1. 111 © 2005 EMC Corporation. All rights reserved. Achieving Business Resilience 2005 Business Continuity and Corporate Security Show & Conference Stephen E. Higgins Director, Business Continuity and Security, EMC Corporation March 22, 2005

2. 22 © 2005 EMC Corporation. All rights reserved. EMC/RoperASW poll of US and European executives shows:  Gap in perception of data vulnerability between IT (52%) and business (14%)  40% of respondents were unaware of business continuity / compliance regulations Pressures Affecting Business Continuity and Corporate Security Cost Containment, Operational Risk Management, Mergers, Government Regulations, Increased Customer Demands  Do more with less  More applications are deemed critical to business  Rapid technological changes  Prioritizing requirements from different parts of business

3. 33 © 2005 EMC Corporation. All rights reserved. Building a Case Another Data Broker Reports a Breach March 10, 2005 E-mail Archivers Keep Companies Legit February 2005 CIOs Say Consolidation and Cybersecurity Top Priority List February 15, 2005 Patients' Private Data Put Online March 11, 2005 How to Justify Information Security Spending March 17, 2005

4. 44 © 2005 EMC Corporation. All rights reserved. The Analyst Perspective  Business Continuity (Meta/Gartner) –By 2007/08, 80% of Global 2000 organizations will use a continuum of data protection and recovery mechanisms that rely primarily on high-availability disk-based recovery products that enable rapid business resumption. –By 2008, 45% of Global 2000 users will utilize two data centers to deliver continuous availability; of these, 25% will support real-time recovery.  Data Security (FBI) –50-80% of electronic attacks originate inside the firewall –67% of companies reported internal breaches in last 12 months  Physical Security (Frost & Sullivan) –Within the next 4 years most video surveillance images will no longer be analog and will be stored digitally

5. 55 © 2005 EMC Corporation. All rights reserved. What are Organizations Thinking About? Business Continuity Data Storage Security Physical Security Linking these disciplines to create an operationally resilient organization

6. 66 © 2005 EMC Corporation. All rights reserved. How Do You Rate? Business Continuity 1.Infrastructure Multiple sites 2.Continuity of operations Workload sharing 3.Recovery time Under four hours 4.Application dependencies Restartability 5.Data loss tolerance Approaching zero 6.Distance In-region / out-region 7.External dependencies Tested / known 8.Test frequency Quarterly or with major system changes Data Storage Security 1.Policy Integrated 2.Implementation End-to-end 3.Defense in Depth Encryption 4.Risk Propensity Greater Awareness 5.Vulnerabilities Assessed & Managed 6.Network Access Control Management 7.BCP Included and tested Physical Security 1.Video Digital 2.Positioning IT supported 3.Application Integration Linked to legal / law enforcement 4.Consolidation Reduction in the # of locations storing images 5.BCP Included

7. 77 © 2005 EMC Corporation. All rights reserved. Questions to Ask  When were your business continuity capabilities last audited?  Is your existing recovery environment meeting your defined service level objectives?  Have you classified the service level objectives for key applications?  Is Data Security included in your BC plans?  What vulnerabilities have been identified and mitigated?  Are you prepared to handle the impact of Physical Security?

8. Stephen E. Higgins Director, Business Continuity and Security EMC Corporation higgins_steve@emc.com (508) 249 6143