Complete User Protection

Transcription

1 Complete User Protection SMART SIMPLE SECURITY THAT FITS Contents 1. Solution Brochure 2. Customer Success Story - Gulftainer 3. Customer Success Story - Rush University Medical Center 4. White Paper - Endpoint Security Must Get Better

2 solution brochure COMPLETE USER PROTECTION Better, More Complete Protection for Your Users Get smarter security that goes where your users go Your users are accessing corporate resources in the office, at home, on the road, or anywhere in between. And they are not always working on a corporate network, device, or application. So it s increasingly challenging to protect them no matter what they are doing or how they are doing it. To further complicate matters, you re moving to the cloud. But you re not all there. And you don t want to be locked into a single approach. At the same time, you want to ensure centralized visibility across all layers of security. Traditional security solutions just aren t keeping up with your users. Unfortunately, threats ARE. You need more than constant vigilance to hit threats head on. You need a mesh of interconnected security that consolidates your view across all threat vectors. And you need a forward-thinking security vendor that can predict developments before they strike. It s time to think seriously about complete user protection.

3 Complete User Protection. Strong. Flexible. Easy to manage. Trend Micro Complete User Protection is an interconnected suite of security capabilities that protect your users no matter where they are going or what they are doing. This modern security delivers the best protection at multiple layers: endpoint, application, and network using the broadest range of anti-malware techniques available. Plus, you can evolve your protection along with your business using flexible on-premise, cloud and hybrid deployment models that fit your IT environment today and tomorrow. And most importantly, you can manage users across multiple threat vectors from a single management console giving you complete visibility of the security of your environment. Customers & Partners Employees Attackers ENDPOINT PROTECTION WEB, , AND COLLABORATION SECURITY Trend Micro delivers better protection THREAT RESPONSE SANDBOXING COMMAND & CONTROL BLOCK BEHAVIOR MONITORING VULNERABILITY PROTECTION DEVICE POLICY WEB REPUTATION BROWSER EXPLOIT PROTECTION ENCRYPTION APPLICATION CONTROL DATA LOSS PREVENTION ANTI-MALWARE Employee Data Leaks Traditional Malware Vulnerability Exploits Advanced Malware Targeted Attacks

4 Get better protection against today s evolving threats Trend Micro Complete User Protection protects all user activities, reducing the risk of sensitive information loss. You ll get advanced protection with endpoint security, and collaboration security, web security, and mobile security. The result is a protective shield that is extremely difficult for cyber criminals to penetrate. Plus, you ll be able to better analyze suspicious attacker behavior with access to optional sandboxing capabilities across layers of protection, from endpoint and mobile to mail server and web gateway. You can trust Trend Micro to deliver the best protection for all of your users: Broadest threat protection. You get a full range of integrated protection across gateways, endpoints, mobiles, servers, and applications. All across the network, you get multiple layers of anti-threat capabilities to prevent even the most sophisticated threats. Advanced threat protection. In addition to world-class security fueled by global threat intelligence, you re protected by integrated threat sandboxing, Command & Control detection, application control, behavior monitoring, and host intrusion protection. Better protection of your information. Integrated data loss prevention protects your information through instant messaging to the endpoint and web and gateways. Endpoint and encryption ensures only authorized eyes see your information. And application and port control prevents users from sending information where it doesn t belong. Comprehensive view of user security. Now you can manage all layers of security from a single management console for comprehensive analysis of data and threats across user protection. Real-time interconnected threat intelligence. Take your protection beyond the traditional signature approach to benefit from threat insights from Trend Micro s threat defense experts and real-time updates from our global threat intelligence network. Evolve dynamically with the flexibility of cloud, on-premise, or both Trend Micro Complete User Protection ensures maximum flexibility by providing multiple deployment models to best fit your IT strategy. So you no longer need to make a choice between on-premise or cloud. With Trend Micro, you have the flexibility to choose the deployment model that fits you best, including a mix of on-premise and cloud. And you can change the mix at any time without changing your licensing simply mix and match cloud and on-premise as your business needs change. Then, at any time, you can refine the mix without additional costs. And management is much simpler too. Rather than manage discrete solutions for on-premise and cloud-based security, Trend Micro gives you the flexibility to manage cloud and on-premise deployments from a single management console. Accomplish more in less time with simplified security management Trend Micro Complete User Protection gives you multiple layers of inter-connected security that are managed from a single management console. You get a single view of all threat information for comprehensive visibility of user security in a timely and efficient manger. Plus, you ll be able to dive deeper with user-centric management that allows you to easily understand how threats are spreading for a particular user across multiple systems. So you get simplified threat investigation with visibility across the entire threat lifecycle. Not to mention fast and easy deployment and configuration with only one solution to install and manage for multiple layers of protection. Protect users without impacting user experience Trend Micro Complete User Protection gives you stronger security that s also lightweight so it won t impact the user experience, and it supports all of the devices and applications that your users want to use. Global threat intelligence from Trend Micro Smart Protection Network rapidly and accurately identifies new threats across all layers of security with real time threat updates. Bottom line, you get complete user protection from an industry leader you can trust.

5 Simple, Flexibile Suites Protect You Now and into the Future Trend Micro Smart Protection Suites contain all the Complete User Protection components you need to protect your users and data in today s dynamic threat environment. And we make it easy by giving you a single user-based license that delivers multiple layers of protection for all of your users devices. This streamlines installation and lets you easily deploy protection in the way that best fits your business: on-premise, in the cloud or as a hybrid solution. Things change? Need to move something to the cloud or back on premise? No problem. We give you complete flexibility to change the mix of on-premise and cloud components at anytime, without having to buy new licenses. Smart Protection Suites are available in two options: Smart Protection for Endpoints Smart Protection Complete Central Management P P On-premise, cloud or hybrid deployment P P 24x7 support P P Integrated Data Loss Protection P P endpoint Anti-malware P P Vulnerability Protection P P Virtual Desktop Integration P P Mac and Windows Security P P Server Security P P Application Control P P Endpoint Encryption P P Mobile Security and Management P P messaging and collaboration Messaging Gateway Mail Server Security for Microsoft Exchange Mail Server Security for IBM Domino Instant Messaging Security for Microsoft Lync Microsoft SharePoint Security WEB Secure Web Gateway P P P P P P Trend Micro Inc N. De Anza Blvd. Cupertino, CA, 95014, USA Toll free: Phone: Fax: by Trend Micro Incorporated. All rights reserved. Trend Micro, the Trend Micro t-ball logo, and Smart Protection Network are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their owners. Information contained in this document is subject to change without notice. [BR01_CompleteUserProtection_140414US]

6 Customer SUCCESS STORY Gulftainer IT Safe Guarded with Trend Micro Enterprise Suite Deep Security and Enterprise Security Suite increase visibility and defend against malware to secure VMware and mobile users Overview UAE based company Gulftainer is the largest privately owned, terminal operator in the Middle East. Its international presence spans over three continents including the Middle East and the Americas. For more than 38 years, Gulftainer has been delivering world-class performance to its customers, continually striving for a faster turnaround of cargo, trade and fortunes for promising new economies. To achieve its goal of sustainable growth Gulftainer continues to enhance its performance as one of the most productive port operators in the world, ensuring that its customer service outperforms competitors in the markets in which it operates. In 2013, Gulftainer accomplished a significant throughput of 6 million TEUs (Twenty-Foot Equivalent Unit) at its terminals. This achievement reinforces Gulftainer s position as one of the leading Private Companies in the region for Port operations and management. Challenges >> Gulftainer Region Middle East, United Arab Emirates Sector Maritime and Logistics Employees 500 Trend Solutions Deep Security, Enterprise Security Suite, Enterprise Data Protection, OfficeScan, Control Manager and Mobile Security and Device Management IT Environment Virtual and physical servers running Microsoft Windows and Linux Operating Systems, VMware, BlackBerry Enterprise Server, Mobility Business Benefits Boosted malware detection more than 40% and improved the protection up to 99.9% Accelerated malware detection and its remediation and automated software patches to increase network uptime and free IT staff Utilization. Centralized End Point Security Management in single console and provide real time End Point security posture Intrusion Prevention system (Virtual patching) helps to identify the missing security patches and protect us from security vulnerability exploits Security has always been a top priority for Gulftainer and it is important to standardize and centralize IT security solutions. Gulftainer s IT department found the answer with Enterprise security solutions. Following a detailed review of the process, Trend Micro s Enterprise Security solutions were selected to provide a data center security solution. Ensuring that updated patches were validated and applied to servers was essential to guaranteeing the company s security status. It was a time-consuming exercise to apply patches for our virtual and physical servers, which had no automated patching, said Jurageswaran Shetty, IT Security Manager. Why Trend Micro After evaluating several leading security solutions, Gulftainer found that the Trend Micro Enterprise Security Suite (ESS) solution provided the functionality it needed, including integrated data loss prevention (DLP), which secures mobile and USB devices, as well as . In addition, the Trend Micro enterprise solution offered a plug-in for the company s BlackBerry Enterprise Servers & MDM solution which protects Gulftainer s employees mobile devices. When we deployed the Trend Micro solution, the software was capable of identifying thousands of threats and malwares, thereby giving us the comfort that Trend Micro could provide the advanced security we needed to keep our system secure and available to our end users, said Vinay Sharma, Group IT Manager. Solutions Gulftainer deployed the Trend Micro Enterprise Security Suite and Trend Micro OfficeScan endpoint protection to the physical desktops and laptops across the UAE and Iraq offices, delivering real-time protection against malware threats. OfficeScan also enhances ESS s endpoint protection with cloud-based global threat intelligence and integrated DLP. To secure its server environment, Gulftainer installed Trend Micro Deep Security on both virtual and physical servers. Deep Security is a comprehensive security platform designed to protect data centers and cloud workloads from network breaches and business disruptions. Tightly integrated modules include anti-malware, web reputation, firewall, intrusion prevention, integrity monitoring, and log inspection. Prior to the deploying Deep Security, only Gulftainer s Windows and Linux servers were protected with the previous AV product. Deep Security integrated with all of our environments, which simplified our security management, said Sharma. Page 1 of 2 Customer Sucess Story Gulftainer

7 Customer SUCCESS STORY This is a strategic decision to implement the Trend Micro Enterprise Security Suite solution for Gulftainer and its global operations to protect the corporate information against today s advance threats. It enables a flexible IT service model, creating a cloud based technology roadmap and faster response to the growing business needs. Ramesh Shivakumaran, Group Director Business Services at Gulftainer Trend Micro Enterprise Security Solution simplifies the security and related compliance efforts by extending protection to our physical and virtual servers, end-point infrastructure and cloud environment. The concept of the agentless virtual appliance Deep Security solution simplifies security processes considerably and allows for a more efficient utilization of resources, especially when compared to conventional anti-malware solutions. Upon switching to Trend Micro solution, the number of security-related issues have dropped by 30-40%. Vinay Sharma, Group IT Manager at Gulftainer Solutions Continued The Deep Security agentless security platform uses resources more efficiently, supports higher virtual machine densities and is easier to manage than traditional anti-malware solutions. The platform saves the time and effort of Gulftainer s IT staff from continually configuring, updating, and patching client and server agents. The solution s web reputation, integrity monitoring, and bidirectional firewall capabilities add layers of defense to keep Gulftainer s network available 24/7. By consolidating all security responsibilities onto one comprehensive platform, Deep Security simplifies management and expands visibility across the network. The Trend Micro Control Manager console makes it easy to see what s happening in our production environment and alerts us if any issue requires attention, said Shetty. The added capability allows us to take immediate action to prevent business disruptions and reduces the time we spend on incident management. In addition, the reporting process provides additional insight into the effectiveness of our security efforts. Results With Trend Micro OfficeScan protecting our endpoints and Deep Security protecting our server environment, Gulftainer is confident its network is guarded by the best available security solutions, said Shetty. Gulftainer is also pleased with the results produced by the OfficeScan and its mobile security components of the Trend Micro Enterprise Security Suite. From detecting and cleaning out thousands of malware threats in our environment, to preventing data loss and protecting our mobile devices, Trend Micro has really shouldered the security burden for us, which frees our IT team to focus on more important issues, said Shetty. What s next? In the near future, we are looking at deploying the Trend Micro Encryption system to add yet another layer of security protection, said Shetty. And, once we complete our ISO certification, we will look at deploying the Trend Micro Deep Discovery system to mitigate targeted attacks. For More Information Visit us on the web at: or talk to a sales specialist: With 80% of our environment on virtual machines and 20% on physical servers, we were concerned about security and vulnerability management. The Deep Security integrated solution in all of our environments, simplifies our security management and gives better control to protect enterprise data. Jurageswaran Shetty, IT Security Manager at Gulftainer 2014 by Trend Micro Incorporated. All rights reserved. Trend Micro, and the Trend Micro t-ball logo, OfficeScan and Trend Micro Control Manager are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their owners. Information contained in this document is subject to change without notice. [CS-SuccessStory-Gulftainer US] Page 2 of 2 Customer Sucess Story Gulftainer

8 Customer SUCCESS STORY Rush University Medical Center Creates Safer Environment with End-to-End Protection for Healthcare and Academic Environments Complete User Protection Solution, Deep Security, and Deep Discovery enable greater visibility to defend against sophisticated attacks Overview Rush University Medical Center (Rush) is a not-for-profit healthcare, education, and research enterprise with a 664-bed academic medical center that includes hospital facilities for adults and children. In addition to the University Medical Center, Rush also includes Rush University, Rush Oak Park Hospital, and Rush Health with a total of 8,000 employees. Rush offers residency and fellowship programs in medical and surgical specialties to more than 2,000 students. >> Rush University Medical Center Region North America, Chicago, Illinois Sector Healthcare Employees 8,000 and 2,000 students Partner CDW Trend Solutions Complete User Protection (OfficeScan + VDI, Endpoint Encryption, Data Loss Protection idlp), Network Virus Wall, Deep Security, Deep Discovery (Inspector and Analyzer), Trend Micro Premium Services Competitor Displaced Symantec IT Environment Microsoft servers, VMWare, virtualization, PCs, Macs, smartphones, tablets, and wireless networks, 1,600 virtual desktops and 600 virtual servers, 10,000 physical desktops Business Benefits Half-a-million viruses blocked including zero-day attacks Ensured confidence with HIPAA, FERPA and PHI compliance audits Greater visibility with central management from a single console Increased user satisfaction with fast and effective scanning Secured virtual and desktop environment With a large and experienced IT team, Rush manages three data centers across its campuses. The organization currently supports approximately 1,600 virtual desktops and 600 virtual servers, along with 10,000 physical desktops. The Rush IT team is tasked with supporting users on all devices, including smartphones and tablets. Rush operates proprietary wireless networks for its doctors, nurses, students, and support staff, while it also provides public Wi-Fi for patients and families. Rush was recently named one of Hospitals and Health Networks Most Wired organizations for We cover the gamut of everything you would find in a modern academic medical center, including one of the most advanced electronic medical records systems, said Jaime Parent, Associate CIO, Vice President IT Operations at Rush University Medical Center. In addition to being a premier medical facility in Illinois, Rush is also committed to the community it serves. Recently, Rush founded the EN-Abled Veteran Program, which trains and prepares transitioning military veterans in healthcare IT. As a result of the program, veterans from conflicts in Iraq and Afghanistan are learning skills that will help them succeed in the healthcare IT marketplace. Challenges Rush University Medical Center s IT leadership knows the importance of providing protection to all levels and types of customers that are on site at the hospital and supporting facilities, such as doctors, nurses, staff, technicians, and patients. To provide that protection, they re always looking for the very best in IT security. However, in 2011 Rush realized their former security vendor did not have the tools or the capabilities to defend against a new breed of advanced threats. In one attack, Rush was hit hard by the Conficker virus, a computer worm that targets Microsoft Windows environments and creates botnets that can steal valuable network data. Their existing security could not identify and resolve the virus. This was a major concern for Rush, because their network holds information on patient, research, and other hospital related data. Like any major medical facility, Rush operates 24/7/365, so we could not simply shut down the system and search for a solution, said Parent. Another issue for Rush was dealing with unknown and zero-day attacks that were assaulting its network on a regular basis. We were challenged in balancing a growing security architecture against emerging persistent threats, said Alex Radenkovic, Information Security Engineer at Rush University Medical Center. An attacker can deploy new attack techniques when capable defenses have not yet been deployed, leaving the attacker with the upper hand. Daily scanning presented another challenge for the medical facility. The scanning by its previous endpoint security provider was impacting performance of users across its network. Because scanning was scheduled for mid-day, the solution caused processing delays that reduced user productivity for all levels of users. As a result, some Rush employees would work on their own personal laptops, smartphones, and tablets to avoid the scan, leaving Rush with a mix of managed and unmanaged endpoints. As a medical center, we have to make sure we have the monitoring and security to ensure compliance across all of our users many devices, said Parent. Some of the primary compliance regulations that Rush needs to meet include: the Health Information Portability Act (HIPAA) on the medical side, the Family Educational Privacy Act (FERPA), which protects the privacy of student education records, state regulations, and Public Health Information (PHI). Page 1 of 3 Customer Sucess Story Rush University Medical Center

9 Customer SUCCESS STORY Once we understood how much traffic we had to manage, how much malicious traffic to block, and the magnitude of the threats, it was easy to make the case for Trend Micro. Jaime Parent, Associate CIO, Vice President IT Operations at Rush University Medical Center Challenges Continued As if zero-day attacks, scanning issues, and compliance problems weren t enough, Rush was concerned that its current solution could not meet the demands of its modern data center. Rush was looking for a solution that would protect its virtual desktop infrastructure (VDI) and virtual servers, and provide virtual patching that shields potential vulnerabilities before attackers can take advantage of them. Finally, Rush IT was concerned with malware entering the system via unauthorized USB devices being brought onto campus. Once we learned about the sophisticated nature of the new threat landscape, we knew we had to protect the entire hospital network, said Parent. And we had to handle the scanning issue that was impacting user performance. Why Trend? After evaluating several leading security vendor solutions, Rush was most impressed with Trend Micro because of the quality and effectiveness of their solutions. The Rush IT leadership was also swayed by the level of engagement from the Trend Micro account team who took the time to understand the complexity of Rush s IT challenges and tailor an end-to-end security solution for their unique environment. The Trend Micro team was great to work with. The camaraderie and level of discussion between the members of our organizations was the first step in our win-win relationship, said Parent. They provided excellent support, came on-site for strategy sessions, and really made a significant effort to understand our security requirements. While Trend Micro was working to tailor a solution, Rush experienced another malware attack that made it appear as though some of their files were disappearing. However, with Trend Micro s help, this time Rush was prepared to defend its environment. The virus was eradicated and a strategy provided to prevent the virus from being retransmitted. We all pitched in and collaborated to eliminate the virus, said Parent. Even though Trend Micro had only seen this virus at one or two other sites, they were able to stop it. When a 30-day Proof of Concept for Trend Micro OfficeScan was completed, Rush IT recognized not only the number of threats they were facing, but where the threats were coming from. Once we understood how much traffic we had to manage, how much malicious traffic to block, and the magnitude of the threats, it was easy to make the case for Trend Micro, said Parent. Deep Discovery is a virtual powerhouse. In the last 90 days Deep Discovery has examined and investigated over 100,000 samples and more than half-a-million million viruses and other malware were blocked using OfficeScan. Alex Radenkovic, Information Security Engineer at Rush University Medical Center The Solution Impressed with the results of the OfficeScan endpoint protection solution, Rush decided to switch to Trend Micro and deploy the Trend Micro Complete User Protection solution in The solution includes OfficeScan, as well as and collaboration security, web security, mobile security, and integrated data loss prevention. The result is a protective shield that is extremely difficult for cyber criminals to penetrate. In addition to providing protection across Rush endpoints, OfficeScan uncovered far more malware than Rush s previous security solution and delivered much faster virus scans that did not impact user productivity. The technology used by Trend Micro was much less intrusive on the CPU, so scans were completed much faster and users stopped complaining, said Parent. And the scans were identifying viruses and Trojans that our previous solution did not detect. Put all that together and it s pretty clear that Trend Micro s solution was a superior product. While having regular strategy sessions with the Trend Micro team, Rush IT leadership quickly recognized that today s threats require multi-layered protection, particularly in the highly-regulated healthcare and academic environments. After a successful Proof of Concept, Rush deployed Trend Micro Deep Security and Trend Micro Deep Discovery solutions. We use Deep Security to protect our VDI and virtual servers. The solution provides a comprehensive, agentless security platform for our virtual environment, and we plan to use it for our cloud server implementation, said Radenkovic. In addition to maximizing protection for our VDI environment, Deep Security provides virtual patching that shields vulnerabilities before they can be exploited, eliminates emergency patching, frequent patch cycles, and costly system downtime. With Deep Discovery, Rush can monitor the entire network for attacks, analyze malware using sandboxing, and quickly assess and react to the threat, said Radenkovic. Deep Discovery is a virtual powerhouse. In the last 90 days Deep Discovery has examined and investigated over 100,000 samples and more than half-a-million million viruses and other malware were blocked using OfficeScan, Page 2 of 3 Customer Sucess Story Rush University Medical Center

10 Customer SUCCESS STORY Trend Micro Control Manager gives you incredible user-based visibility into what s going on in your computing environment. It also gives you everything you want from a reporting device data ranges, graphs, advanced views, and extremely detailed logs. Alex Radenkovic, Information Security Engineer at Rush University Medical Center The Solution Continued One example of the multi-layered support that Trend Micro provides to Rush was when a user downloaded zero-day malware to a PC within the Rush network. Deep Discovery inspected the suspicious malware and ran the threat through its sandbox technology to see what harm it could do and what type of system it could infect. We actually were able to watch the malware trying to contact its Command and Control servers to get new code and steal our data, said Parent. We would have had an outbreak if it wasn t for Deep Discovery. The solution s centralized management also offers significant benefits. It allows Rush to monitor the health and status of servers, workstations, laptops, compliance all from a single screen. Trend Micro Control Manager solution gives you incredible user-based visibility into what s going on in your computing environment. It also gives you everything you want from a reporting device data ranges, graphs, advanced views, and extremely detailed logs, said Radenkovic. Trend Micro s support team also played an important role in helping Rush quickly realize the solution s benefits. With Trend Micro s Premium Support Program, the support team not only helped us install and configure software, they taught us how to use their products just like they do, said Radenkovic. The level of professionalism and expertise was very impressive it feels like we re all on the same team it s a fantastic collaboration. Results Since switching to Trend Micro in 2012, Rush University Medical Center has recognized several significant benefits in both the level of network protection and increased user performance. Trend Micro s Complete User Protection allows the Rush IT team to manage users from a single console, giving Rush complete visibility into security across their IT environment. Since switching to Trend Micro, our computing environments are now stable. Once we deployed Deep Discovery we have not had any major outbreaks they helped us identify the infection source and attack vector, so we could address the threat right away, said Radenkovic. Switching to Trend Micro from our previous vendor, it would sometimes take us a day to two to figure out where the attack was coming from, involving lots of resources to correlate that data. After switching to Trend Micro, we ve been able to identify the attack and the sources almost instantaneously. Trend Micro OfficeScan has improved user satisfaction with faster and more effective scanning, while making it easy to manage security. From an overall environment perspective, the number of threats have decreased significantly since we installed Trend Micro solutions, said Parent. We can see from the logs provided by the solution that it s really working. With Trend Micro now protecting their entire IT environment, Rush has peace of mind that their valuable healthcare, academic, and other sensitive information is always protected. For healthcare organizations facing ongoing attacks as well as HIPAA compliance regulations, this is very important. With Trend Micro solutions, we have the tools to see which types of threats we are facing, and quickly resolve them before they affect our system, said Parent. This makes us very confident with our compliance audits. With Trend Micro solutions, we see which types of threats we are facing and can quickly resolve them before they affect our system. This makes us very confident with our HIPAA, FERPA, and PCI compliance audits. Jaime Parent, Associate CIO, Vice President IT Operations at Rush University Medical Center What s next? Rush realizes that there is no shortage of security challenges for medical centers, so they value Trend Micro as an ongoing partner and member of the strategy team. We currently use Trend Micro encryption for our laptops, but I d like to deploy Trend Micro encryption for all of our endpoints, said Parent. We ve enjoyed a true partnership with Trend Micro and we may even develop a security solution together someday. We have taken the next step in protecting our data, safeguarding our data, we are now at the next level. The threat landscape has changed and evolved here at Rush and Trend Micro has evolved with us, said Radenkovic. For More Information For more information, please go to: by Trend Micro Incorporated. All rights reserved. Trend Micro, and the Trend Micro t-ball logo, OfficeScan and Trend Micro Control Manager are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their owners. Information contained in this document is subject to change without notice. [CS-SuccessStory-RushUniversityMedicalCenter US] Page 3 of 3 Customer Sucess Story Rush University Medical Center

11 WHITE PAPER Endpoint Security Must Get Better Market Pulse SURVEY FINDS IT LEADERS READY TO CONSIDER MORE EFFECTIVE, EASIER-TO-USE TECHNOLOGY. Endpoint security is at a critical juncture. Increasingly, employees at organizations of all sizes are using a wider variety than ever of desktop and mobile devices, including smartphones, tablets and laptops, as they work from broadly dispersed locations, including home offices. Often, organizations are permitting and even encouraging employees to use their own devices under BYOD (bring your own device) policies. With these devices, employees are accessing not only corporate data and applications, but also social media, banking and shopping sites. In a 2014 IDG Research Services survey of IT leaders, 83% say endpoint security is critically important and with good reason. As recent news events have demonstrated, the scope and cost of data breaches can be very high. For IT professionals, including CIOs and CISOs, corporate/career survival hangs in the balance. Mobility and BYOD aren t the only factors placing new importance on endpoint security. Cloud-based applications such as corporate productivity suites and storage require tight security for the endpoints accessing those services. In addition, many organizations are gravitating toward data-centric business models in which business intelligence and operations data are critical and that data must be accessed from a wide variety of endpoints. According to the IDG survey, CIOs and CISOs also understand that as the number and variety of attacks have increased, no single technology is sufficient to keep an organization safe. Consequently, a multilayered approach to security is needed, covering such techniques as anti-malware/anti-virus, security, secure Web gateway, encryption, application whitelisting/ control, data loss prevention (DLP), advanced threat protection, virtual patching/host IPS and mobile security. Notably, DLP, ATP, virtual patching and mobile security will nearly double in the next year, the survey finds.» Dissatisfaction Despite recognizing the importance of endpoint security, survey respondents are unhappy with the technology in several respects most importantly, the complexity of the products and the difficulty of security policy enforcement. In a telling response, less than half highly rate their organizations current endpoint security solutions in any one area. The amount of staff training required garners a particularly negative response, with nearly 30% ranking it only 1 or 2 on a scale of 1 5, where 1 is poor and 5 is excellent. The reason for the large amount of time needed for staff training is the sheer number of tools. The use of separate management consoles for each of several security tools, such as security, Web security, DLP or other packages, mandates distinct education regimens for each. In addition, the use of a large number of tools means that management tasks are duplicated. For example, every time a policy is changed, that change must be implemented on each management console a costly and time-consuming process. Huntington Memorial Hospital in Pasadena, Calif., uses four different endpoint security products. Each solution appears to be reasonably simple to set up and install. It is when combined that it becomes a pain for IT to manage, says Henry Jenkins, director of information services at the hospital and a survey respondent, in an message.

12 2 ENDPOINT SECURITY MUST GET BETTER Market Pulse FIGURE 1. Endpoint Security as IT Priority Endpoint security is reported as a critical or important IT priority at 83% of organizations. 26% Important but not critical 13% Somewhat important 3% Not very important As cloud-based solutions gain popularity, endpoint security solutions must effectively handle endpoints whether they are connected to corporate networks or to public or private clouds. However, the ability of endpoint security solutions to evolve with organizations cloud strategies does not fare well in the survey. Only 34% rate their solutions at 4 or 5; 23% rate their solutions at 1 or 2; while 14% say they don t know, indicating lack of knowledge of a cloud progression path. FIGURE 2. Top Challenges of Endpoint Security 57% Critical 1% Not at all important IT environment complexity (i.e., mobile devices, consumer applications in the workplace, increase in remote users) Security policy enforcement Cost of security solutions 47% 43% Management of multiple point security products 55% 52%» Openness to change The perceived importance of endpoint security and the dissatisfaction with current tools combine to create openness to change among those surveyed. Two-thirds (67%) of organizations are likely to consider alternate security vendors within the next year. We want something a whole lot easier to administer and integrate, via standards, to allow a best-of solution for our environment, and greater functionality, says survey respondent Richard Buss, senior vice president of technology at EMSL Inc., a nationwide environmental testing lab headquartered in Cinnaminson, N.J., in an exchange. Meanwhile, Jenkins of Huntington Memorial Hospital voices similar thoughts in an exchange. I would like to see a better, integrated approach that provides the same kind of controls that we are getting from each point solution at a price lower than the sum of our current security solution parts. The survey finds that price aside, ease of management, better threat protection and better endpoint performance are the key factors that are likely to lead respondents organizations to switch security vendors. And survey respondents will seek out security vendors that can deliver the benefits they view as most important to their businesses: protection against attacks and the ability to avoid the costs of potential security incidents.» Trend Micro Answering the need for a broad range of threat protection that can be managed from a single console, Trend Micro Smart Security Suites bring together a full complement of security capabilities, including endpoint, and Web security. From one console, you gain complete visibility across all components of the solution, and can see a time-based view of policy compliance and security incidents for a given user across all of that person s devices. You can deploy on-premise, in the cloud or in a hybrid model and can change the mix at any time. This flexible deployment capability means your investment is future-proofed should your infrastructure move increasingly to the cloud. Trend Micro endpoint solutions deliver the most complete user protection available against today s evolving threat landscape, featuring outstanding performance and straightforward licensing. With the broadest range of anti-malware techniques, Trend Micro delivers multiple layers of threat protection and data security to protect your users and your corporate information across every device, application and network. If you are seeking a better endpoint security solution, you can find more information on Trend Micro products here:

13 About Trend Micro As a global leader in cloud security, Trend Micro develops security solutions that make the world safe for businesses and consumers to exchange digital information. With more than 25 years of experience, we deliver top-ranked security that fits our customers needs, stops new threats faster, and protects data in physical, virtualized, and cloud environments by Trend Micro Incorporated. All rights reserved. Trend Micro, and the Trend Micro t-ball logo are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their owners. Information contained in this document is subject to change without notice.