FFIEC News

HP Introduces Secure Advantage Portfolio to Strengthen Security From Desktop to the Data Center

(June 19, 2007)-- HP unveiled a new security offering to protect data, resources and validate regulatory compliance across the entire IT infrastructure – from the desktop to the data center.

Introduced at the HP Technology Forum, the HP Secure Advantage portfolio of servers, storage, software and services helps customers securely share information, improve identity management and compliance controls, ensure business continuity and defend against network attacks.

Security is a key enabler of HP’s Adaptive Infrastructure, which helps customers evolve to a next-generation data center that enables 24 x 7, lights-out computing.

“Security and compliance continues to be a top concern for CIOs as the enterprise has evolved – whether spurred by growth, threats or ongoing regulatory pressure,” said Chris Christiansen, security analyst, IDC, an industry analyst firm. “HP Secure Advantage helps optimize business risk management by integrating security into the fabric of the IT infrastructure – preparing customers for security threats today and in the future.”

According to IDC, the security products and services market is expected to reach $66.6 billion by 2010.(1)

“HP has been protecting the majority of the world’s financial transactions for the past 35 years by safeguarding ATM and point-of-sale networks, credit card information and electronic funds transfers,” said Scott Stallard, senior vice president and general manager, Enterprise Storage and Servers, HP. “HP Secure Advantage delivers integrated security into heterogeneous IT infrastructures to help customers of all sizes optimize business outcomes.”

The HP Secure Advantage portfolio provides a secure, identity-driven audit trail for policy monitoring and enforcement. It covers all aspects of security – people, processes and technology – to help enterprise customers safeguard intellectual property, reduce revenue losses, minimize disruption to the business and deliver cost-effective validation with proof of compliance.

“It is critical for a growing company like Campana Systems to be flexible enough to adapt to its customers’ business needs, while meeting security challenges and also facing regulatory complexity,” said Pierre Lapalme, director of sales and marketing, Campana Systems. “That is why Campana Systems and its AXIS clubs (AAA/CAA automobile associations) have come to rely on HP Secure Advantage to ensure their businesses run without disruption by protecting data, resources and creating a secure audit trail.”

A key part of HP Secure Advantage is the new HP Compliance Log Warehouse, a general purpose, high-performance appliance that performs high-speed collection and analysis of log data in order to automate compliance reporting for many industry and government standards, including SOX, HIPAA, PCI and FFIEC.

The HP Compliance Log Warehouse is based on industry-standard HP Integrity server technology and is the second solution in the HP Trusted Compliance family. The appliance’s Log and Analysis Manager, including a real-time alert manager module based on SenSage technology, performs high-speed analysis of security event data for internal and external audits or forensic investigations. It also scans log record data in real time for policy enforcement. Alerts then go to trained personnel for further investigation and action.

New security service model reduces business risk with service management best practices

The new standards-based Information Security Service Management (ISSM) reference model from HP Services guides an organization toward managing and mitigating operational risk across the enterprise through the deployment of highly operationalized security controls. This approach reduces compliance costs, ensures that security controls address all enterprise risks and helps achieve a best-in-class InfoSec program.

HP ISSM is part of the new HP Service Management Framework, which provides a common language based on industry best practices and international standards ITIL v3, CMMI, CobiT® v4, ISO/IEC 20000 and ISO 27001 to help customers achieve continuous alignment between business and IT and deliver IT services at defined service levels, quality and cost targets. HP ISSM provides a comprehensive enterprise view and security governance framework for service-level agreements, operations-level agreements and policies, processes and procedures.

HP ISSM ensures the integrity and protection of information and assets through an effective IT-related risk management strategy using HP’s large portfolio of security lifecycle services in the areas of security governance and compliance, identity management, proactive security management and trusted infrastructure.

The HP Secure Advantage portfolio’s data protection capabilities provide Advanced Encryption Standard (AES) 256-bit encryption with the new HP StorageWorks LTO-4 Ultrium1840 tape drives, which deliver HP’s most secure, highest capacity and fastest performing backup.

Hardware-based encryption in the drive protects backup data from unauthorized access if cartridges are lost or stolen while being stored or transported offsite. The solution also provides cost-effective data protection to help companies control security breaches and meet various industry compliance requirements.

Unlike competitive tape drives, the LTO-4 Ultrium1840 includes HP Data Protector Express Single Server Edition, which provides simple-to-use management of the encryption process at no additional cost. For use in HP Autoloaders and Tape Libraries, the LTO-4 encryption process can be controlled by the key management capability in HP Data Protector 6.0 software.

Also offered through Secure Advantage is the HP Anti-phishing Toolbar, an industry-first two-factor authentication and site validation solution to help reduce the costs of online fraud, or “phishing,” and to meet privacy regulations and FFIEC-issued guidelines for authentication in Internet banking.

Developed by researchers at HP Labs, the toolbar helps users manage their passwords and usernames and makes phishing more difficult by calculating a unique password from information provided by the user, the user’s browser and the site being visited.

The generated password also depends on a secure label, enabling the toolbar only to send a password to a site when the site’s certificate is present. Additionally, the toolbar can be customized with a company’s logo to reinforce brand loyalty.

HP Identity Center is a comprehensive identity and access management software solution that optimizes and automates the management of people, processes, security and compliance. The center helps customers reduce costs and improve the user experience, business productivity and compliance. HP Identity Center includes:

* HP Select Identity software for centralized management and provisioning of users’ accounts, passwords and privileges across disparate IT systems and services;
* HP Select Access software for policy- and role-based access control and single sign-on for web applications and services;
* HP Select Federation software for privacy-driven sharing and management of user information, with enhanced security across business boundaries; and
* HP Select Audit software for identity audit lifecycle and compliance.

Share or bookmarklet this web page at: