La presentazione di Gary McConnell - CTO e Managing Partner Clever Consulting - al Security Summit Roma 2011, dove ha mostrato il funzionamento ed i vantaggi delle soluzioni di Data Classification TITUS, durante una sessione tecnico-legale tenuta in collaborazione con l'avv. Gabriele Faggioli (ISLegal). Dalla normativa alla strategia di DLP, i relatori hanno spiegato come la classificazione dei dati si riveli fondamentale sia in un'ottica di compliance che di sicurezza, prevenendo l'uso improprio di documenti ed email e la diffusione accidentale di informazioni riservate. http://bitly.com/CleverTITUS

1. Security & Classification Solutions Gary McConnell

2. My friend Tim…

4. The Volvo Shift Historically Focused on protecting the payload in the event of an incident (crash) Seatbelts, Strong Steel, Crumple zones New Focus is on preventing the incidents in the first place Focus on the Driver (user) *You should still wear your seat belt

5. Tim’s Vacation European Road Trip 7 Countries SE, DK,DE,CZ,AT,IT, CH 4,300km No speeding tickets 1 wrong turn*

6. User Warning System Warns user when violating policy Following too close can be dangerous Benefit: Education and Awareness - “Safe Driving Distance”

7. Risk Management Controls User can tune policy based on their risk tolerance

8. Adaptive Cruise Control Uses Sensors to Detect Threats (other cars) Applies policies based on the situation Policies: Acceleration, Braking

9. Lane Departure Warning Other Services Collision Avoidance Won’t make coffee, but will tell you when it is time for one

10. Technology Helps, Not perfect Still a role for the driver Somebody (or some dog) could get hurt

11. Observations Works great in some environments Autobahn in Germany

13. Distracted

14. Reduced Productivity

16. Istechnologyenough?

18. Which leads me to …

19. TITUS Family of Products

20. User Awareness and Responsibility Raise User Awareness Apply Visual Markings Force User to Classify and react to policy violations Help them Record Actions

21. BLIS – BLindspot Information System

22. #1 data loss risk is inadvertent mistakes

23. Scenario - Inadvertently sending email containing PII Karen works at an Insurance company. She accidentally forwards a customers Social Insurance Number to an external recipient.

27. Scenario – Send to wrong person You sent this email reply-all… you hit reply-al! Rod accidentally sends to wrong people - email includes sensitive payroll information © Bridgestone 25

31. Reduce Inadvertent Disclosure

32. Classification Selector in Word Classification pop-up with guided classification Compose document and save

33. Classification in Microsoft Office®

34. One Click Classification

40. User con TITUS 2. Classificazione TITUS con McAfee DLP 1. Composizione 3. Send/Save/Print

41. McAfee DLP 5. Policy Decision Allow Prevent Quarantine Protect Return TITUS con McAfee DLP 4. HBSS/DLP Agent

42. TITUS con McAfee DLP

43. TITUS Family of Products

44. TITUS Overview

45. Protecting Over 1.5 Million Users

46. ThankYou! Questions & Answers