1. i want stress-free IT. i want control. i want an i. IBM System i ™ Session: Secure Perspective Patrick Botz IBM Lab Services Security Architecture Consulting & Implementation, Practice Leader botz@us.ibm.com 490074

2. IBM System i © 2007 IBM Corporation i want an i. Security Policy Security Requirements OrganizationIndustryGovernment CIO, CEO, IT Director LawyersTechnical Implement Policy Monitor Compliance With Your Policy Monitor Accuracy of Implementation Independent Verification of Policy and Implementation Policy and Implementation Technical Security Officer System administrator Technical Security Officer System administrator Technical Security Off,Operators System administrator 3 rd party ManagementTechnical General Requirements documented System secured according to policy Periodic reports Audit analysis Report anomalies Take action Official report to execs Compliance w/ Policy Suggest policy change Roles / Input ProcessOutputs Written policy Management support Widely communicated Start

3. IBM System i © 2007 IBM Corporation i want an i. Secure Perspective Focus Corporate Security I/T Security Networking Security System

4. IBM System i © 2007 IBM Corporation i want an i. Implement Policy Monitor Compliance With Your Policy Monitor Accuracy of Implementation Independent Verification Policy and Implementation Organization’s security is defined here! Security Policy Security Requirements Plan

5. IBM System i © 2007 IBM Corporation i want an i. Security Policy Security Requirements Implement Policy Monitor Compliance With Your Policy Monitor Accuracy of Implementation Independent Verification Policy and Implementation Configure your system to implement and monitor the policy. Make decisions for setting “knobs and dials” on a specific system. Implement/Monitor

6. IBM System i © 2007 IBM Corporation i want an i. Security Policy Security Requirements Implement Policy Monitor Compliance With Your Policy Monitor Accuracy of Implementation Independent Verification of Policy and Implementation Policy and Implementation Assures organization’s policy: meets all requirements meets all requirements is implemented correctly is implemented correctly on specific systems on specific systems manual processes accomplish goal of policy manual processes accomplish goal of policy Evaluate/Feedback

7. IBM System i © 2007 IBM Corporation i want an i. Security Policy Security Requirements Implement Policy Monitor Compliance With Your Policy Monitor Accuracy of Implementation Independent Verification of Policy and Implementation Policy and Implementation The process provides your security – not the computer system!

8. IBM System i © 2007 IBM Corporation i want an i. STG Lab Services To learn more about how STG Lab Services can help you attain your sales objectives, see us in the Solutions Center or contact a Lab Services Opportunity Manager: A 14 year track record…proven methods & techniques, worldwide results System i (WW, AG) Mark Even, (507) 253-1313, even@us.ibm.com Pete Cornell, (507) 253-4955, pcornell@us.ibm.com System p (WW, AG) Stephen Brandenburg, (301) 803-6199, sbranden@us.ibm.com Greg Mallare, (727) 593-2228, gmallare@us.ibm.com System x (WW, AG) Michael Karchov, (919) 342-6619, michael.karchov@us.ibm.com Mike Sigl, (425) 803-5901, siglm@us.ibm.com System z (WW, AG) Jerry Koger (623) 505-4932, jerrykog@us.ibm.com System Storage (WW, AG) Kevin Bogart, (919) 543-7919, kbogart@us.ibm.com Optimization Studies (WW, AG) Marlin Maddy, (877) 598-9675, mmaddy@us.ibm.com Solutions (WW, AG) Mohsen Nikbakhshian, (301) 803-2947, mnikbakh@us.ibm.com AP System i, z System p, x Storage US contact for AP Jenny Chen, 886-2-8170-6895, jenychen@tw.ibm.com Zhe Xu, 86-10-62986677x306, xuzhe@cn.ibm.com Jin-Ming Liu, (507) 253-0391, jliu@us.ibm.com Europe SWE & NEE IOT’s Benoit Sirot. 33-4 9211.5012, sirot@fr.ibm.com Gerard Barneaud. 33-4 9211.4231, barneaud@fr.ibm.com www.ibm.com/eserver/services

9. IBM System i © 2007 IBM Corporation i want an i. 8 IBM Corporation 1994-2007. All rights reserved. References in this document to IBM products or services do not imply that IBM intends to make them available in every country. Trademarks of International Business Machines Corporation in the United States, other countries, or both can be found on the World Wide Web at http://www.ibm.com/legal/copytrade.shtml. http://www.ibm.com/legal/copytrade.shtml Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both. Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both. IT Infrastructure Library is a registered trademark of the Central Computer and Telecommunications Agency which is now part of the Office of Government Commerce. ITIL is a registered trademark, and a registered community trademark of the Office of Government Commerce, and is registered in the U.S. Patent and Trademark Office. UNIX is a registered trademark of The Open Group in the United States and other countries. Java and all Java-based trademarks are trademarks of Sun Microsystems, Inc. in the United States, other countries, or both. Other company, product, or service names may be trademarks or service marks of others. Information is provided "AS IS" without warranty of any kind. The customer examples described are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actual environmental costs and performance characteristics may vary by customer. Information concerning non-IBM products was obtained from a supplier of these products, published announcement material, or other publicly available sources and does not constitute an endorsement of such products by IBM. Sources for non-IBM list prices and performance numbers are taken from publicly available information, including vendor announcements and vendor worldwide homepages. IBM has not tested these products and cannot confirm the accuracy of performance, capability, or any other claims related to non-IBM products. Questions on the capability of non-IBM products should be addressed to the supplier of those products. All statements regarding IBM future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only. Some information addresses anticipated future capabilities. Such information is not intended as a definitive statement of a commitment to specific levels of performance, function or delivery schedules with respect to any future products. Such commitments are only made in IBM product announcements. The information is presented here to communicate IBM's current investment and development activities as a good faith effort to help with our customers' future planning. Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput or performance that any user will experience will vary depending upon considerations such as the amount of multiprogramming in the user's job stream, the I/O configuration, the storage configuration, and the workload processed. Therefore, no assurance can be given that an individual user will achieve throughput or performance improvements equivalent to the ratios stated here. Prices are suggested U.S. list prices and are subject to change without notice. Starting price may not include a hard drive, operating system or other features. Contact your IBM representative or Business Partner for the most current pricing in your geography. Photographs shown may be engineering prototypes. Changes may be incorporated in production models. Trademarks and Disclaimers