LSEC DLP 2008 - Data Loss Protection and Prevention

16-Dec-2008

When Data Prevention leads to avoiding the Pain Data Loss

There are not too many cures that help you when you lose data. If the data is lost due to system failures or errors, mankind interventions, or just plane theft, it could be sometimes hard to restore what you have lost. If at all possible. Losing data is not always like losing your keys, or losing your way in a big city. It’s more like losing your way in the big desert of enormous amounts of bits and bytes like grains of sand.
The purpose of this event was to present to security officers and related professionals an overview of why to consider prevention and protection against data loss (DLP). Those include simple economic benefits, but could also include business improvement, compliance to regulations or just a risk mitigation approach.
During this seminar we’ve explored some of the management and business considerations, some of the legal impedements, but also the potential solutions. Solutions by means of best practices, technological answers to some of the problems and ideas on how to best cope with DLP within your own organization.

With the support of our Core Member

Program Summary

9.00 : Registration & Welcome Morning workshop tools & solutions :

9.30 : Introduction to the workshop & objectives of the day

9.40 : A complete architecture perspective : starting from the inside looking outside. A view from perimeter security

by Tanguy Derriks co-founder MMS Secure and Juergen Saamen, GM of Secuwave Deutschland

About : Tanguy Derriks graduated and started his career in IT Consultancy in 1999 and was involved in Application Development in the financial world with Deutsche Bank. After joining a Value Added Distributor of Internet Security Solutions, as a Technical Consultant & Advisor to their Integrator Partners, he continued to specialize in Network & Internet Security Solutions.In 2004 he co-founded MMS-Secure, working directly with the Integrator and their End User Customers to advice, recommend and implement high profile and value security solutions.

10.10 : Setting the scene for endpoint security - an overview of the requirements from an endpoint perspective

Juergen Saamen has been in the IT Security Industry for 18 years where he has played an active role in the early days of Start-Up companies. He started with Trend Micro in 1997 in a Development Engineering Lead role for Messaging products, like ScanMail for Lotus Notes. In 2006 Juergen Saamen joined Secuware, a global Encryption Software vendor.

10.30 : A stepped approach towards DLP prevention
by Johan Van Hove, RSA the Security Division of EMC

11.20 : Coffee Break

11.40 : How tools and solutions can help avoiding data loss and complying to legal requirements
By Jorg Horn, Business Development Manager, Utimaco Germany – Sophos Group

12.30:  Lunch Break, Sandwiches offered by Agoria ICT, LSEC and participating partners
Registration and Welcome afternoon participants

13.20 : Introduction by Ulrich Seldeslachts, CEO LSEC and Ilse Hasaert, Agoria-ICT

13.30 : Ensuring DLP both in the SME and the international large corporation : Impact of the Belgian law on companies’ obligations
Peter Van de Velde, lawyer & ICT expert, Bird & Bird

14.15 : How real is the threat of Data Loss and why should we bother ?

by Rashmi Tarbatt, Senior Product Marketing Manager DSG EMEA RSA Security
Rashmi has over twenty years of experience in data communications, mobile communications and Information Security.
Prior to joining RSA, Rashmi has worked for Hewlett-Packard, Ericsson and Damovo responsible for developing key vertical solutions based on information security. Rashmi holds a degree in Computer Science from the De Montfort University and a Post Graduate in Computer Studies from the University of the South Bank, London.

15.00 : Panel Discussion

15.30 : Coffee Break & Networking

16.00 :. Sensitive Data Disclosed, Wouter Janssen, Senior Manager Deloitte Enterprise Risk Service
Almost every day we hear of incidents in the news where confidential company information or privacy sensitive information is stolen or lost. Although not new as such, weak information control measures on confidentiality and especially technological advances make the ideal cocktail for growth in the number of such incidents. During this presentation the threats and impact will be looked at as well as ways to take preventive measures against data loss (including a conceptual data loss prevention framework and governance model).

Wouter Janssen CISSP CISA CISM CFE is a security specialist working as senior manager for Deloitte Enterprise Risk Services in Belgium. He has over 12 years of professional experience in the areas of IT security, privacy, identity management, audit and IT governance. He has been involved in and managed various large-scale IT security projects and advised multinationals in various industries across Europe.

16.45 : Dealing with the potential of Data Loss in your organization, insights from a technological perspective. Solutions Overview.
“Enterprise Security Architectures for Data Loss Prevention”

by Stefaan Hinderyckx, Security Director Europe, Dimension Data

Protecting data effectively requires a holistic approach that covers people, process and technology produces the best results. Only when organisations follow this all-encompassing approach, they can they rest assured that there is a high degree of certainty that their information is being protected.
DLP technology needs to be integrated across the entire IT ecosystem, covering technology domains such as classic network security (routers & switches), perimeter security (firewalls, IPS), endpoint security (PCs, mobiles, servers, etc.), application security and data security.
This presentation will discuss the implementation of secure DLP architectures

17.30 : Practical Implementations of DLP

“Data leakage. Just about everyone is aware of it, but is it the next wave of impending disaster that could sweep the global enterprise landscape”
By Brendan Rizzo, DLP Specialist McAfee

In light of the evolving legal requirements and technological threats to security, it is important for organizations to make security an important part of the corporate culture. Companies must employ at the very least, a basic risk managementstrategy, create policies and implement technology to secure data. However, policy combined with technology that focuses on outsideattacks alone clearly isn’t enough to protect companies from the threat of data loss. The harsh reality is that sensitive corporate data can easily end up in the wrong hands, deliberately or accidentally, because of employee behavior. To protect your data, your brand and your reputation from the damage for data loss, the best solution lies in a combination of employee education and a smart investment in a comprehensive security management solution.

18.45 : Closing Notes, Reception & Networking
Drinks and snacks offered by LSEC and its partners.

Thanks to all participants, our sponsor McAfee, all the contributors for making this a worthwhile event.

Are you a leader in Security ? Do you want to share your expertise and join the Leaders in Security as a Core Expert Member ?
Contact us via email! Or call +32.16.32.85.41 for a direct contact and more information.
An information set and your Membership Welcome Pack awaits you.

 

Copyright LSEC vzw 2007-2008 with the support of the IWT.

LSEC vzw Kasteelpark 10 - 3001 Heverlee - VAT BE BE 478 045 395 - fax. +32.16.32.19.69 - info @ lsec.be

<< September 2010 >>

S M T W T F S
29 30 31 1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30 1 2

Expert: Atos Origin Belgium & Luxemburg

A leading IT services provider. Ranks 1 in telecom outsourcing. Via Atos Worldline specialized in financial transactions.

Expert: Websense

Leading provider of unified content security

Expert: CA Technologies

Protect your critical IT assets, achieve sustainable regulatory compliance, reduce IT administration costs and enable new business opportunities with our security management products.

Expert: CA Technologies

Protect your critical IT assets, achieve sustainable regulatory compliance, reduce IT administration costs and enable new business opportunities with our security management products.

Expert: Axl-Trax

axl & trax are highly qualified experts in providing leading edge GRC services for SAP

Expert: VintiQ

VintiQ - Security Management Services

Expert: T-Systems Belgium

T-Systems is Deutsche Telekom's corporate customer arm.

Expert: LIN.K nv - LINKID

LIN.K is a provider of online user authentication, identification with the system LINKID

Expert: Devoteam Belgium

Devoteam Belgium, one of the major European ICT consultancy specialists with offices in 23 countries

Expert: CHB Technologies - Celadon Hailstone Biometrics

Celadon Bailstone Biometrics

Expert: Barracuda Networks

Worldwide supplier of email and internet security

Expert: Bluekrypt

Security Expert in Crypto, Information Security and Training

Expert: Sophos

Sophos is the Utimaco is a leading global provider of data security solutions, enabling mid- to large-size organizations to safeguard their data assets against intentional or unintentional data loss, and to comply with privacy laws.

Expert: arrowUp

arrowUp - member of the Lykos Group

Expert: Research In Motion - RIM - Blackberry

Research In Motion - RIM - Blackberry

Expert: Dimension Data

Dimension Data

Expert: Bull

Bull

Expert: Check Point Software Technologies

Check Point Software Technologies

Expert: Traxion

Traxion - Identity Management - cornerstone for your company

Expert: MMS-Secure

MMS-Secure nv, a distributor with a specific focus on network and systems security

Expert: F-Secure Corporation

F-Secure - Fastest Focused Anti-Virus Protection

Expert: C-Cure

C-Cure are Information Security architects already since 1998

Expert: IS4U

IS4U - Cronos specializes in Identity and Access Management

Expert: UCL Crypto Group

The Crypto Group of UCL, the UC of Louvain-la-Neuve is a research group specialized in cryptography and information security.

Expert: eID Company

eID company provides a flexible easy to integrate eID in any web application. Access to eID as a webservice.

Expert: Approach

Approach specializes in Application Security, Identity Management and financial transactions.

Expert: Global Knowledge

Global Knowledge is the worldwide leader in IT and business training.

Expert: ACA IT-Solutions

ACA IT-Solutions, end to end IT solutions and IDM Expert. Probably the largest and most successful independent J2EE solution provider.

Expert: RSA - Security Division of EMC

RSA - The Security Division of RSA. One of the leading companies in the world in IT Security. Enterprise wide Data Security solutions, suites and Services.

Expert: Novell

Comprehensive Identity, Security and Systems Management Solutions.

Expert: Exclusive Networks

Value added Distributor specialized in information security. Operational in Belgium, France, Switzerland and Luxemburg.

Expert: Unisys

Security Unleashed – At Unisys, we’re looking at security in an entirely new way.Security is no longer a defensive measure. It’s an enabling catalyst for achievement.Unisys Secure Business Operations help to unleash your full potential.

Expert: D Soft

D Soft is an expert in electronic distribution of digital documents.

Expert: Scanit

Scanit is an IT security boutique specializing in ethical hacking, penetration testing, vulnerability assessments and security configuration reviews.

Expert: Zion Security

ZION SECURITY is the leading European application security company. Our mission is to secure your business value by securing your business applications.

Expert: Zetes

For those who want to see the difference!

Expert: Vasco

VASCO designs, develops, markets and supports patented User Authentication products for e-business and e-commerce.

Expert: SUN Microsystems

Everyone and everywhere connected to the network.

Expert: Security4Biz

Security4Biz offers ICT security consultancy services.

Expert: SecurIT

The value proposition to our customers is the competence and experience of highly qualified people, combined with best-in-class solutions from leading suppliers, and our entire focus on Identity and Access Management.

Expert: Sealed

Expert in implementation of e-Security, e-Proofs and e-ID within the management of business & document flows & processes, or within the management of your enterprise content in the broad sense.

Expert: McAfee

McAfee is the world largest dedicated security companY;

Expert: NXP (founded by Philips)

Sense & simplicity. Help customers to transform initial ideas into competitive products and cost-efficient manufacturing solutions within healthcare, lifestyle and technology.

Expert: Microsoft

At Microsoft, we're motivated and inspired every day by how our customers use our software to find creative solutions to business problems.

Expert: KPMG

PMG Information Risk Management (IRM) focuses on inherent risks in technology systems used to support your business objectives and grow your business.

Expert: Intesi

Intesi Belgium is the R&D competence center of Intesi Group, focusing on Internet Security, using state-of-the-art ICT technologies.

Expert: EMC2

EMC Corporation is the world's leading developer and provider of information infrastructure technology and solutions.

Expert: Deloitte

In addition to the qualities of a leading Belgian audit and consulting firm, Deloitte is different through the values it shares daily with clients and employees.

Expert: Cisco

Cisco Internet Protocol (IP)-based networking solutions are the foundation of the Internet.

Expert: Certipost

Specialist in secured electronic document exchange for companies, the state, and for residential customers.

Expert: BT - British Telecom

One of the world's leading providers of communications solutions.

Expert: Alcatel Lucent

Alcatel provides communications solutions to telecommunication carriers, Internet service providers and enterprises for voice, data and video.

Expert: Verizon Business

Verizon Business is now the leading provider of managed security services worldwide with acquisition of Cybertrust.

Expert: IBM

A world leader in Information Technology with a large professional organization in Belgium and a series of security experts.

Expert: Norkom Technologies

Norkom is a market-leading provider of innovative financial crime and compliance solutions to the global financial services industry.

Expert: Telindus

Telindus has expertise in all aspects of modern telecommunications technology, including LAN, WAN, Internet and e-networking, network access and security, VOIP (Voice over Internet Protocol), VPN, fixed and mobile communications.

Expert: K.U. Leuven

Computer Security and Industrial Cryptography (COSIC): Cryptography to protect data against passive and active fraud.

Expert: ATOS Worldline nv

Specialist in end-to-end secure payment systems.

Expertise: UTM

UTM - Unified Threat Management

Expertise: End Point Security

End Point Security

Expertise: DLP - Data Leakage, Data Loss Prevention and Protection

DLP - Data Leakage, Data Loss Prevention and Protection

Expertise: SOA - Service Oriented Architectures

Expertise: Identity Management

Identity Management (IdM) enables organizations to facilitate and control their users' access to critical online applications and resources — while protecting confidential personal and business information from unauthorized access

Expertise: Crypto

Cryptography - Cryptografie - Cryptographie

Expertise: Secure Application Development

Secure Application Development. Security does not only start at user name and password login, from the first entry of a software security needs to be integrated.

Expertise: RFID

passive and active low-cost wireless tags

Expertise: Application Security

encompasses measures taken to prevent exceptions in the security policy of an application or the underlying system

Expertise: Wireless Security

Expertise: Appliances

protect computer networks from unwanted data traffic, intruders, email spam, enforce policies, and may also be used to create and manage VPNs.

Expertise: Access Control

the ability to permit or deny the use of something by someone.

Expertise: Risk and Vulnerability Assessment

process of identifying and quantifying vulnerabilities in a system..Cataloging assets and capabilities (resources) in a system

Expertise: Penetration Testing

A method of evaluating the security of a computer system or network by simulating an attack by a malicious user, commonly known as a hacker.

Expertise: Physical Security

describes measures that prevent or deter attackers from accessing a facility, resource, or information stored on physical media. It can be as simple as a locked door or as elaborate as multiple layers of armed guardposts.

Expertise: Remote Access

computer program that lets you access your PC from another PC via the Internet, LAN, or phone connection and work on your computer ...

Expertise: Security Policy

security policy is a definition of what it means to be secure for a system, organization or other entity. For systems, the security policy addresses constraints on functions and flow among them, constraints on access by external systems and adversaries

Expertise: Anti-Virus

Software that detects, repairs, cleans, or removes virus-infected files from a computer.

Expertise: Spyware

Software that covertly gathers user information through the user's Internet connection without his or her knowledge, usually for advertising purposes.

Expertise: Authorization

The process of enforcing policies: determining what types or qualities of activities, resources, or services a user is permitted. Usually, authorization occurs within the context of authentication.

Expertise: Authentication

Provides a way of identifying a user, typically by having the user enter a valid user name and valid password before access is granted. The process of authentication is based on each user having a unique set of criteria for gaining access.

Expertise: Computer Virus

Program or programming code that replicates by being copied or initiating its copying to another program, computer boot sector or document.

Expertise: Smart Cards

smart card or chip card, is defined as any pocket-sized card with embedded integrated circuits which can process information such as a SIM for a mobile phone or an eID card

Expertise: UTM and Appliances

Unified threat management (UTM) is a term which is used to describe network firewalls that have many features in one box, for example junk e-mail filtering,or anti-virus capability, along with the traditional activities of a firewall.

Expertise: NAC

Network access control (NAC) is a method by which hardware and software grant access to enterprise network resources after first authorizing the user and device and verifying the device's compliance with the enterprise's security policy.

Expertise: Biometrics

Biometrics (ancient Greek: bios ="life", metron ="measure") is the study of methods for uniquely recognizing humans based upon one or more intrinsic physical or behavioral traits.

Expertise: DRM

Expertise: eID - Electronic Identity Cards

The electronic identity card (eID) is an official electronic proof of one's identity. It also enables the possibility to sign electronic documents with a legal signature.