP/IP

Instant Messages

•Yahoo IM

•MSN Messenger

•AOL Messenger

Data at Rest

Data in Motion

Data in Use

What RSA DLP Protects

Data in Use

Data at Rest

Data in Motion

RSA DLP Datacenter

Data in Use

Data at Rest

Data in Motion

RSA DLP Endpoint Discover

Data in Use

Data at Rest

Data in Motion

RSA DLP Network

Data in Use

Data at Rest

Data in Motion

RSA DLP Endpoint Enforce

15 © Copyright 2011 EMC Corporation. All rights reserved.

Enterprise Manager

16 © Copyright 2011 EMC Corporation. All rights reserved.

Unifie

d Policy

Man

agem

ent

User &

System

Adm

inistration

Dashboard

& R

eporting

Incide

nt

Wor

kflow

Enterprise

Manager

Define, Manage, Monitor

17 © Copyright 2011 EMC Corporation. All rights reserved.

D

LP

En

dp

oin

t E

nfo

rce

DLP Network

DL

P E

nd

po

int D

isco

ve

r

DLP Datacenter

Unifie

d Policy

Man

agem

ent

User &

System

Adm

inistration

Dashboard

& R

eporting

Incide

nt

Wor

kflow

Enterprise

Manager

Discover, Enforce, & emediate

18 © Copyright 2011 EMC Corporation. All rights reserved.

20%

20%

abc

20%

20%

D

LP

En

dp

oin

t E

nfo

rce

DLP Network

DL

P E

nd

po

int D

isco

ve

r

DLP Datacenter

Unifie

d Policy

Man

agem

ent

User &

System

Adm

inistration

Dashboard

& R

eporting

Incide

nt

Wor

kflow

Enterprise

Manager

Ex

tern

al R

ep

ort

ing

Security E

vent Managem

entAccess M

anagement

Digital Rights Management

Encryption

Extend and Integrate

19 © Copyright 2011 EMC Corporation. All rights reserved.

Short Demonstration

20 © Copyright 2011 EMC Corporation. All rights reserved.

• Consider “who” not

just “what”

• Make controls

transparent to users

• Provide immediate

feedback and

education

• Leverage existing

infrastructure

• Distribute effort

throughout the

business

• Stress accuracy

• Proactively locate

and control risk

• Involve the data

owners

• Show fast time to

value

Reduce Risk Minimize Cost Avoid Disruption

“It’s not about technology, it’s about business objectives.”

Sustainable Success for DLP

21 © Copyright 2011 EMC Corporation. All rights reserved.

Diverse Customers

22 © Copyright 2011 EMC Corporation. All rights reserved.

We Can Help Your Current Status

By Providing

1. A framework for DLP evaluation

2. An evaluation environment

3. A detailed DLP proposal

4. Deployment architecture

Planning to Procure and Deploy

1. Have a defined DLP project

2. Developing a detailed DLP project

3. Evaluating DLP vendors

Gathering Information

1. Investigating DLP in general

2. Identifying business drivers

3. Developing a business case

3. Developing a business case

By Offering

1. Risk Advisor to discover current risk

2. Free Scan to support business case

3. ROI/TCO analysis for DLP

4. DLP workshop

How RSA Can Help

23 © Copyright 2011 EMC Corporation. All rights reserved.

THANK YOU