1. All rights reserved © 2005, Alcatel Risk Awareness in Enterprise IT Processes and Networks  Dr. Stephan Rupp

2. All rights reserved © 2005, Alcatel Page  Traditional Concepts to protect Enterprise IT  Users mix up private and business infrastructure  User acceptance = a low threshold for security measures  Outlook Risk Awareness in Enterprise IT

3. All rights reserved © 2005, Alcatel Page Concepts to protect Enterprise IT Enterprise IT Public Network Controlled Access

4. All rights reserved © 2005, Alcatel Page  Traditional Concepts to protect Enterprise IT  Users mix up private and business infrastructure  User acceptance = a low threshold for security measures  Outlook Risk Awareness in Enterprise IT

5. All rights reserved © 2005, Alcatel Page Mobile devices bypass protection ? So what? Mobile Devices

6. All rights reserved © 2005, Alcatel Page Mobile devices require new concepts  Risks:  > loss of corporate data outside enterprise IT  > malicious intruders inside enterprise IT  Measures:  > define, publish and enforce an IT policy  > encrypt data on mobile devices  > manage any device that connects to enterprise IT  however: will users accept it? 

7. All rights reserved © 2005, Alcatel Page  Traditional Concepts to protect Enterprise IT  Users mix up private and business infrastructure  User acceptance = a low threshold for security measures  Outlook Risk Awareness in Enterprise IT

8. All rights reserved © 2005, Alcatel Page Conditions for user acceptance  Create comfort:  > reasonable policy (enforcable)  > always offer practical solutions to cope with policy (e.g. tokens and identity cards instead of strict rules on passwords, provide list of devices which are allowed and supported by IT, transparancy for data encryption and mail encryption,...)  > provide device administration as service (virus scanner, content management,...)  The user needs to be in a position to manage his keys in a responsible way.

9. All rights reserved © 2005, Alcatel Page Once user acceptance is achieved Mobile Devices Networks Encryption becomes the rule! data encryption on device access control on device PKI managable user acceptance

10. All rights reserved © 2005, Alcatel Page  All future communication will be encrypted:  > Access control and encryption has moved directly on mobile devices.  > The next step is the general use of encrypted communication.  Protection of data is key for any economy depending on innovation:  > All future data will be either published or encrypted.  > Serves both enterprises and governments.  Who cares for private users and small enterprises?  > Possibly application service providers or mobile network providers. Outlook

11. All rights reserved © 2005, Alcatel Page www.alcatel.com Thanks for your attention! Questions?