Brian Caskey

Chief Marketing Officer

AVERTINGCYBER ATTACKCORPORATE OVERVIEW

Agenda

About Vanguard The Team The Threat is Real Cyber Security Solutions Services, Training and Support

About Vanguard

Founded: 1986 – Trusted for over 30 years

Business: Cloud, Enterprise and z/OS Security Server – Cyber Security,

Professional Services, Education and Customer Service

Customers: Vanguard Solutions Secure any Enterprise

Markets: Financial, Insurance, HealthCare, Education, Communications,

Utilities, Transportation, Retailers and Government Agencies

Operate: Proudly developed and supported in the U.S.A. to ensure the

highest standards of quality

HQ: Las Vegas, Nevada – United States of America

The Cyber Security Experts

Who is Vanguard?

Vanguard Integrity Professionals is the largest independent

provider of enterprise-wide cyber security solutions

addressing complex security and regulatory compliance

challenges.

• Since 1986, we have helped customers safeguard mission

critical data and applications.

• Vanguard is the leader in Cyber Defense.

AGILITY | SERVICE | KNOWLEDGE | INNOVATION

Why Vanguard?

World’s largest Financial, Insurance, Government Agencies

and Retailers entrust their Security to Vanguard Integrity

Professionals.

• Vanguard proudly protects the nation’s critical infrastructure.

• At least five times revenue replacement is required for every

dollar of LOSS depending on margin.

• Vanguard Cyber Security Solutions can help to mitigate the

financial risk.

• Vanguard Solutions provide comprehensive Cyber Attack

Resiliency.

AGILITY | SERVICE | KNOWLEDGE | INNOVATION

The Team

Executive Team

• Ronn Bailey

• Larry Tomsic

• Brian Caskey

• Milton Perkins

• Brian Marshall

• Mark VanWormer

• Andre Limarenko

• Jeff McNaughton

• Roxane Rosberg

• John Connors

• Yvonne Shoup

• Dan Townsend

Founder, Chief Executive and Technology Officer

Chief Financial Officer

Chief Marketing Officer

Chief Accountability and Human Resources Officer

Vice President of Research and Development

Vice President of Corporate Operations

Vice President of Sales

Vice President of International

Director of Customer Relations and Conference

Director of Operations

Director of Administration

Inside Legal Counsel

The Threat is REAL

The annual global cost of Cybercrime is $120 billion USD and

growing.U.S. Government

Hackers stole data on 21.5 million

federal employees.

The average cost of resolving a cyber

attack is now $1.6 million USD.

DOD alone experiences 41

million scans, probes and attacks per

MONTH.

Critical U.S. infrastructure

intrusions have increased 17 times in the past 3 years.

20,000 people at the F.B.I. and 9,000 at the

Department of Homeland Security

hacked.

Cybercrimes now take 33% longer to

resolve than 5 years ago.

Vanguard Cyber Security Solutions

Vanguard Cyber Security Solutions

Vanguard Cyber Security Solutions portfolio is an integrated,

interoperable arsenal of hardened software designed to protect against

the most advanced CYBERSECURITY threats.

Vanguard defends Cloud, Enterprise and z/OS Security Server environments.

The Worlds Largest Brands are shielded by Vanguard.

Vanguard Solutions secure 4 of the top 10 Financial Institutions.

Vanguard protects 6 of the top 10 Insurance Agencies.

We safeguard the largest Government Agencies.

Vanguard Solutions lock-down the largest Retailers.

Vanguard Solutions prevent against destructive cyber attack!

Vanguard Cyber Security Solutions

Vanguard Administration is a powerful cybersecurity solution that automates processes, offers powerful reporting with real-time management and provides control over policy administration saving time, resources and money.

Vanguard Audit & Compliance is a robust cybersecurity solution enabling configuration, adjustment and continuous monitor using the latest standards and data security policies to determine, isolate and ensure standards compliance.

Vanguard Authentication is a scalable, modular integrated authentication solution that enables enterprises to control and secure access to the entire IT infrastructure. Vanguard simplifies enterprise authentication and access control.

CYBERSECURITY SOLUTIONS SECURING ANY ENTERPRISE

VANGUARD ADMINISTRATION

Administrator Cleanup ez/Integrator

PasswordReset SecurityCenter Security Manager

VANGUARD ADMINISTRATOR™

Vanguard Administrator™ saves time and money by simplifying and automating security administration tasks. Administrator enables enterprises to operate with reduced headcount and improved security, while increasing workload.

Features

• Enables security staff to automate recurring, time-consuming “task oriented” enterprise administration.

• Delivers extensive reporting and data mining.

• Provides easy to use digital certificate administration.

• Supplies easy to use UNIX files system reporting and management.

• Allows comparing profiles on the same or different databases.

• DB2 Administration

Administrator

VANGUARD CLEANUP™

With Vanguard Cleanup™, security administrators can easily and automatically monitor z/OS Security Server access to identify and report on unreferenced security rules.

Features

• Generates commands to delete (and restore) unused and unwanted profiles.

• Produces a wide range of usage reports for auditors and security administrators.

• Provides complete accounting of all authorization requests.

• Analyzes the database to identify and report on all unreferenced or unused security entities.

Cleanup

VANGUARD EZ/INTEGRATOR™

Vanguard ez/Integrator™ is an easy-to-use toolkit that provides Authentication, Authorization and Accounting for enterprises to extend security database to their applications.

Features

• Provides the capability to authenticate user IDs and passwords from many applications against the most secure password repository in your enterprise.

• Allows an application to use the z/OS Security Server to perform authorization checking.

• Delivers customizable, enterprise-wide, mainframe-strength, centralized accounting facilities with a simple-to-use web enabled API.

ez/Integrator

VANGUARD PASSWORDRESET™

Vanguard PasswordReset™ saves time and money by allowing users to reset their own password..

Features

• Web-based end user self-service password reset.

• Uses standard challenge and response technology for user validation.

• Operates on various web server technologies.

• All web-based transactions are fully secure and encrypted.

• Integrates with Vanguard Tokenless Technologies to deliver token passcodes.

PasswordReset

VANGUARD SECURITYCENTER™

Security Center

Vanguard SecurityCenter™ is a Windows GUI interface to provide point and click security administration for both z/OS Security Server and DB2 environments.

Features

• Provides real-time administration functionality for z/OS Security Server and DB2, with point-and-click, across windows compatible desktop and mobile devices.

• Enables automated recurring, time-consuming “task oriented” administration.

• Allows comparing profiles on the same or different databases.

• Automatically generates the correct commands to accompany each action.

VANGUARD SECURITY MANAGER™

Security Manager

Vanguard Security Manager™ is an easy to use solution for non-technical personnel to administer and report on all z/OS Security Server and z/VM systems across the enterprise with a simple to use web-based interface.

Features

• Enables security administrators to automate recurring, time-consuming, “task-oriented” administration.

• Delivers extensive reporting and data mining.

• Allows comparing profiles on the same or different databases.

• Vanguard Security Manager™ includes comprehensive analytics and reporting capabilities to help security teams rapidly identify problems and allow auditors to quickly view changes and report findings.

• Pre-built Vanguard Best Practice reports that analyze databases for potential security threats that can be run on an ad hoc or ongoing basis.

VANGUARD AUDIT & COMPLIANCE

Advisor Analyzer Configuration Manager Enforcer

ez/Integrator InCompliance Offline Policy Manager

VANGUARD ADVISOR™

Vanguard Advisor™ provides complete collection and reporting of system events to enable powerful forensic analysis.

Features

• Provides powerful system event reporting and data mining capabilities.

• Advisor’s active alerts provides immediate notification of security events or combinations of events.

• Automates removal of operations attributes.

• Automates remediation of warning on profiles.

• Advisor has the ability to reconstruct any or all z/OS Security Server commands issued on the system.

Advisor

VANGUARD ANALYZER™

Vanguard Analyzer™ provides Vanguard expertise on z/OS Security Server. Analyzer delivers expert-level vulnerability assessments of z/OS Security Server configuration controls and security settings with the ability to produce audit results in minutes.

Features

• Analyzer runs thousands of integrity checks for z/OS Security Server.

• Smart link provides integration with other Vanguard software products.

• Smart assist describes discovered issues and remediation in plain language.

• Provides file change detection for sensitive corporate data.

• Delivers “Find-it-Fix-it-Fast” functionality providing direct remediation from a finding.

Analyzer

VANGUARD CONFIGURATION MANAGER™

Vanguard Configuration Manager™ automates review of current z/OS Security Server configurations against prevailing standards to include DISA STIG, NIST and DB2 hardening standards and Vanguard Best Practices dramatically reducing personnel cost and time to verify compliance.

Features

• Configuration Manager™ is designed to provide the fastest, most cost-effective and accurate method to verify that security configuration controls are in accordance with published prevailing standards.

• Configuration Manager™ allows organizations to easily move to continuous monitoring from periodic compliance reporting.

• Organizations can perform tests and report findings in a few hours instead of the hundreds or thousands of hours required when using published standards.

• Creates summary and detailed reports to provide the proper documentation required.

Configuration Manager

VANGUARD ENFORCER™

Vanguard Enforcer™ provides continuous monitoring of security controls with an automated process to compare your current z/OS Security Server configuration controls against the previously established baseline.

Features

• Detects and corrects changes to the system that would violate security policies.

• Enforcer’s active alerts provides immediate notification of security events or combinations of events.

• Captures and baselines current security configurations and profiles for future comparison.

• Monitors system critical resources including the most privileged data sets and programs.

Enforcer

VANGUARD EZ/INTEGRATOR™

Vanguard ez/Integrator™ is an easy-to-use toolkit that provides Authentication, Authorization and Accounting for enterprises to extend security database to their applications.

Features

• Provides the capability to authenticate user IDs and passwords from many applications against the most secure password repository in your enterprise.

• Allows an application to use the z/OS Security Server to perform authorization checking.

• Delivers customizable, enterprise-wide, mainframe-strength, centralized accounting facilities with a simple-to-use web enabled API.

ez/Integrator

VANGUARD INCOMPLIANCE™

Vanguard InCompliance™ performs millions of critical compliance checks to guarantee adherence to Vanguard and industry best practices, without increasing processing overhead.

Features

• Findings are reported immediately at a summary level to satisfy management requirements. InCompliance can also provide detail at the item-by-item level to understand and remediate each finding rapidly.

• Baseline checks can be marked with zero tolerance thereby immediately failing the complete compliance check upon any single deviation.

• Delivers historical trending in graphical format.

• Perform SOX, HIPAA, GLBA, PCI DSS, FISMA and other regulatory compliance audits rapidly to prevent negative internal and external findings.

InCompliance

VANGUARD OFFLINE™

Vanguard Offline™ is a simulation-testing application that allows security administrators to test and evaluate the impact of new commands before being implemented in a production environment.

Features

• Security administrators can execute commands against a copy of their database as if against a production system and analyze the potential impact of the new commands and all consequences thereof.

• Collects and aggregates all security decisions into a database.

• Produces a wide range of usage reports for auditors and security administrators.

• Provides complete accounting of all authorization requests.

• Provides a simple method for remediation of elevated access and authorities.

Offline

VANGUARD POLICY MANAGER™

Vanguard Policy Manager™ dramatically reduces security risks and improves regulatory compliance, minimizing the need for expensive remediation, while increasing staff productivity.

Features

• Ensures all commands comply with company policies.

• Where possible, modifies commands to be compliant.

• Provides an audit trail within the profile of the command history.

• Provides pre-defined best practice policies.

• Delivers the ability to create and customize user defined policies.

• Provides proactive enforcement, corrects commands in accordance with policies, while controlling security administrators.

• Provides real-time audit trail of all commands for authorized users to view.

Policy Manager

VANGUARD AUTHENTICATION

Authenticator ez/Integrator ez/PIV Card

ez/SignOn ez/Token Tokenless

VANGUARD AUTHENTICATOR™

Vanguard Authenticator™ is a protocol converter and LDAP directory. This middleware allows for simplification and centralization of security authentication services.

Features

• Simplifies administration of security for a diverse set of devices and protocols.

• Reduces the complexity by reducing the number of passwords required.

• Centralizes authentication requests from many applications, devices and operating systems.

• Provides conversion of multiple authentication protocols.

• Processes all incoming authentication requests and performs authentication.

• Performs as a LDAP virtual directory.

Authenticator

VANGUARD EZ/INTEGRATOR™

Vanguard ez/Integrator™ is an easy-to-use toolkit that provides Authentication, Authorization and Accounting for enterprises to extend security database to their applications.

Features

• Provides the capability to authenticate user IDs and passwords from many applications against the most secure password repository in your enterprise.

• Allows an application to use the z/OS Security Server to perform authorization checking.

• Delivers customizable, enterprise-wide, mainframe-strength, centralized accounting facilities with a simple-to-use web enabled API.

ez/Integrator

VANGUARD EZ/PIV CARD™

Vanguard ez/PIV Card™ satisfies FIPS 201, HSPD-12. It allows your users to authenticate to z/OS Security Server through the use of a government PIV or CAC Card.

Features

• ez/PIV Card™ is a PIV Card authentication solution that ensures z/OS Security Server complies with Homeland Security Presidential Directive 12 (HSPD-12) and Federal Information Processing Standards 201 (FIPS 201).

• ez/PIV Card increases system security by requiring multi-factor authentication to validate employees and external contractors before they gain access to an enterprise’s most critical resources.

• Provides out-of-band password generation and validation.

• Provides enhanced PIV Card and Password validation.

• Once a PIV Card has been revoked, a user is immediately denied access to z/OS Security Server.

ez/PIV Card

VANGUARD EZ/SIGNON™

Vanguard ez/SignOn™ is a single password solution for multi-platform environments. It provides sign-on controls, password synchronization and centralized user authentication on z/OS Security Server, Windows, Linux and iSeries.

Features

• Allows for a single point of administration for password change and revocation of users across the enterprise.

• Enables users to sign on to different systems utilizing a single password solution.

• When users change their password on any one system, ez/SignOn™ will update other systems in the enterprise to keep their password synchronized.

• Automates password authentication, and authenticates users from nearly any system or hardware device – the same password is used to safely sign on to multiple systems in the enterprise.

ez/SignOn

VANGUARD EZ/TOKEN™

Vanguard ez/Token™ is a multi-factor authentication solution that allows users to authenticate through common token technologies including but not limited to RSA SecurID, YUBiKEY, OAUTH tokens, SafeSign or ActivIdentity tokens to the z/OS Security Server or any other application currently using RACF authentication..

Features

• Validates user logon to the Mainframe using external authentication authorities.

• Supports multiple token technologies from well known token providers such as RSA, SafeSign, OAUTH and YUBiKEY.

• Provides selective inclusion or exclusion of multifactor authentication at both an application and user level.

• Allows for easy user ID to distributed identity mapping, providing the ability for a one-to-one or one-to-many relationship to exist.

ez/TOKEN

VANGUARD TOKENLESS AUTHENTICATION™

Vanguard Tokenless Authentication™ delivers strong authentication capabilities by generating and sending a one-time use, time sensitive passcode to a mobile communication device the user already possesses.

Features

• Provides a cost effective alternative to tokens, can deliver a time sensitive passcode to a mobile device or tablet.

• Provides selective inclusion or exclusion of multifactor authentication at both an application and user level.

• Integration with other Vanguard Authentication solutions extends Tokenless Authentication across the enterprise.

• A complete, economical, multifactor authentication solution that generates and sends a one-time use, time-sensitive passcode to a mobile communication device the user already possesses.

Tokenless Authentication

Vanguard CloudAuthentication

VANGUARD CLOUD AUTHENTICATION

Enterprise Cloud Authentication

• In today’s cloud-based world the requirement to separate Access, Control and Data is not an option; moreover a required fiduciary responsibility.

• Vanguard’s Enterprise Cloud Authentication makes the task simple and provides the control required across the enterprise.

• Today Vanguard supports any SAML based cloud. This includes cloud solutions like Google, Yahoo, Sales Force, Microsoft 365, LinkedIn and any other Security Assertion Markup Language (SAML) based cloud.

• The Vanguard solution works with both z/OS Security Server or standard Windows Active Directory. Enterprise Cloud Authentication also includes comprehensive options for Multifactor Authentication including Token, Tokenless and PIV Card Authentication.

Cloud

CLOUD DATA

AUTHENTICATION

CONTROL

1. Cloud Credentials Authenticated or Denied2. Multifactor Authenticated or Denied3. Cloud-based Data Accessed or Denied4. Separation of Authentication, Control and Data

z/OS Security Server

Security Assertion Markup Language (SAML)

ANY SAML BASED CLOUD

Vanguard Enterprise Cloud Authentication

z/OS Security Server

Small/medium/Large

Enterprise

CLOUD DATA

ANY SAML BASED CLOUD

AUTHENTICATION

CONTROL

1. Cloud Credentials Authenticated or Denied2. Multifactor Authenticated or Denied3. Cloud-based Data Accessed or Denied4. Separation of Authentication, Control and Data

Windows Active Directory

Security Assertion Markup Language (SAML)

Vanguard Enterprise Cloud Authentication

Windows Active Directory

Small/Medium/Large

Enterprise

Vanguard zSecure Replacement

VANGUARD zSECURE REPLACEMENT

Vanguard Is Helping Customers transition off zSecure products, upgrading their security to Vanguard’s industry leading Cybersecurity solution.

Features

• Easy to use – intuitive user interface

• No proprietary languages or protocols

• Industry Leading - Password Reset with a web-based browser.

• Industry Leading Multi-factor authentication solution featuring robust token support including: ActivIdentity, RSA SecurID, YUBiKEY, OAUTH Tokens and many more.

• Vanguard Multifactor includes ez/Token, ez/PIV Card and Tokenless authentication options.

• Complete compliance baselines for DISA and STIG shipped in product without customization.

• Vanguard provides multiple interfaces including GUI and web browser-based user interfaces.

zSecure Replacement

Continuous Monitoring

VANGUARD CONTINUOUS MONITORING

Continuous Monitoring

Cyber threats have become more prevalent and are increasing risks to all enterprises and federal information systems today.

• As a result, there is a need for better, more actionable intelligence about the security status of systems. Continuous monitoring of information systems security provides organizations with near real-time information about security breaches and changes in security controls to enable them to reduce risk exposure and vulnerabilities.

The Next Line of Defense – Vanguard Continuous Monitoring• Requirements for continuous monitoring of federal information systems

deliver a higher level of cybersecurity protection and address the growing threatscape facing federal government agencies. The need for continuous monitoring requires organizations to implement new processes and automated tools to assist them. NIST regards automation tools as important for the success of continuous monitoring.

SIEM

VANGUARD SIEM

The need for early detection of targeted cyber attacks and data breaches is driving the requirement for SIEM support.

• The SIEM provides a holistic, unified view into not only the infrastructure but also workflow, compliance and log management. SIEM can provide a multitude of capabilities and services efficiently.

• At the core, SIEM provides Data Aggregation, Correlation, Alerting, Dashboards, Compliance, Retention and Forensic Analysis.

• Vanguard supports SIEM within the Active Alerts solution.

• Vanguard supports ArcSight, Correlog, LogPoint and Splunk today.

• Vanguard can work with any other SIEM capable of consuming SYSLOG formatted messages.

SIEM

Services

VANGUARD SERVICES

The most effective way for organizations to reduce the cost of maintaining enterprise security and improve security postures is to automate and optimize information security. Vanguard Professional Services offers many security services to enable security automation and optimization.

Vanguard Professional Services include penetration testing, security assessments and remediation.

VANGUARD SERVICES (cont.)

Implementation Services• Include increasing efficiency of existing security and compliance

capabilities, deploying new security proficiencies, supporting industry and regulatory requirements, and training.

Remediation Services• Vanguard has the largest and most experienced group of security

specialists in the world and proven expertise remediating enterprise systems.

Security Assessments• Quickly identify and prioritize penetration risks, determine

best practices for security and integrity and evaluate the potential impact and exposure of any findings.

Staff Augmentation• Enable organizations to quickly add qualified staff to their

enterprise security team.

VANGUARD SERVICES (cont.)

Migrations• Organizations are turning to the Vanguard Professional Services team to

assist them with DB2-to-RACF security migrations.

Penetration Testing• Vanguard Penetration Testing services discover high-risk vulnerabilities,

determines if sufficient defenses are in place, offers remediation guidance, and recommends a plan and methodology for ongoing testing.

Role-based Access Control• Role-Based Access Control software, developed by Vanguard is used to

help organizations reduce provisioning time, eliminate errors and adhere to role structure over time.

The Team• The Professional Services team are renowned worldwide for

their expertise as cyber security experts. Team members have on average 30 years enterprise security experience.

Training

VANGUARD zSECURITY UNIVERSITY

Vanguard zSecurity University™ is a year-round training program providing comprehensive IT security education for any enterprise security staff and IT security professionals. For nearly 30 years, Vanguard has trained thousands of IT security professionals worldwide. Vanguard zSecurity University is the industry’s leading source to obtain enterprise, cloud Security Server-specific IT security training.

Training

VANGUARD zSECURITY UNIVERSITY (cont.)

Vanguard Classroom Training• Experience actual classroom setting while attending the industry

leading VSC Conference or experience training at your location with actual hands-on, instructor provided training and certification.

Online Training• Many organizations don’t have the time or budget to send security

team members to days of expensive training. Yet team members often lack basic skills they need to do their jobs accurately and effectively. On-Demand sessions provide subscribers with everything they need to perform security administration.

Webinars• Webinars provide yet another opportunity to stay current on

the latest standards and technologies with comprehensive instructor led webinars.

Training

Vanguard Integrity Professionals is the largest independent provider of enterprise security software addressing complex security and regulatory compliance challenges.

The World’s largest Financial, Insurance, Government Agencies and Retailers entrust their Security to Vanguard Integrity Professionals.

THE THREAT IS REAL!

Thank you!