1 The future of Data Protection David Chow

2

3

4

5

What to learn ? 6 Overtaking is decided much more by the better line and later brake point than the acceleration and top speed of a car Excellent Brakes – or more abstract: excellent security – makes a Formula 1 car better than its peers

Translated to the business 7 Businesses are today under huge pressure to drive faster increasing their risk at the same time In our data driven industries - > the risk for the business is the risk of the data Best-in-class security is needed Good data protection makes a business drive faster and overtake their competition

Case 1: Technology changes increase the risk 8 Mobile Devices Software as a Service platforms Virtualization

Case 2: Employee behaviour has changed 9

Where do data leakages occur? Source: IDG, Study Results from Data Leakage Business Survey, February % 12% 20%

Who wants Free WiFi ? 11 Details of online activity are easily captured and can be replicated to get into the account. e.g. FreeWiFi$0Hl($I0{ EOEBEEEJEBCACACACACACACACACACACA($I`HTTP/ OKServer: Apache-Coyote/1.1Server: Betex HTTP ServerSet- Cookie: JSESSIONID=C49D0B7439D67452D3D2FFBC3223AB5D; Path=/Set-Cookie: betexPtk=betexLocale%3Den%7EbetexRegion%3DGBR%7Ebet exCurrency%3DGBP%7EbetexTi meZone%3DEurope%2FLondon; Domain=.betfair.com; Expires=Sat, 21-Jan :44:13 GMT; Path=/Set-Cookie: betexPtkSess=betexRegionSessionCookie%3DGBR%7EbetexL ocaleSessionCookie%3Den%7Eb etexSkin%3Dstandard%7EbetexTimeZoneSessionCookie%3DE urope%2FLondon%7EbetexCurre ncySessionCookie%3DGBP%7EbetexBrand%3Dbetfair; Domain=.betfair.com;

Case 3: Sloppiness + underestimated data value million data records lost on 2 unprotected CDs Per data record: Names, addresses, bank details, familiy status, insurance status, tax details Estimated value per record for criminals: 60 GBP p.r. Estimated value of the package: 1.5bn GBP Estimated productivity loss at banks: 2-3bn GBP Estimated cost for prevention: GBP Official result of the investigation: „loss of data was entirely avoidable“, „serious flaws in security management, processes, poor communication and low morale“ – a „muddle-through culture“

Recession times are risky Tech staff admit they'd steal secrets if laid off Most IT staff would steal sensitive company information, including CEO's passwords and customer details, if they were laid off, according to a new survey from Cyber-Ark. A staggering 88 percent of IT administrators admitted they would take corporate secrets, if they were made redundant.

Case 4: Professional industry espionage 14

Lets structure the different cases 15 Employee underestimates data value High marketability and monetization of PII data „Risk increasing“ technologies for data sharing „Risk denying“ behaviour of employees handling data

A model for Data Security 16

Data Security is always optimization 17

What do we provide ? 18 Better end user acceptance: -Transparency for the enduser - Easy Data sharing - Single sign-on -Easy recovery processes Simplicity = Consistency = Better security - One management console for -Synchronisation with AD -Fast and easy initial encryption -Transparent keyrings - Quick reports Expert support: -Local 1st Level support -Best in class partners and services

Raising the optimization curve 19 Better end user acceptance: -Transparency for the enduser - Easy Data sharing - Single sign-on -Easy recovery processes Simplicity = Consistency = Better security - One management console for -Synchronisation with AD -Fast and easy initial encryption -Transparent keyrings - Quick reports Expert support: -Local 1st Level support -Best in class partners and services

The Sophos advantage 20 True Value Generation for our customer Better end user acceptance Simplicity = Better security Expert support => We allow our customers to drive their business faster

21 Rule No. 1 – protect data everywhere Deploy on all devices Don´t forget removable media Think about servers and SaaS All users and all computers sync‘ed from the directory One Management console One Reporting and Auditing

Rule No. 2 – Simplicity is better Security 22 $ Least investment Best security Reduces operational complexities of security Minimizes training requirements, eliminates need for deep internal security expertise Ensures high quality and responsive support/service Makes security manageable, ensures consistency Comprehensive capabilities, without conflicting agents Ensures compliance across the enterprise delivers Simplicity

Digital nomads combining work and fun Sophos technologies BehaviorContent EnforcementAuthorization Rule No. 3 – Security solutions acting in concert

Rule No. 4 – Analyze for weak links Example: Encryption is only secure if your key is secure

Sophos Data Protection pushes your racing line 25

26 Any questions ?