The role of Information Security is to protect and support the safe delivery of business operations across all sectors of industry. That simple sounding challenge leads directly into a more complex conversation about what it is exactly that each organisation needs to protect. Business operations constantly change in order to meet evolving operational demands, additional data has to be maintained to sustain new activities, and the latest service and information delivery channels have to be brought on stream to facilitate fresh access demands. The security solutions that each organisation needs to deploy have to be capable of protecting the business from all external and internal threats. This involves securing systems and applications and the information that they hold. It also includes the protection of the vast range of users who require access to those facilities.

Additional Information

KEY FINDINGS

• Data assets must be equally well protected from both insider and outsider threats.

• A balance between value for money from corporate IT security spend and retaining a comprehensive level of business protection needs to be achieved.

• The protection of sensitive data to avoid regulatory fines, unwanted publicity, and loss of brand value should remain a high business priority.

• Business collaboration demands that security protection must be capable of operating across corporate boundaries.

• Shrewd organisations are doing a lot more with their IT security assets than simply maintaining a defensive shield.

• The components of an integrated security strategy extend to the provision of all forms of business, user, and information protection.

• The security of endpoint devices involves users acting responsibly, as well as IT-based protection being available.

• Organisational security policy must integrate consideration of remote endpoint use with all other aspects of security protection.

• The Web, with its universal information accessibility, has enabled business to cut costs, increase operational efficiency, and deliver 24x7 serviceability, but with this comes a host of new threat opportunities.

• The presence of unregulated Web facilities, including socially driven Web 2.0 products, is blurring the lines between the core business value of the Web and the unacceptable personal use of corporate resources.

Section 1: Management Summary

1.1 Management Summary

Section 2: Introduction and Business Perspective

2.1 Report Introduction and Objectives

2.2 Information Security - Business Impact

2.3 Making Better Use of Security to Improve Business Operations

Section 3: Data Loss Prevention

3.1 Protecting Corporate Data

3.2 Key Aspects of a Data Loss Prevention Strategy

3.3 Dealing with Service Delivery in an Overpopulated Data Loss Prevention Market

3.4 Delivering Usable Data Loss Prevention Solutions

Section 4:Web Security

4.1 Web Usage - Balancing the Need for Protection

4.2 Web Applications - Delivering Business Value

4.3 The Business Case for Better Protection

4.4 Maintaining Control Over Web Usage

Section 5: Endpoint Security

5.1 Endpoint Security - A Critical Requirement

5.2 Endpoint Diversity and Independence

5.3 Information Protection at the Endpoint

5.4 Securing Endpoint Devices Between Connections to the Enterprise

Section 6: Market Analysis

6.1 Butler Group Information Security Features Matrix

6.2 Butler Group Information Security Decision Matrix

6.3 Butler Group Information Security Market Analysis

Section 7: Vendor and Product Profiles

Aladdin Knowledge Systems Ltd.

BigFix Inc.

Bloxx

Blue Coat

CA

Check Point

Cisco Systems, Inc.

Clearswift

Code Green Networks

F5 Networks

Finjan

IBM

Juniper Networks

Kaspersky

McAfee

Microsoft

PGP Corporation

RSA

Safend

SmoothWall

SonicWALL

Sophos

Sourcefire

Symantec

Tier-3

Trend Micro

Tripwire

Tufin

Voltage Security

WatchGuard

Webroot

Websense

Section 8: Glossary