a
re
.c
o
m
“Dead Horse Wisdom”
Graham, Texas
Beat the horse faster, in an attempt to make it go faster…
Hire a consultant to point out all the reasons why the horse
isn’t running fast…or at all…
Form a “Tiger Team” to study the issue and come back with
revelations and recommendations…
Tie two dead horses together in an attempt to double the
speed…
Search the internet to see how other people manage to ride
dead horses…
Change riders…
Lowering the standards so that the performance of the
dead horse is considered acceptable…
Declaring that dead horses are lower operating cost and
therefore carry an acceptable ROI!!
w w w .w a tc h fu ls o ft w a re .c o m
Information is an asset
a
re
.c
o
m
w w w .w a tc h fu ls o ft w a re .c o m
The Insider Threat
Security breaches (by malice or neglect),
are increasingly costing more
Confidential information is increasingly
handled in digital formats. Easy to store
but also to leak
The economic downturn impels once
trusted workers to “borrow” information
and leverage it
Distinction between
Need
: covered by compliance mandates.
PCI-DSS, SOX, …, state data privacy laws
Should
: core intellectual property,
customer data
Could
: Internal price lists, privileged
communications
Well Meant
Insider
Malicious
Insider
a
re
.c
o
m
What do I “Need to Know”?
w w w .w a tc h fu ls o ft w a re .c o m
The Perimeter is no more!
Name: Bob
Department: IT
Task: 2014 IT Budget
Name: Chuck
Department: Finance
Task: M&A Project
Name: John
Department: HR
a re .c o m
BYOD is a given
FORBID IS A POLICY
Network Access Control
Enterprise Rights Management
Mobile Device Management
Mobile devices have crossed the perimeter and
are “far beyond” from system defences, opening
w w w .w a tc h fu ls o ft w a re .c o m
a
re
.c
o
m
The Multi-Level Security Model
The organization defines its Information
Security levels
The policy determines the security levels
Each user is assigned a security credential
Policy defines rights each credential has over
each level of information
Access to information depends on the
security credential of the user
Anything over Public is encrypted
Actions can be controlled by the credentials
Print, Edit, Forward, Copy, etc.
Secret
Confidential
Internal
w w w .w a tc h fu ls o ft w a re .c o m
How does it work?
VP
CEO
Oops…
a
re
.c
o
m
A New Paradigm in Data Centric security
Data Centric Security = RightsWATCH
Data Classification for enhanced compliance & decrease
liability;
IRM – Information Rights Management to enforce data
protection;
w w w .w a tc h fu ls o ft w a re .c o m
a
re
.c
o
m
Passwords do not suffice!
w w w .w a tc h fu ls o ft w a re .c o m
a
re
.c
o
m
RightsWATCH is Data-centric Security
w w w .w a tc h fu ls o ft w a re .c o m
a
re
.c
o
m
Data-centric Security that:
Applies Multilevel Security & Dynamic User
Profiling
Provides context and content-aware data
labeling, tagging and protection;
Delivers an enhanced user experience in
requiring the user to apply a classification
and/or provide automatic classification to
new emails and documents, based on
Regular Expressions and patterns;
Applies Watermarking and fingerprinting to
protected content;
Enhances and expands AD RMS server-side
and client-side reporting and auditing, for
audit trails and compliance;
Extends protection support beyond Office
and to ALL file formats
w w w .w a tc h fu ls o ft w a re .c o m
1. Multilevel Security & Dynamic User
Profiling
Segregate access to sensitive information
based on vertical and horizontal
Scopes/Context:
Department,
Project,
Supply Chain,
Costumers,
Partners,…
Ability to grant/revoke each user with
multiple security clearances:
In a given moment in time
Within a specific role performed
Secret
Confidential
Internal Use
a
re
.c
o
m
2. Content & Context Aware Protection
Intelligent and automatic information
classification based on:
Regular Expressions
Content
Context
Patterns
Enforces corporate policies where
compliance is:
Mandatory or Suggested
not prone to human error
w w w .w a tc h fu ls o ft w a re .c o m
a
re
.c
o
m
w w w .w a tc h fu ls o ft w a re .c o m
4. Watermarking and Fingerprinting
Watermarking
Automatic adding of
watermarks, headers,
footers and disclaimers to
educate users and make
classification explicit:
Decrease company liability
if and when a leak occurs
Fingerprinting
Include metadata onto
emails, docs, etc… in order
to transform unstructured
data into a more structure
form, allowing it to be
better picked up by
Full-featured DLPs and/or
email gateways
Visual
Labeling
a
re
.c
o
m
4. Watermarking and Fingerprinting (…)
Protects the company from a legal and compliance
perspective
Rules-based configuration to allow flexibility
Dynamic watermark support
Automatic protection policies without requiring Exchange
server or server-side modifications
w w w .w a tc h fu ls o ft w a re .c o m
5. Audit Trails & Compliance
Audit Trails
for:
Compliance and
Forensic analysis
Monitor and audit company
governance policies
Logging of user actions
(producing, saving,
printing, exporting, ….)
over the information
Logging of admin actions
and the system
Blacklisting
On-the-Fly discretionary
measures to prevent data
leakages
a
re
.c
o
m
5. Audit Trails & Compliance (…)
Rich System Admin Experience
Rapid learning curve for
administrators and infrequent
users alike
Access segregation to
information being accessed by
different stakeholders;
Detailed & Incremental
configuration and Roll-out
Deploy and use at your own
pace. Doesn’t disrupt workflows
and existing procedures and
processes
Serving multiple and
heterogeneous environments
System integrity controls
To perform damage control
actions
w w w .w a tc h fu ls o ft w a re .c o m
w a re .c o m
7. Addressing the BYOD Trend
RightsWATCH keeps sensitive information safe in a BYOD
world
by extending Information Protection & Control to Smartphones
and Tablets
RMS protection goes mobile:
Full Featured RMS encryption extended to mobile environments
No need for extra servers
The email messages are accessible on the mobile devices.
Possibility to reply/forward information is controlled according
to user rights
Create
protected
Consume
protected
iOS
Yes
Yes
Android
Yes
Yes
w w w .w a tc h fu ls o ft w a re .c o m
