• Test password strength and, if necessary, offer assistance in creating new passwords;
• Learn approved methods for backing up data and;
• Test their knowledge on how hackers most commonly deceive unsuspecting individuals, including social engineering and spear phishing.

•   Lumension Data Privacy Resources for IT
•    How Private is Your Data, Really? Lumension Blog
•    Twitter

• Gartner Magic Quadrant for Endpoint Protection Platforms
• Optimal Security

• How organizations are creating a perfect storm for hackers
• The top three new threats impacting the workplace; and,
• Perceived risks and corresponding strategies to combat today’s evolving endpoint environment.

• Register for the State of Endpoint Risk 2012 webinar
• Download the State of Endpoint Risk 2012
• Optimal Security
• Data Privacy Day

• The virtual enterprise – how hardware and physical security strategies are ineffective in this environment
• Cloud insecurity
• Escalating numbers of mobile device hacks, resulting in costly breaches
• The need for a SSL infrastructure overhaul
• IPV6 concerns

• Twitter
• Ultimate Windows Security Blog
• The Ogren Group Blog

• Twitter         
• Optimal Security Blog
   

• Malware continues to be a threat and operational cost driver for IT, but their ability to reduce it is being challenged as the focus shifts to enabling business productivity with less cost.
  • 31 percent of respondents noted a major uptick in the frequency of malware incidents over last year with 43 percent estimating that they deal with more than 50 malware attempts on a monthly basis. This equates to nearly two intrusions per day.
  • 23 percent of organizations expressed that zero-day attacks are there biggest headache with targeted attacks coming in a close second at 22 percent.
• In comparing the 2010 survey results to current findings, the top five areas for the greatest rise of potential IT security risk within IT environments, include:
  • Third-party applications were ranked number one in terms of “most concerning” risk, yet only 23 percent of respondents consider patch and remediation as a “top five” risk mitigation strategy.
  • Concern for securing mobile devices and platforms saw a huge jump from nine percent in 2010 to 48 percent in 2011.
  • Concern over negligent insider risk has been consistent over the past three years with 43 percent of organizations polled seeing this as the greatest risk moving into 2012.
  • New worries over cloud computing infrastructure risk also jumped from 18 percent in 2010 to 43 percent in 2011, and while most anticipate their use of cloud will increase, 41 percent of those surveyed said they do not have a security strategy in place for assets stored in the cloud.
  • More than 72 percent of respondents reported their organizations will see an increase in the use of social media applications in 2012.
• Continued downward pressure on IT security investment and organizational security prioritization continues to elude. Further evidence shows:
  • Overall security budgets remain as one of most concerning items for 2012 (32 percent) and 40 percent of respondents said collaboration between security and IT is poor and/or non-existent.
  • 25 percent respondents said their budgets would increase in 2012, yet respondents showcased concern over insufficient collaboration with business operations (16 percent) and the lack of an organizational wide security strategy (13 percent).
  • 48 percent of respondents said collaboration between IT operations and IT security could be improved.
• As the use of Mac products become increasingly common in the workplace, mistrust in their invulnerability to malware grows – 85 percent say they are very concerned or increasingly concerned.
   
• Given the impact of new risks associated with remote workers, social media, mobile platforms and cloud computing, organizations are now looking to implement a more robust mix of effective solutions to tackle these mounting endpoint risks. According to those polled, the top five technologies that IT plans to increase usage over the next 12 months are:
  • Application control/whitelisting (56 percent)
  • Application control firewall/gateway (55 percent)
  • Integrated endpoint security suite (46 percent)
  • Mobile device management (45 percent)
  • Security Event and Incident management (SIEM) (38 percent)

•  “This years’ State of the Endpoint Survey reveals a large disconnect between the perceived risks and corresponding strategies to combat today’s evolving endpoint environment. Also evident is the need for a fundamental mind shift across the enterprise to ensure prioritization is given to organizational security. Clearly IT is concerned about this but it is evident they struggle with actionable next steps.”

• “The State of the Endpoint survey uncovered some interesting truths to how organizations are faring in the battle to protect their endpoints. Probably most surprising this year is the fact that malware attacks continue to increase for the third-consecutive year, yet IT’s concern in this areas is decreasing and they aren’t spending their budgets on basic malware prevention strategies, nor are they collaborating with security to formulate centralized plans for the enterprise network. Most of their concern this year seems to reside on the new technologies entering the workplace, such as mobile devices, cloud computing and virtualization.”

•   “Organizations continue to lose the battle when it comes to staying ahead of today’s threat landscape, as the study results confirmed for us. This is further compounded by a lack of collaboration among IT operations and IT security leaders to support information sharing, as well as ineffective anti-malware technologies currently being used to protect today’s IT endpoint risks. As we look to 2012, we are encouraging our customers and the larger security industry to further educate end-users to help in the fight against malware to improve the pain points associated with employees using mobile platforms, social media and cloud computing applications in the enterprise.”

• State of the Endpoint Infographic and Whitepaper

• How to improve uptime without additional management burden;
• How to reduce complexity by limiting the number of security agents and consoles and;
• How to reduce overall costs by getting more from limited IT resources and budget

• Effective and Efficient Security on a SMB Budget Whitepaper
• Calling All CEOs: Cyber crime hits your bottom line
• Twitter

•  Learn how to better educate uses on online security basics and explain why certain policies are needed;
•  Learn how to use a phased approach in introducing new security technologies without impacting user experience and;
•  Learn what key technologies can most effectively ward off the bad guys without bogging down systems and staff.

• Lumension Intelligent Whitelisting
• Lumension Endpoint Management and Security Suite
• Twitter

• Calling All CEOs: Cyber Crime Hits Your Bottom Line  
• A Required Course in Cyber security 101
• Assess your environment
• Twitter

• Resource Center: Putting Cyber Security Plans into Action
• Whitepaper: Information Security for Government Agencies: Checks, Balances and a More Secure Endpoint
• Lumension Optimal Security Blog
• Intelligent Whitelisting Blog
• Twitter

• Overview of Lumension Intelligent Whitelisting
• Intelligent Whitelisting Blog
• Ultimate Windows Security
• Twitter

• Lumension Optimal Security Blog
• Intelligent Whitelisting
• Twitter

• IT administrators wanting to understand the important key roles application control plays in their environment
• IT Professionals willing to learn how to discover, analyze and patch or remove third-party applications

• Lumension® Application Control
• Lumension® Intelligent Whitelisting™
• Lumension Optimal Security Blog
• Twitter
• Intelligent Whitelisting

In order to help organizations with this balancing act, Lumension®, a global leader in endpoint management and security, today announced it has partnered with Sophos, a global IT security and data protection company, to offer full disk encryption capabilities available as a modular add-on offering on the Lumension® Endpoint Management and Security Suite. (L.E.M.S.S.).

Through this partnership, Lumension now offers a full endpoint PC data protection solution that includes full disk and device encryption as well as removable media data egress policies. On L.E.M.S.S., full disk encryption capabilities join other best-in-class capabilities that include: patch management, configuration management, power management, device control, antivirus, application control, and asset management.

“When it comes to security and protecting confidential data, businesses are finding themselves playing a relentless game of offense and defense,” said vice president of global strategic alliances and OEM Michael Rogers, Sophos.  “Keeping pace with changing compliance regulations, rapidly evolving enhancements to technology, and a far more nomadic workforce,  businesses must cover all bases when it comes to protecting confidential data on the corporate network – especially the endpoint.  Adding Sophos’s full -disk encryption to Lumension’s Endpoint Management and Security Suite will ensure that confidential data remains confidential and accessed by authorized users only.”
 
Enforcement of IT security policy is becoming increasingly important in today’s world of extensive regulations, which range from global to country to industry-specific. Attempting to comply with these external and internal regulations adds another layer of complexity and failure to comply with external regulatory compliance such as SOX, HIPAA and PCI can result in very real economic damage, both directly in the cost of loss data and indirectly in terms of lost customers and brand value.

“By partnering with Sophos to extend our data protection capabilities, we are providing IT security professionals with the assurance that they are completely compliant and that their customers’ sensitive information is more secure,” said Rich Hlavka, senior vice president of business development, Lumension.
 

• Lumension Optimal Security Blog
• Twitter
• Sophos

•  Why revoking local admin rights will not solve the problem of unwanted and malicious applications;
• How to promote productivity through local admin access while achieving control over configuration changes; and,
•  Additional benefits of application whitelisting, including the prevention of zero-day attacks.
   

• “Think Before You Renew” whitepaper
• Rethink Antivirus on YouTube
• IWL On-Demand Demos
• Intelligent Whitelisting.com

The webcast, which will take place Thursday, June 9 at 12:00 p.m. EDT, will also feature Salvatore Salamone, executive editor of strategic content for Ziff Davis Enterprise, publisher of eWEEK, Baseline, CIO Insight and Channel Insider. Zimski, Rothman and Salamone will discuss how security administrators can effectively and cost-efficiently manage and secure endpoints in today’s evolving IT environment. Specifically, they will examine:

• Strategies that enable IT operations and security to effectively break down the traditional silos to reduce IT risk and improve overall productivity;
• How to centralize management and visibility of your entire endpoint environment – across physical and virtual machines, online and offline systems and a variety of operating systems and applications;
• How to ensure an effective, in-depth defense security approach;
• Key capabilities to look for in an endpoint management and security suite; and
• Cost benefits of consolidating best-of-breed endpoint operations and security technologies into one unified solution.

“What we want people to understand is that throwing additional products at the situation does not solve the problem, it only adds to it,” said Zimski. “The hole in secure network infrastructure is growing at an exponential rate, making it critical that we find a way to streamline and better understand these products in order to make them work together more effectively.”

Zimski, along with his fellow speakers, plans to demonstrate that the key to endpoint security is not about simply adding new security layers, such as antivirus, patch management and configuration management, but rather how these capabilities work together without degrading endpoint performance and, subsequently, end-user and IT productivity. 

In order to register for the free “Stronger Security and IT Operational Excellence: How to Achieve Both from Your Endpoint Management and Security Suite” webcast, visit Ziff Davis Enterprise Digital Events page and simply sign in if you are already a member or sign up by filling in the information required.

Supporting Resources:
 

• Endpoint Management and Security Suite Buyers Guide
• Lumension Endpoint Management and Security Suite
• Securosis
• Ziff Davis Enterprise

• Lumension Intelligent Whitelisting

• Optimal Security Blog

• Follow us on Twitter

• Intelligentwhitelisting.com

• The American Marketing Association Phoenix

• Lumension Intelligent Whitelisting

• Learn more about Windows Security

• Visit the intelligentwhitelisting.com
  industry forum

• Stop Unknown or Unwanted Applications from Running;

• Increase Endpoint Security Effectiveness;

• Improve Application Visibility on Endpoints;

• Enjoy Flexible, Effective and Easy-To-Use Application Control;

• Optimize Organizational Productivity;
and,

• Reduce Overall Endpoint TCO.

• Think Before You Renew Your AV
• Lumension Intelligent Whitelisting Solution

• Intelligent Whitelisting Industry Forum

• Follow us on Twitter

• JMP Securities 2011 Report: Lumension was also named in the JMP Securities 2011 report, “Hot 100: The Best Privately Held Software Companies.” JMP Securities is a full-service investment bank that provides equity research, institutional brokerage and investment banking services to public and private growth companies and their investors.


• SC Magazine Lumension Scan attained high marks in a recent Product Review: Vulnerability Assessment test. Lumension Scan is part of Lumension’s larger portfolio of Vulnerability Management solutions , and allows users to identify and manage their assets in the enterprise by scanning for vulnerabilities in software applications and network configurations.:Product Review


• Windows IT Pro Product Review: Lumension Application Control was reviewed and received four out of five stars. Application Control offers automatic application discovery, software update authorization, application whitelisting, script and macro protection, application review options, local application authorization, and heuristics in order to protect endpoints from malware and reduce overall TCO.


• Ashlar Foundation : Paul Henry, forensic and security analyst at Lumension was appointed Founding Board of Directors member for the Ashlar Foundation, an organization established by the Security Industry Association to provide support for organizations and projects that promote life safety and security initiatives.

• The unending arms race with financially motivated “bad guys;”
• Evolving paths into corporate networks, including social media and removable devices;
• Why traditional defenses are not effective; and,
• How to ensure an effective depth-in-defense security strategy that includes application whitelisting.

“As malware becomes increasingly prevalent and sophisticated, a lot of organizations are losing in the fight against cybercrime,” said Henry. “What so many don’t understand is that the security solutions of yesterday, such as antivirus, are no longer effective as standalone defense strategies. A layered approach that includes Intelligent Whitelisting is much more effective.”

Henry’s webcast will take place on Feb. 23 at 11:00 a.m. ET.  To register for this webcast, please visit:  2011 Malware Trends. 

Supporting Resources:

• More 2011 Predictions by Paul Henry
• Twitter

• Lumension Endpoint Intelligence Center
• Lumension Application Scanner v2.0 Beta Download
• Optimal Security Blog
• Follow us on Twitter

• Whitepaper - Intelligent Whitelisting: An Introduction to More Effective and Efficient Endpoint Security
• Optimal Security Blog

Having received many very impressive marketing campaigns, Lead Judge Daniel Burstein, Director of Editorial Content for MECLABS Primary Research was finally able to determine Lumension the winner by answering key questions such as "what can the MarketingSherpa audience learn," which ultimately enabled them to decide to name Lumension as the Gold Honor for automated responder email campaigns. 

"We are honored to be recognized by Marketing Sherpa who is known throughout the marketing community as a leader in identifying marketing best practices," said C. Edward Brice, Senior Vice President of Worldwide Marketing at Lumension. "To be recognized for nurture marketing is even more satisfying, as we believe it to be one of the most important undertakings of a B2B marketing organization as we now operate in a business environment where 80% of your customers find you."

"In the last year, Lumension has developed eight integrated and automated email nurturing tracks, based on industry and/or product focus, which was then optimized to a four-month program. Leads only receive emails if they further engaged and took offers from emails," explained Annie Wacker, Senior Marketing Programs Manager at Lumension. "The more a lead engages, the more emails they will receive. We know that in order to successfully market, especially in the B2B IT security industry, you need high quality, specific targets and messaging or you will struggle to find success."

In aiding their Sales Team, the Marketing Team at Lumension sought to increase their qualified lead engagement by 12% which initially proved to be quite a challenge. Over the course of 18 months, the Marketing organization developed and optimized a fully integrated and automated nurturing program that converted top-of-funnel leads and or/stagnant leads in the prospect database and found the top sales-qualified leads. "The goal of the program was to take contacts who indicated they were looking to solve a specific business challenge and provide them content, in the context of their buying process," said Sam Erdheim, Director of Marketing Programs for Lumension. The nurture program was designed to provide additional content centric offers that delivered specific information as a prospect progressed along their buying cycle. The ultimate goal was to drive a potential prospect to a product trial and ultimately becoming an accepted sales lead.

"Annie Wacker, Sam Erdheim, and their team at Lumension hit it out of the park," said Daniel Burstein, lead judge. "The team tackled a pain point that many other marketers likely face as well – a need to work together with sales and deliver high-quality (not mass-quantity) leads and what was most impressive for this particular category is that the team achieved this goal in a way that puts the customer first."

For more information on the success customers have had in using the Lumension product suite, please visit http://www.lumension.com/Customers/Success-Stories.aspx

Supporting Resources:

• Visit the Optimal Security blog
• 6th Annual MarketingSherpa Email Awards 2011 Special Report
• How to Become a Lumension Partner

After an examination of how these new challenges impact IT operating resources as well as IT’s ability to secure networks, this year’s study found that many organizations do not have the right arsenal of technologies in place to most effectively reduce endpoint risk. As a result, organizations are wasting valuable time, money and resources while continuing to expose their IT environment to unnecessary risks.

The cost of protecting an organization’s most valuable assets living on the endpoint is both a necessary evil but a hindrance, too. According to State of Endpoint Risk survey respondents, 48% of respondents report an increase in IT operating expenses and a main driver, says 59% of those respondents, is malware. All told, IT organizations are now faced with a very vulnerable endpoint. And, they have limited visibility into the endpoint to truly and effectively mitigate the risk of malware and data loss. Yet, respondents indicated a lack of effective technology to support policies already in place.

• Reducing endpoint risk resides largely at the application layer, yet most respondents do not actively manage the applications that live on their networks. One-third of respondents admit to putting absolutely no restrictions on which applications run on their network while another one-third employ application policies but do not actively enforce them. This lax approach to application control is a gaping hole for intruders who can, and will, easily leverage these weaknesses in the endpoint to find entry-points into the network.
• The top 5 applications that concern IT the most when it comes to security are those that pose the greatest increase in vulnerabilities and IT risk. They include:
  • 3rd party applications outside of Microsoft (58%)
  • Adobe (54%)
  • Google Docs (46%)
  • Microsoft OS/applications (44%)
  • Oracle applications (39%)
• Preventing applications from being installed (55%) or executed (47%) on the endpoint, especially Web 2.0 applications, is a top challenge for IT security managers. Nearly two-thirds (59%) of those surveyed responded to that effect, citing that the management – and even the knowledge and visibility into which web 2.0 applications are running on their network – is a major challenge today.  
• Despite this influx of new technologies to better-address mounting endpoint risks, organizations are mainly sticking with the “tried and true” technologies even though more effective technology solutions exist today. This gap was most notable vis-à-vis the following technologies:
  • Vulnerability assessment (used by 51% but considered effective by 70%); 
  • Application whitelisting (used by only 29% but considered effective by 44%);
  • Device control (used by 26% but considered effective by 57%); and 
  • Endpoint management & security suites platform (used by 40% but considered effective by 61%).

Increasingly Sophisticated Malware in 2011:
The majority of respondents (64%) acknowledged that their networks are not more secure than last year. According to the State of Endpoint Risk study, a main factor towards this feeling of insecurity is a severe lack of visibility into the endpoint, especially from an application perspective. Not having that visibility, paired with seemingly ineffective technology solutions, is an expensive problem, one only exacerbated by a lack of budget that respondents also reported in this year’s study. The following data points underscore the threat landscape both today and anticipated landscape shifts heading into 2011:  

• 43% of respondents noting a dramatic uptick in malware in 2010 – and increasingly sophisticated/hard to detect malware, too.
• 98% organizations experienced a virus or malware-based network intrusion; and over one-third (35%) have experienced 50 malware attempts in just a one-month span. This equates to more than one intrusion per day.
• Mobile/remote workers (50%), PC desktop/laptop vulnerabilities (48%), and the introduction of third-party applications onto the network (39%) are the greatest areas of endpoint risk currently. This is a shift from last year where endpoint security concerns were mainly focused on removable media and data center risks.
• An increasing volume of cyber attacks and malware incidents (61%), negligent insiders (50%), and cloud computing (internal and third party providers; 49%) are the top three security threats anticipated in 2011. 

Supporting Quotes:
C. Edward Brice, senior vice president, worldwide marketing, Lumension

• “This years’ State of Endpoint Risk survey underscores the dramatic shifts we’re experiencing within today’s threat landscape. We’re seeing a clear transition in endpoint risk away from servers and operating systems and towards third-party and browser-based applications than ever before. With an increase in mobility, storage capacity, and connectivity trends impacting the modern IT environment, IT must adapt their current approaches to endpoint security in order to effectively protect sensitive data while minimizing IT risk and lowering overall total-cost-of-ownership costs.”
• “The bottom line in all of this? Malware is not going away anytime soon. Technologies exist that will help organizations better-manage the malware threat in a much smarter, more cost-efficient and effective way than it’s being done currently. This should be a major focus for organization as we head into the new year.”

Larry Ponemon, Chairman and Founder, The Ponemon Institute

• “The State of Endpoint Risk survey uncovered some interesting truths to how organizations are faring in the battle to protect their endpoints. Probably most surprising this year is that companies are doing themselves no favors by not using the technologies they themselves have identified as most effective at combating endpoint security risks and threats.”
• “Hand in hand with that is a need for IT security pros to convince senior management of the perils of ignoring the threats of this new information risk environment. There is a real need to put the appropriate technologies and personnel in place to best-position organizations of all sizes and in all industries for success in the ongoing battle to ward off cyberthreats as we head into 2011.”

Patrick J. Clawson, Chairman & CEO, Lumension

• Today’s threat landscape is clearly in an evolutionary period. No longer are we seeing brute-force attacks but smaller, more sophisticated and advanced persistent threats. Yet, organizations are still treating the problem with an old remedy. Instead, organizations must adapt – which means a change in mindset, a shift away from ‘staying the course’ with technologies that are no longer effective at combating the growing risks facing the endpoint today. For example, a technology approach that includes application whitelisting housed on an endpoint management and security suite and coupled with traditional approaches like antivirus, is a more prescriptive approach to addressing endpoint risk.”
• “It’s this revised remedy that can better-arm IT to more effectively address growing and changing endpoint risks. In tandem, this type of approach can reduce overall complexity at the endpoint and, hopefully, improve and reduce overall IT operating expense, which is clearly a major pain-point for organizations currently, as the State of the Endpoint study confirmed for us. However, this requires an open mind regarding less ‘traditional’ approaches to endpoint security, and is something we’re actively recommending and advocating for amongst our customer base as we head into 2011.”

Methodology
The State of Endpoint Risk 2010 was derived from a survey of 782 IT and IT security practitioners within the U.S. and spanning key industries including financial services, public sector and healthcare, all of whom have active responsibility for their data security and compliance efforts.

Resources:

• Download the State of Endpoint Risk 2011 Survey
• Visit the Optimal Security blog for more insight into key survey findings
• Register for the State of Endpoint Risk 2011 webinar

• Deloitte Technology Fast 500: Lumension was ranked 467 on the 2010 Deloitte Technology Fast 500, a ranking of the 500 fastest growing technology companies in the United States and Canada.
• Software 500: Lumension ranked 247 in the 2010 Software 500, a ranking of the world’s largest software companies, up from 261 in 2009 and 282 in 2008.
• Inc 5,000: As a result of the company’s strong revenue growth, Lumension ranked 2,283 in Inc’s 2010 ranking of the fastest growing private companies in the US; ranked number 152 in the top software companies, and was one of 6 Arizona companies to make the list.
• Forrester Wave™: Earlier this year, Lumension was named a leader in vulnerability management for having the strongest strategy/vision due to the company’s portfolio of endpoint remediation products.

• Rich Mogull and Mike Rothman, Securosis analysts and bloggers;
• Richard Stiennon, IT-Harvest analyst and blogger;
• Larry Seltzer, contributing editor of PC Magazine and author of Security Watch blog;
• Eric Ogren, founder, The Ogren Group;
• Paul Henry, forensic analyst, Lumension;
• Toney Jennings, CEO, CoreTrace.

• Lumension Optimal Security Blog
• YouTube Channel
• @_Lumension
• Lumension on Facebook

The webinar, which will take place tomorrow, Oct. 26 at 12 p.m. EST, will discuss the predominant issues many organizations face when patching end user machines and how to resolve them.  Host Randy Franklin Smith, founder and CEO of Monterey Technology Group and the voice behind Ultimate Windows Security, will examine what goes into patching operating systems other than Windows, such as Linux, UNIX and Apple as well as the applications that run on them.

According to Smith, the issue that many companies have is that they use numerous platform-specific patch management tools, such as Windows Server Update Services (WSUS) from Microsoft, RedHat's patch utilities, VMWare's Update Manager, etc.  While these work well for each individual platform, three significant gaps remain, which Smith will discuss:

• The inability to patch third-party applications that lack enterprise patch management utilities
• The inability to exert organization-wide control over patch management policies and being able to demonstrate that to auditors and regulators
• The great deal of care and feeding required to run and maintain each platform and vendor specific patch management utility

"When people think patching, they often think only of Microsoft, but these days, it's so much more than that," said Pat Clawson, chairman and CEO, Lumension.  "As employees continue to bring their own laptops, tablets and smartphones to work and businesses invest in less traditional devices, such as iPads, the enterprise is becoming more diverse than ever.  We consider it important to demonstrate the criticality of properly patching this hodgepodge of devices and the myriad of applications that run on them, as failure to do so can be catastrophic."

"Because Microsoft has implemented what is now a routine standard for vulnerability response, cyber criminals are following the course of least resistance and have intensified their efforts to reach a much wider array of software – especially popular products like Acrobat and Flash from Adobe and iTunes from Apple," said Smith.  "That's not to say Microsoft patches are a thing of the past – hardly – we are on track for 90 Microsoft security patches by the end of the year. But while Microsoft follows a predictable monthly patch schedule, many other companies don't and patching can be much more complicated with some products."

Smith, along with Lumension, hopes to make this process less complicated by showing why – even if various teams within IT are responsible for patching specific systems – each organization should have a centralized patch tracking team that keeps track of each hardware and software vendor in use at the company and subscribes to their respective security bulleting services.

Lumension will also further demonstrate how to streamline the patching process by showing how its Endpoint Management and Security Suite provides centralized patch management for heterogeneous IT environments.  Register for the free "Beyond Windows Patching: Dealing with the New Imperative to Patch Adobe, Apple, Linux and More" here. 

• Lumension Optimal Security Blog
• Twitter
• Ultimate Windows Security
• 3 Strategies to Secure Endpoints from Risky Applications

The podcast, which is available for download today , covers several issues the U.S. is currently facing in the realm of cybersecurity, such as the disconnect between the public and private sectors regarding the inability to share and exchange data; threats to intellectual property from other countries via data breaches; the limited scope of the federal government's regulation and why leaders such as cybersecurity czar Howard Schmidt should have more power; security initiatives recently enacted in other countries that the U.S. can learn from, etc.

October marks the seventh annual National Cybersecurity Awareness Month, which is an initiative sponsored by the Department of Homeland Security, the National Cyber Security Alliance, and the Multi-State Information Sharing and Analysis Center to make Americans more aware of the constant barrage of online security threats they face on a daily basis, so that they can take steps to keep their personal assets and information secure while also helping to improve the overall security of cyberspace.

"Our intention behind the podcast was to provide an informal discussion to get honest and straightforward information out to businesses and consumers alike," said Pat Clawson of Lumension.  "By rallying well-respected industry insiders together, we are able to lead the charge and provide a unique perspective from organizations at the forefront of several major endpoint security initiatives." 

The danger with politically motivated cyber attacks is real and the need for both defensive and offensive responses to such attacks is crucial, especially in today's rapidly changing online landscape.  Lumension's goal is to educate enterprises and the public as a whole on the risks involved with accessing the Internet and the preventative measures that can be taken in order to ensure end user information is safe and secure.  This podcast is just one step in a series of initiatives to ensure that essential information is available and easily accessible, as cyber threats continue to become more frequent and severe. 

"The fact that Lumension is making this information open and available to everyone for free furthers the initiatives set forth by National Cybersecurity Awareness Month as well as Lumension's own resourcefulness in increasing awareness and promoting online safety," said Eric Ogren, founder and principal analyst, The Ogren Group.

In the coming weeks, Lumension will announce further efforts to educate organizations on cybersecurity.  Visit Lumension to gain access and stay up-to-date on the latest information.

Supporting Resources:

• Department of Homeland Security
• National Cyber Security Alliance
• Multi-State Information Sharing and Analysis Center
• Tips for Staying Safe Online
• Lumension Optimal Security Blog
• Twitter
• CoreTrace
• Norman
• Ogren Group

Along with providing the Lumension team with innovative insights on current and future products and
services, board members also had a unique opportunity to learn from each other. “LAB was a great
experience,” said Mike Hernandez, senior server engineer, Hines. “I was able to share what we do at
our company with peers and then got great feedback. We all have crazy ideas on how to use different
products – it’s great to share those and get other ideas in return.”

New Lumension customers like Bill Meeks of Southern Company considered LAB “a valuable
experience because he could hear from both Lumension staff and other industry professionals on how
they use the products.” John Iraci of DJO Global, a long-time Lumension customer, said “it was nice to
see how Lumension continues to revitalize as a company. Interacting with them and talking with other
LAB members on how they are using the product and addressing any challenges they face was very
beneficial.”

To see photos of the event, visit the Lumension Facebook page.

Lumension today announced that its solution for medium and large-sized enterprises, Lumension® Endpoint Protection, which is comprised of Lumension® Device Control, Lumension® Application Control and Lumension® AntiVirus, has been recognized with 5-star product ratings by SC Magazine. 

In its technical review, SC Magazine lauded Lumension Endpoint Protection for its excellent integration with existing environments and wealth of features and benefits available across application control, device control and threat management capabilities. With Lumension’s Endpoint Protection suite, organizations can prevent known and unknown malware as well as centrally manage, monitor and control applications. By employing an application whitelisting approach, users can ensure that only authorized applications are allowed to run on laptops, PCs, mission-critical servers and POS terminals, preventing the execution of unknown or malicious code.

With Lumension Endpoint Protection, operational desktop management is improved by eliminating unnecessary support calls and performance issues that come with managing unauthorized and illegal software. And, you can easily demonstrate compliance by enforcing software license policies and by providing a detailed audit trail of all application execution attempts. In addition, with Lumension Device Control capabilities, also available as part of the Lumension® Endpoint Protection suite, users can easily enforce organization-wide usage policies for removable devices, removable media, and data. Using a “default deny” approach, administrators can centrally manage devices and data, allowing organizations to embrace productivity-enhancing tools while limiting the potential for data leakage and its impact.

SC Magazine also recognized Lumension’s product for its simple installation process, superior protection features and product documentation, saying the product is “a great value for the money and customer can also purchase any of the three components separately depending on their needs, which provides flexibility.”

“We are thrilled to be recognized by SC Magazine for our superior endpoint security offerings, it further validates what we are hearing from customers, that organizations are looking for a seamless view of everyone accessing or attempting to access the network through corporate endpoints from a device and application perspective,” said chairman and CEO of Lumension, Pat Clawson. “Our continued philosophy is that security efforts should proactively stay one step ahead of emerging threats, not simply react to them and Lumension’s Endpoint Security solutions have been integral components to this approach, keeping customer’s sensitive information safe from both external and internal threats.”

The recent 5-star ratings follow a string of recent positive reviews of Lumension corporate products. This includes a 4-star rating by SC Magazine of Lumension® Scan, a component of the larger Lumension® Vulnerability Management suite that is a complete standalone, network-based scanner that performs a comprehensive scan of all devices connected to the network.

Supporting Resources:
* About Lumension Endpoint Protection
* To view full SC Magazine Product Review
 

Lumension today announced that its solution for medium and large-sized enterprises, Lumension® Endpoint Protection, which is comprised of Lumension® Device Control, Lumension® Application Control and Lumension® AntiVirus, has been recognized with 5-star product ratings by SC Magazine. 

In its technical review, SC Magazine lauded Lumension Endpoint Protection for its excellent integration with existing environments and wealth of features and benefits available across application control, device control and threat management capabilities. With Lumension’s Endpoint Protection suite, organizations can prevent known and unknown malware as well as centrally manage, monitor and control applications. By employing an application whitelisting approach, users can ensure that only authorized applications are allowed to run on laptops, PCs, mission-critical servers and POS terminals, preventing the execution of unknown or malicious code.

With Lumension Endpoint Protection, operational desktop management is improved by eliminating unnecessary support calls and performance issues that come with managing unauthorized and illegal software. And, you can easily demonstrate compliance by enforcing software license policies and by providing a detailed audit trail of all application execution attempts. In addition, with Lumension Device Control capabilities, also available as part of the Lumension® Endpoint Protection suite, users can easily enforce organization-wide usage policies for removable devices, removable media, and data. Using a “default deny” approach, administrators can centrally manage devices and data, allowing organizations to embrace productivity-enhancing tools while limiting the potential for data leakage and its impact.

SC Magazine also recognized Lumension’s product for its simple installation process, superior protection features and product documentation, saying the product is “a great value for the money and customer can also purchase any of the three components separately depending on their needs, which provides flexibility.”

“We are thrilled to be recognized by SC Magazine for our superior endpoint security offerings, it further validates what we are hearing from customers, that organizations are looking for a seamless view of everyone accessing or attempting to access the network through corporate endpoints from a device and application perspective,” said chairman and CEO of Lumension, Pat Clawson. “Our continued philosophy is that security efforts should proactively stay one step ahead of emerging threats, not simply react to them and Lumension’s Endpoint Security solutions have been integral components to this approach, keeping customer’s sensitive information safe from both external and internal threats.”

The recent 5-star ratings follow a string of recent positive reviews of Lumension corporate products. This includes a 4-star rating by SC Magazine of Lumension® Scan, a component of the larger Lumension® Vulnerability Management suite that is a complete standalone, network-based scanner that performs a comprehensive scan of all devices connected to the network.

Supporting Resources:
* About Lumension Endpoint Protection
* To view full SC Magazine Product Review
 

• Reduced energy consumption, improved security and lower TCO;
• Simplified power policy creation and deployment in complex environments;
• Increased visibility and control over the IT environment;
• Optimized power savings through enhanced power management reporting;
• Continuous compliance with green IT policies throughout the organization.

• Traditional signature-based antivirus protection, and advanced behavioral-based zero-day threat protection
• Application whitelisting, which prevents undesirable or unknown code from executing on IT assets
• Centralized control and policy management over device/media usage, including Lumension’s patented shadowing technology
• Data encryption enforcement to protect sensitive data being transferred onto removable devices/media
• Endpoint protection, whether they are connected to the organizational network or not

• Lumension® IT Security Software Solution Packages
• Optimal Security Blog
• Connect Online with Lumension® and Join the Conversation

• A Common DLP Policy from network gateway to storage to endpoint and onto removable media such as USB devices and recordable CD/DVD ROM.
• Comprehensive content awareness across data transferred off the endpoint and onto removable media. This would enable organizations to not only apply policy to file types but to also apply policy to data within file types such as social security numbers etc.
• Ability to define highly granular polices on permissible activity and data types on the endpoint without impacting organizational productivity.
• Single console, single agent solution that increases visibility across data location, policy and movement while reducing administrative burden.

• University Health Care System case study
• University Health Care System Protects Against Medical Records on the Run 
• Protect Your Vital Information Resource Center
• Connect Online with Lumension® and Join the Conversation

• 33 percent of respondents who work for departments or agencies affecting national security say they have experienced an attack by a foreign nation or terrorist organization in the last year;
• 61 percent of respondents view the threat of a cyber attack from foreign nations against critical U.S. IT infrastructure in the next year as “high”;
• 42 percent of respondents believe the U.S. government’s ability to prevent or handle these attacks is only fair or poor;
• 64 percent of respondents identified the increasing sophistication and growth in the volume of cyber attacks as the number one IT security risk; and,
• 49 percent of respondents believe that negligent or malicious insiders/employees are the largest IT security risk.

• Download the Federal Cyber Security Outlook 2010 Survey
• View Interviews with Experts
• Register for the Federal Cyber Security Outlook 2010 Survey Webinar
• View the Optimal Security Blog for more insight into key survey findings

• Provides key information necessary to validate the integrity of software for both operating systems and applications running on endpoints (servers, desktops, laptops, and virtual machines).
• Leverages relational intelligence from Lumension’s industry-leading security content database (which includes security configuration, vulnerability and patch management information, and over 2500 harmonized controls across 400 regulatory compliance requirements), to facilitate truly seamless updates within highly secure (“locked down” or “whitelist enforced”) IT system  environments.

•  Lumension® Endpoint Integrity Service (EIS)
• A Sophisticated Approach to Whitelisting
• Connect with Lumension online and join the conversation

• Centralized Endpoint Power Management Policy Wizard: Allows organizations to create and centrally manage “Green” policies across complex environments while dramatically reducing power and carbon consumption, disruption to user productivity, or additional costs for power-management point products.
• Hours of Operation Maintenance Windows: Improves IT operational energy efficiency and business productivity by automatically waking up offline machines for maintenance and system updates during off-peak hours.
• Enhanced Wake-on-LAN: “Wake Now”: Organizations can improve their security posture with Lumension’s promotable agent architecture which allows any agent to be easily converted and act as a relay to broadcast WOL packages throughout your IT environment. Devices can be commanded to “wake up” at any given time to deploy highly critical patches or urgent software updates.
• Power Consumption Reporting Functionality: Organizations will be able to monetize the effect of the power management policies with integrated power savings reports. These reports can be used to take advantage of potential power savings rebates, available from local power management companies or for showing a reduction in the overall carbon footprint.

• Lumension Optimal Security Blog
• Connect Online with Lumension® and Join the Conversation

• Expanded Controls Coverage/Intelligent Assessments: LRM 4.1 includes integration with the Unified Compliance Framework (UCF) database updates that include additions to the UCF database around State Level Security Breach Notification Laws and FTC Red Flag Rules. 
  • By utilizing the UCF, Lumension’s patent pending risk intelligence engine automatically identifies critical controls needed to achieve compliance and secure any IT asset. Controls are assessed once across and reported across all regulations, saving time and consolidating compliance projects.
• Actionable Remediation and Alerting: Through its enhanced tracking and notification features, LRM 4.1 can assign mitigation efforts to business owners and track ongoing remediation progress. LRM improves operational workflows, automatically updating assessment scores and giving administrators clear visibility of progress made towards compliance and remediation activities. Email notifications can alert administrators when levels of compliance have changed or surveys are past due.
• Expanded Flexibility & Automation through the Lumension Connector Development Kit: Most IT GRC companies provide limited integration to third-party systems. Lumension Risk Manager’s open connector ecosystem allows scan and inventory data to be imported from virtually any database system. Customers and consultants can use the Lumension Connector Development Kit to create custom connectors and import data from their network scanner, asset inventory system and other databases.
• Exception Management: Helps administrators produce more realistic risk and compliance scores where there are certain exceptions that have to be made for circumstances unique to the network. This gives security professionals greater flexibility to make exceptions where needed and allows them to approve, reject or create exceptions from scratch.

• Clean IT: Using Lumension’s integrated anti-malware technology (Lumension AntiVirus) IT administrators can scan the IT environment for any known malware. With potentially more than 50 percent of existing systems having some form of malware on it, this time-tested approach ensures that production systems are as clean as possible. Once existing malware is identified, it is automatically removed.
• Lock IT: With Lumension’s Easy Lock Down technology, a “snapshot” of the entire system is taken and a whitelist is automatically created.  From this point on, nothing new is allowed to execute without first proving that it’s wanted and trusted. 
• Trust IT: Utilizing Lumension’s Trusted Change Manager, IT managers can quickly and simply identify the rules by which they want to manage and introduce change into their whitelisted environment.  Change can come from many sources, including application vendors, trusted software updaters, trusted locations and even trusted users.  Lumension’s trusted change policy can be as flexible or tightly controlled as needed by the organization.

• eBook: Shift Happens: The Evolution of Application Whitelisting
• Demystifying Barriers - A Practical Approach to Simplifying Whitelisting
• Why Building a Trust Centric Model is the Future of Effective Endpoint Management
• Connect Online with Lumension® and Join the Conversation

• Laying the ground work
• A week before Patch Tuesday
• On Patch Tuesday
• After Patch Tuesday 

• Key Steps to Surviving Patch Tuesday
• Reduce Your Threat Exposure Resource Center
• Patch Management 2.0 Whitepaper
• Free Vulnerability Scanner
• Connect with Lumension online and join the conversation!

• Lumension Optimal Security Blog
• YouTube Channel
• Twitter

• Broadened patch coverage depth – KBOX patch management now includes support for Windows 7, Windows Server 2008 R2, Mac OS 10.6 and a wide range of Microsoft, Apple and third-party applications;
• Extended international language support for Japanese and simplified Chinese patch support for Windows;
• Easy automated patching policies – critical patches are automatically released and can be applied across highly complex and distributed IT environments without the need for manual intervention, minimizing vulnerability remediation response times and always keeping systems up to date
• Dynamic group policies – the KBOX appliance-based approach utilizes dynamic group policies for patch management integrated with inventory, assets and software distribution capabilities, enabling customers to efficiently maintain a broad endpoint security footprint.

• Patch Management 2.0 Whitepaper
• KBOX Systems Management Appliances
• KBOX Systems Deployment Appliances
• Trial KBOX System Management Appliance

• Redesigned and intuitive workflow-based management console for easier, smarter navigation
• Enhanced asset discovery for full network visibility and continuous control
• An extensible single agent architecture with improved, control and deployment
• Advanced implementation support for remote SQL, Windows 2008, and Windows 7

• A single, intuitive management console for easy patch and remediation administration across multiple platforms, including Windows, Unix, Linux and Mac OS, as well as many other applications.
• Visibility and control of both physical and virtual environments with effective management at a significantly reduced TCO.
• Automated policy baselines to ensure that patches, configurations, remediations, and other custom and repetitive tasks are continuously and automatically enforced.
• Policy enforcement to reduce desktop and system power consumption.
• Integration with Network Access Control (NAC) solutions to remediate ‘non-compliant’ machines to a compliant state before granting access to the corporate network.

• Trust-Centric Model for Comprehensive Endpoint Protection
  
• Scalable, Single Agent Architecture Provides Agility and Efficiency
  
• Enhanced Operations and Assurance via Unified Relational Content and Integrity Services
  
• Lumension Endpoint Management and Security Suite for Reduced TCO and Complexity

• Free trial of Lumension® Endpoint Management Security Suite
• Lumension® Endpoint Management Platform Strategy
• Optimal Security Blog
• Twitter

• Endpoint Operations
• Vulnerability Management
• Endpoint Protection
• Data Protection
• Compliance and IT Risk Management

• Lumension® Endpoint Management Platform Strategy
• Optimal Security Blog

• 56 percent of individuals surveyed said mobile devices are not secure, representing a risk to data security;
• 49 percent of individuals surveyed said data security is not a strategic initiative for their companies;
• 48 percent of individuals surveyed said their companies have allocated insufficient resources to achieve effective data security and regulatory compliance;
• 47 percent of individuals cited a lack of strong CEO support for information security efforts as a reason for ineffective data security programs; and
• 41 percent of individuals said there was a lack of proactive security risk management in their organizations.

• The Worldwide State of the Endpoint 2010 study was conducted to better understand how emerging technologies, such as Web 2.0, mobile computing and the “consumerization” of IT – the accommodation and integration of employee-owned mobile devices within the corporate enterprise – are affecting business environments and how organizations are managing security risks across IT operations and security; and,
• Significant perception gaps exist between IT security and IT operations professionals related to the complexity of security technologies, misalignment of IT and business objectives, technology integration, and employee skill and knowledge.

• 44 percent of organizations subsidize or plan to subsidize employees’ mobile devices, 40 percent of organizations say employees can connect their own devices to the company network, and 26 percent have policies permitting employees to connect their own devices to the company network;
• 31 percent of respondents said collaboration between IT security and IT operations was non-existent;
• 72 percent of respondents view negligent insiders as a top security threat heading into 2010; and,
• The five most important features for managing endpoint security were identified as:
  • Anti-virus and anti-malware technology (80 percent)
  • Whole disk encryption (70 percent)
  • Application control (69 percent)
  • Patch and remediation management (68 percent)
  • IT asset management (61 percent)

• “This year’s Ponemon Survey reinforces the need for IT security and IT operations practitioners to continually look for better alignment points within their organizations. It’s clear that the level of collaboration between these two groups is still very poor and, as a result, organizations are still grappling with how to most effectively manage and protect their endpoints.”
• “For organizations to feel truly secure in 2010, two things need to happen, in my opinion. One — organizations need to address the growing endpoint complexity that has been exacerbated by point technologies. Central to this would be to look at adopting an endpoint platform- or suite-based approach where several technologies can be integrated and operation and security functions can be addressed with greater efficiency. And two, organizations must think about how to generate greater convergence across their IT operations and security functions for better communication, collaboration and visibility in order to better optimize security to address risks. Threats to the endpoint are not going to disappear in 2010, so it’s time for organizations to be more aggressive, more proactive and much more collaborative.”

• “The State of the Endpoint provides still more evidence that companies are racing to adopt new technologies faster than they can understand their impacts on data security and develop effective use and integration policies. As a result, networks are growing more and more complex, making the task of securing sensitive data more and more difficult.”
• “Endpoint security has always been a challenge, but the State of the Endpoint has identified the factors IT professionals say are responsible for their biggest headaches. Not surprisingly, a lack of CEO support and insufficient resources are among the culprits.”

• Download the Worldwide State of the Endpoint 2010 Survey
• Follow us on Twitter
• Visit the Optimal Security blog for more insight into key survey findings
• View the Worldwide State of the Endpoint 2010 webinar

• More about Lumension® Device Control for System Center
• System Center Alliance
• Optimal Security Blog
• Twitter

• As businesses ready their IT environments for the migration to Windows 7 and Windows 2008 Server R2, Lumension, a global leader in endpoint management and security, understands the complexities and costs associated with migration to the new Windows platform.
• To prepare organizations for the migration to Windows 7 and Windows 2008 Server R2, Lumension is delivering enterprise-ready solutions to support the new Windows platform and servers, while providing the critical information necessary to properly and successfully migrate enterprise-wide.
• To best prepare its customers for the Windows 7 & Windows 2008 Server R2 migration, Lumension conducted a survey of its existing customers to better understand their migration plans and align internal Windows support efforts accordingly.
• According to its survey, only a small portion of Lumension customers said they have immediate plans to deploy Windows 7, but a significant portion, at 32 percent, plan to deploy within 12 months.
• Further, according to Lumension’s recent survey, 26 percent of customers have immediate plans to deploy Windows Server 2008 R2, while a total of 58 percent said they plan to deploy within 12 months, resulting in the new server adoption rate projected at almost twice the new workstation adoption rate in the enterprise. 
• According to InformationWeek Analytics Windows 7 survey, two-thirds of the 669 respondents with Windows 7 deployment plans cite the operating system’s new features as the primary driver or a contributing factor to migration. Yet, key Windows 7 features, including DirectAccess, BranchCache, improved search, power management and better offline folder access, depend on 2008 R2 server functionality.

• Following a thorough assessment of its customer base on their plans for Windows 7 and Windows Server 2008 R2 adoption, Lumension has taken critical steps to ready and enable organizations to successfully migrate Lumension solutions to the new Windows platforms.
• To that end, Lumension’s support for Windows 7 and Windows Server 2008 R2 includes its Lumension® Patch & Remediation, Lumension® Security Configuration Management, Lumension® Content Wizard, Lumension® Application Control, Lumension® AntiVirus and Lumension® Device Control to help organizations manage critical risk while proactively protecting vital information.
• Lumension plans to extend support for Lumension Patch and Remediation v6.4 and Lumension® Scan to ensure compatibility with Windows 7 and Windows Server 2008 R2 in the next 90 days to ensure seamless support for customer migration goals.

• Dee Liebenstein, VP of Product Management for Lumension
  • “Our charter at Lumension has and continues to be focused on arming our customers with the solutions that fit their needs at the right moments in time. To ensure that our customers are fully prepared for the Windows 7 and Windows Server 2008 R2 migrations, we conducted an end-user survey to better understand their migration plans so that we could align with their needs, versus the alternative. As a result, we feel confident that our support of the new Windows platforms will further strengthen our customers’ security posture while lowering TCO associated with optimal endpoint management and security.”

• Lumension Windows Information Center
• Step-by-Step Windows 7 Migration
• Optimal Security Blog
• Twitter

• As the sophistication of malware continues to increase, coupled with the expansion of Web 2.0 technologies and increased browser-based risk, malicious code is on the rise. More than 21 million unique instances of malware have been identified, and that number continues to grow exponentially.¹
• To combat this, organizations need a comprehensive endpoint protection strategy that employs multiple techniques to identify and block both known and unknown malware and zero-day exploits.
• To give IT administrators a solid view into both the known and unknown or dormant malware threats that exist, Lumension, a global leader in endpoint management and security, today unveiled Lumension® AntiVirus, a complementary technology to its whitelisting-based solution, Lumension® Application Control.
• Combined with Lumension’s other endpoint protection capabilities, Lumension AntiVirus provides the protection against blended attacks needed to safeguard Windows-based endpoints, which are often the prime targets for malicious attack.
• The combination of Lumension AntiVirus plus Lumension Application Control provides a total defense in-depth strategy– which helps customers address zero-day threats by blocking installation of unknown files on endpoints with malware quarantine and removal approach to provide multi-dimensional protection against current and future malware threats.
• Taking this layered approach, enterprises now have more flexibility to achieve strong and comprehensive endpoint protection using complementary solutions from Lumension.

Key Features of Lumension® AntiVirus

• Antivirus (AV) protection – provides in-depth signature matching to recognize, block and remove viruses, worms, Trojans and other varieties of malware.
• Antispyware (AS) capability – protects against malicious spyware such as keyloggers, hijackers, rootkits and other malicious software that jeopardizes organizational IT security and/or network performance.
• DNA Matching and SandBox – DNA Matching identifies fragments of malware code that are often reused in new variants and attacks; by identifying this remnant malware code, LAV can prevent new variants without relying on a full signature match.  The LAV SandBox executes suspect code in a fully virtual environment to explicitly identify malicious behavior; this behavior-based approach to malware protection offers a powerful layer of security against new and unknown attacks not available in signature-only models.
• Exploit Detection – detects and quarantines hidden or embedded malware inside of disguised files and documents to provide a protective layer against malicious attacks disguised as legitimate files (e.g., an executable in a PDF file).
• Comprehensive Cleaning Functionality - ensures that any detected malware is removed or quarantined and not allowed to remain on network assets.

Supporting Quotes

Mike Wittig, President and CTO,  Lumension
“While no current antivirus solution is 100 percent effective at combating signature-based attacks, there is a definite value in incorporating AV into an overall endpoint protection strategy.  By bringing together the signature-based blacklisting and behavioral approaches of Lumension AntiVirus with our existing whitelisting technology, we are able to extend the level of protection with a truly multi-dimensional approach to endpoint protection. Adding Lumension AntiVirus to the endpoint security arsenal allows us to provide organizations with a multi-layered approach to endpoint protection all from a single vendor without all of the hassle of managing disparate technologies.” 
 

Eric Ogren, Principal Analyst, Ogren Group
“As the explosion of viruses and data-stealing crimeware continues to wreak havoc on corporate networks, IT administrators need to take an increasingly more proactive and blended approach to endpoint protection. Lumension now offers solution layers that close system vulnerabilities, identify and remove attacks, and protect against malware from Web 2.0 threats. Organizations that adopt such a coordinated defense will be better-suited to protect against threats, keeping their network, endpoints, and business resistant to the daily influx of newborn malware.”

Supporting Resources:

• More about Lumension AntiVirus
• Relevant whitepapers:
  • The Past, Present and Future of Whitelisting
• Follow us on Twitter
• Learn more about the Optimal Security blog

Lumension AntiVirus is available today. For more information, please visit Lumension AntiVirus.

As a result of HPD’s deployment of Lumension® Vulnerability Management which consists of Lumension® Patch and Remediation and Lumension® Content Wizard (formerly PatchLink Developer’s kit), Jacob’s IT staff has more time to spend on projects that directly improve doing business, rather than being bogged down hunting risks and remediating breaches. Through the combined solutions, New York City Department of Housing Preservation and Development is able to rapidly and accurately assess risk and remediate unpatched vulnerabilities in a timely manner across a distributed environment.  Jacob also credits Lumension, in part, with a reduction in help desk calls, which are down about 75 percent from a few years ago.

“You have thousands of workstations, so that’s thousands of endpoints where vulnerabilities could hurt you says Ray Jacob, director for network and systems management, NYC HPD.” “Without a vulnerability management solution to protect those endpoints, what exists is a gaping hole. Having Lumension in place gives us a very high level of confidence in that area; that confidence is supported by the positive results we’ve experienced in the last several years.”

NYC HPD deployed Lumension® Patch and Remediation for automated vulnerability management in 2004 to protect its IT environment from the latest threats and reduce IT risk exposure. To address its software updating concerns, HPD deployed Lumension® Content Wizard in 2009 as a means to push software enhancements and applications out to each of its workstations.

Supporting Resources:

• HPD case study
• Lumension Optimal Security Blog
• YouTube Channel
• Manage Critical Risk Resource Center

For a free 30 day trial of our award-winning Lumension Vulnerability Management, please click on FREE EVAL.

The first in the series, The Naked Truth about Compliance and Risk: Bottom Up Vs. Top Down, kicks off the Optimal Security Videocast with interviews with Lumension executives and security experts as well as testimonials from various industry leaders talking about such topics as reducing audit tax and turning compliance into a competitive advantage.

In the current videocast, featuring C. Edward Brice, SVP worldwide marketing and Bryan Fish, director of product management for Lumension, organizations will learn:

• How to understand the key challenges companies face in addressing key IT GRC initiatives;
• How to ask the right questions to effectively mitigate risks;
• How to set boundaries and learn the best way to manage compliance mandates; and
• The best practices for your organization.

“More than ever, organizations need to better understand how to proactively manage their security risks, to ensure effective security processes are in place,” said C. Edward Brice, SVP worldwide marketing, Lumension. “The Optimal Security Videocast Series was created as a resource for IT security professionals to gain insight into industry best practices for better understanding, monitoring, assessing and reporting on their organization’s security posture. We are thrilled to be able to continue to develop resources and toolkits that arm the security community with the solid foundation needed to ensure efficient security practices are always in place.”

Multimedia:

• Lumension Optimal Security Blog
• YouTube Channel
• Twitter

Lumension podcasts are viewable here. Users can subscribe to Lumension podcasts via the iTunes store or on the Lumension YouTube Channel.

In a recent report commissioned by Lumension, the global leader in endpoint management and security, and conducted by The Tolly Group, the study shows a total cost of ownership comparison of Lumension® Vulnerability Management solution against Microsoft’s Windows Server Update Services (WSUS). Although Microsoft provides their patching technology free of charge, Lumension provides a wider range of services including patching Microsoft, non-Microsoft applications, custom applications, built-in reporting, network visibility and more. Lumension Vulnerability Management solution also provides a much lower total cost of ownership in labor time, and can help enterprises with over 500 workstations save 64 percent or 400,000 dollars over a five year period.

“This is a strong indication that free patch management software doesn’t always prove to be efficient over time,” says Kevin Tolly, founder of The Tolly Group. “Lumension’s Vulnerability Management solution cost of ownership advantage over Microsoft comes from its diverse application support, powerful operational tools which include custom content creation, software removal and extensive built-in reporting capabilities which WSUS do not provide. While free tools appear to be the obvious choice, a complete patch management solution might be the better option to reduce long-term risk and operation expenses over time.”

“The findings from the Tolly Group reinforce the cost savings and level of security Lumension Vulnerability Management provides to our customers,” said C. Edward Brice, SVP worldwide marketing, Lumension. “Lumension Vulnerability Management solution provides a greater value in yearly cost savings and can save IT administrators almost half the labor and hours each month when patching Microsoft and non-Microsoft patches. While most organizations may be drawn to the concept of free software, security is a high priority where malware and vulnerabilities are continually increasing, posing greater risk to the enterprise security posture. This report was commissioned to help organizations better understand the risks and benefits of adopting a solution that can protect only one type of platform versus today’s unique IT environment that consists of complex, highly distributed IT infrastructure. Through Lumension Vulnerability Management, Lumension offers enterprises a comprehensive, cost-effective solution to manage critical risk and ensure security processes and policies are in place.”

For the complete report and analysis comparing the two solutions, please visit Lumension Vulnerability Management vs Microsoft Windows Server Update Services.

Multimedia:

• Lumension Optimal Security Blog
• Lumension Vulnerability Management vs Microsoft Windows Server Update Services whitepaper
• Free Trial of Lumension Vulnerability Management Solution
   

• A typical organization spends 30-50% more on compliance and IT risk policy management than it should, according to the IT Policy Compliance Group.
• Given today’s highly regulated business environment combined with the rising cost of compliance, organizations need a comprehensive solution that provides high visibility and continuous monitoring of their compliance and IT risk posture, while supporting greater levels of automation across audit workflows.
• In an effort to continually arm customers with technology solutions that address their growing security and compliance needs, Lumension, the global leader in endpoint management and security, today announced the general availability of the Lumension® Risk Manager (LRM) product, the latest addition to its Lumension® Compliance and IT Risk Management Solution.
• Lumension Risk Manager helps organizations achieve lower costs of compliance by automating IT audit workflows, harmonizing controls with policy requirements, and providing greater visibility across IT assets for optimal security and compliance management.
• Further, through a partnership with Network Frontiers, Lumension has integrated the Unified Compliance Framework within Lumension Risk Manager. This integration delivers a library of over 400 authoritative documents and 2500 harmonized controls. Periodic updates to the UCF framework ensure customers will always have the latest compliance and control requirements.
• Lumension Risk Manager is further enhanced with the patent-pending Lumension Risk Intelligence Engine. This technology automatically identifies control requirements for compliance regulations and is determined by the IT assets’ risk profile inputs. This automated capability allows organizations to quickly identify controls required to support multiple compliance and policy initiatives and reduce their dependence on outside consultants. • This new offering from Lumension speaks to the company’s commitment to delivering on its compliance product roadmap, as outlined during the acquisition of Securityworks earlier this year.

Key Benefits of Lumension Compliance and IT Risk Management:

• Reduction in External Audit Resources: Lumension Compliance and IT Risk Management Solution provides IT organizations with a comprehensive compliance and IT risk management framework. IT resources are associated with critical business interests, and harmonized controls are established to meet multiple compliance and policy mandates. This capability supports a reduction in third party consulting resources used to define control and policy requirements to support external regulatory mandates.
• Assess Once, Comply with Many: With Lumension Compliance and IT Risk Management Solution, organizations can reduce their audit burden and overall cost of compliance by measuring and reporting on compliance across multiple industry and governmental regulations while harmonizing control requirements to best meet these mandates. These capabilities will enable organizations to assess once and report on many regulations simultaneously, rather than using multiple technologies that usually lack a complete, global view of regulations.
• Focus on IT risk that matters most to the business: With Lumension Compliance and IT Risk Management Solution, companies can continuously monitor their overarching risk and compliance posture and proactively identify and prioritize IT risk deficiencies in the context of their overall compliance and policy requirements. This enhanced visibility allows organizations to more efficiently utilize existing IT resources to address those deficiencies impacting organizational compliance and IT risk posture the most.

Supporting Quotes

• Rob Isarel, CIO, John C. Lincoln Health Network
  • "For our organization, the key to compliance and IT risk management solution is that it gives us a high-level view of what regulations and policies we need to comply with regulatory requirements. One person can’t possibly be on top of all the details of the various regulations we’re faced with today. Likewise, no one person can be an expert on all of the IT and security systems needed to comply with these regulations. We wanted a solution that automates all of this for us – a shrink-wrapped solution that helps us focus on critical issues and ensures we don’t overlook anything. With Lumension Risk Manager, we can store information related to all our disparate systems – such as our asset and device management software, e-health analyzers, and help desk application – in one repository. And we can generate a single report on all of those systems all from a single vendor.”

Charles Kolodgy, Research Director, Security Products, IDC

• “The IT risks that lurk within organizations today are immense. Regulatory requirements imposed on organizations makes proper risk management an increasingly daunting task. To ensure compliance and a solid security and risk posture, organizations can no longer afford to manage risk in a siloed or manual way. A technology solution that normalizes regulatory mandates is critical to success, but it is just one piece of the puzzle. The other piece is solid communication throughout the organization but especially within IT security and IT operations teams. With visibility, controls for regulatory compliance and security controls, and cross-organizational communications, enterprises will be better armed to mitigate, manage and understand their IT risks than ever before.”

Mike Wittig, President & CTO, Lumension

• “Compliance, over the past few years, has become a four-letter word for many security practitioners as it conjures up visions of late nights spent poring over data points and audit profiles to ensure that their organization is fully compliant with the overwhelming number of IT compliance-related mandates that exist today. Our vision with Lumension Compliance and IT Risk Management and a main driver behind our acquisition of Securityworks this past spring, is to provide our customers with the technology they need to make their IT compliance and risk management processes more manageable, automated and repeatable. With Lumension Compliance and IT Risk Management Solution, our customers will gain the necessary visibility between operational endpoint security and strategic IT risk that’s required for a better connected, smarter run, more efficient IT organization than ever before.”

Supporting Resources:

• Recent IT-GRC blog posts written by Lumension experts and guest blogger Rob Israel
• More about Lumension Risk Manager
• More about Lumension Compliance and IT Risk Management

Lumension Risk Manager will be made available on September 30, 2009. For more information, please click on Lumension Risk Manager.

To find out how Lumension Compliance and IT Risk Management Solution addresses compliance requirements such as PCI DSS, click to view our On-Demand Demo.

The benefit of an online forum is that it provides a platform for peers to connect, interact and build relationships with one another, as well as share all kinds of information—including tips and tricks as well as new innovative ways to use and improve security solutions. Lumension Connect is an innovative platform for customers to share with key Lumension stakeholders about the pros and cons of current offerings and how they use it to fit their organizations’ ever-changing unique needs. Key features of Lumension Connect include:

• Open forums full of rich media sharing of videos, images and audio content
• Customer profiles that are individually customizable
• Groups to support relevant content as organized by community members
• Events that include live chat capabilities for real-time interaction
• Polling features, including voting and ranking widgets for products, features, etc.

“Since its inception, Lumension has maintained a strong customer focus, developing critical solutions for our customers by involving them throughout the development process in order to make the products even better and more superior,” said Pat Clawson, chairman and CEO of Lumension. “The key aspect as well as the passion behind Lumension Connect is providing an interactive forum for our customers to connect, collaborate and fuel co-innovation. This collaborative forum is where our customers can talk about security challenges, exchange ideas and identify solutions for greater co-innovation to help create better products and services as well as shorten time-to-market and reduce costs – all of which enable our customers to have a more satisfying and educational Lumension experience.”

“Lumension has taken customer interaction to a new level with the creation of the Lumension Connect online community,” said William Bell, director of security, ECSuite.com. “The social networking aspects of the community really drive interaction between customers on a different level than what traditional message boards and knowledgebase articles can provide. As customers, we are always looking for new and innovative ways to work with the products that we purchase from a vendor. Lumension has stepped up and provided a location for customers to connect, collaborate and share ideas and best practices with their peers worldwide.”

“Our customers are our single most important asset and differentiator,” said C. Edward Brice, senior vice president of worldwide marketing at Lumension. “To that end, we are looking to build a stronger channel of communication with our customers through Lumension Connect by empowering them to define the way endpoint security software is developed and deployed to effectively address today’s evolving threats. Further, this powerful platform will enable our customers to freely exchange ideas, co-innovate, share best practices with their peers and our stakeholders and, most importantly, directly influence and impact the way we develop and market our solutions to meet their business needs.”

Multimedia:

• Lumension Connect Videocast w/ Cindy Kim and Chris Hewitt on the key benefits of the online community
• Lumension Optimal Security Blog: Lumension Connect: Fostering Collaboration and Co-Innovation for its Customers

“Over the years, Ireland has proven itself to be a vibrant economy that boasts technological innovation at many levels,” said Pat Clawson, Chairman and CEO of Lumension. “The new office in Ireland offers important assets that will help Lumension accelerate its growth, including a talented workforce, modern infrastructure, ready to deploy business facilities, and lower cost of doing business.”

“Ireland provides a rich pool of talent in research and development. Despite the challenging economic landscape, Lumension is committed to continued efforts in recruiting and extend the advancement of research and development across all four key areas of the company’s solution suite, including Vulnerability Management, Data and Endpoint Protection, and Compliance and IT Risk Management,” Clawson continued.

Lumension firmly believes the new region will help drive operational excellence based on Ireland’s attractive tax incentives, further allowing the company to streamline costs across the entire organization while focusing on technology innovation. According to the U.S. Department of State, Ireland is attractive to many U.S. businesses based on numerous factors, the high quality and flexibility of the English-speaking work force; strong intellectual property protection; cooperative labor relations; political stability; pro-business government policies; a transparent judicial system; and an existing cluster of international corporations operating successfully.

Lumension initially plans to hire over 30 new employees in the region to build out development and technology research areas with plans to grow its operations in the coming years. The Industrial Development Agency of Ireland will launch an event to celebrate the opening of Lumension’s new business operations in Ireland on August 12, 2009.

Lumension has maintained a strong presence in Europe since 1991 and supports additional EMEA offices in Luxembourg, the United Kingdom and Spain. Worldwide headquarters for Lumension is located in Scottsdale, Arizona.

About Lumension Security, Inc.

Lumension Security, Inc., a global leader in operational endpoint management and security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Utah, Florida, Luxembourg, the United Kingdom, Ireland, Spain, Australia, and Singapore. Lumension: IT Secured. Success Optimized.™ More information can be found at www.lumension.com.

Lumension, the Lumension logo, are trademarks or registered trademarks of Lumension Security, Inc. All other trademarks are the property of their respective owners.

• On May 12, 2009, the U.S. Patent and Trademark Office (“PTO”) issued an Ex Parte Reexamination Certificate to Lumension Security, Inc., stating that more than 50 claims of Lumension’s U.S. patent relating to its proprietary patching technology (U.S. Patent No. 6,990,660, or the “ ‘660 Patent”) are considered patentable, as amended.
• On May 19, Shavlik Technologies, LLC (“Shavlik”) filed an Inter Partes reexamination request with the PTO, asking the PTO to reexamine the Lumension patent. This was the second reexamination request filed by Shavlik, and was filed after the first reexamination had successfully concluded for Lumension on May 12, 2009, as stated above.
• On July 24, 2009, the PTO granted the Inter Partes reexamination request, but simultaneously issued an Action Closing Prosecution where all existing claims of the ‘660 patent (i.e., reexamined claims 1-5, 8-23, 25-48 and 51-61) were confirmed as being patentable.
• On July 27, 2009, the U.S. District Court for the District of Arizona lifted its stay on the related Lumension/Shavlik litigation and gave the parties a period of time within which to meet and confer prior to setting a scheduling conference.

"I am pleased to see that the U.S. Patent Office agrees, now for a third time, that our proprietary patching technology is patentable,” said Pat Clawson, Chairman and CEO of Lumension. “The U.S. District Court also lifted its stay on our pending litigation, giving us the opportunity to aggressively protect our intellectual property. Our IP is an important piece of our leadership in the vulnerability management market, and we will defend it vigorously.”

Lumension’s Patch and Remediation products are currently used by companies worldwide to prevent security breaches from occurring within corporate IT networks and endpoints. Lumension Patch and Remediation technology is a component of the company’s vulnerability management solution suite, which helps IT professionals proactively manage and automate their vulnerability management process in order to prevent malware from infiltrating or attacking vital corporate data.

To help protect your vital assets and effectively manage critical risks, download a free trial of Lumension’s award-winning Vulnerability Management, Data and Endpoint Protection, and/or Compliance and Risk Management.

About Lumension Security, Inc.

Lumension Security, Inc., a global leader in operational endpoint management and security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Utah, Florida, Texas, Luxembourg, the United Kingdom, Germany, Spain, France, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized.™ More information can be found at www.lumension.com.

Lumension, Lumension Patch and Remediation, Lumension Vulnerability Management Solution, “IT Secured. Success Optimized.” and the Lumension logo are trademarks or registered trademarks of Lumension Security, Inc. All other trademarks are the property of their respective owners.

• The combination of the ongoing recession and increasing cyber threats is only adding to the already heightened security risk for businesses today. To that end, Lumension, the global leader in security management, takes you inside the underground cybercrime economy through its newest webinar series, “Profiles of the World’s Top Hackers,” for an insider’s look at global hacker cybercrime, how threats are evolving and how it’s impacting today’s business environment.
• The first in the series of live webinars – to be held on June 30 at 9am PT –features Michael Calce, a.k.a Mafia Boy, one of the most notorious cyber hackers in the United States; Bryon Acohido, reporter for USA Today and author of Zero Day Threats; as well as Paul Henry, security and forensics analyst at Lumension.
• The current economic climate has undoubtedly created more opportunities for hackers, criminals, and industrial espionage firms who are targeting critical infrastructure and systems to steal sensitive information – an organization’s crown jewels. In fact, data theft and breaches from cybercrime may have cost businesses as much as $1 trillion globally in lost intellectual property and expenditures for repairing damage.
• For the second webinar in the series, Lumension will feature experts from both sides of the industry – the cybercrime underground and the threat intelligence agency to discuss the next evolution in cyber attacks and how businesses can stay ahead of emerging threats.
• The Profiles of the World’s Top Hackers campaign by Lumension is intended to be both educational and thought leadership-driven as a means to provide an insider’s look at the world of cybercrime, educate the business community on how hackers are evolving their techniques and to both inform the public and debunk any myths around cybercrime and cybercriminals.
• To participate live, Lumension invites those on Twitter to ask questions to be addressed during the first webinar in the series, slated for June 30 at 9am PT. Please use the following hashtag: #TOPHCKR1. To register for the webinar, please click HERE.

Supporting Quote from Paul Henry, Security and Forensics Analyst, Lumension

“As the current economic climate continues to change, the security industry as a whole is seeing more and more how cybercrime impacting businesses’ bottomline. Through this webinar series, we have the unique opportunity to educate the industry on how hackers’ techniques have evolved and how and why motives and targets change. This gives businesses a chance to learn from past mistakes as well as talk with industry giants who can give real tips on how to continually be one step ahead of the changing threat landscape.”

Supporting Quote from Bryon Acohido, reporter for USA Today and author of Zero Day Threats

“As I’ve seen time and time again, the big missing ingredient with large data breaches and cybercrime in general is public awareness. Without a higher degree of transparency of major breaches and open discussion and collaboration among the good guys, movement toward a safer Internet will continue to be constrained. I’m excited to participate in this webinar in an effort to better educate the general public on what we can do moving forward to no longer lay victim to hacker activity.”

Please contact Jessica Sutera or Cindy Kim to arrange for further quotes regarding this announcement or to request an interview with a Lumension executive.

Relevant Links:

• Lumension Optimal Security Blog
• Digg This
• Post to Del.icio.us
• Tweet This
• YouTube Channel
• Facebook page

Network Frontiers’ Unified Compliance Framework helps enterprises simplify and centralize compliance efforts by providing a single framework to establish a common set of methods, procedures, and controls across industry mandates, standards, requirements, and guidelines.

The UCF rationalizes IT controls for more than 400 international regulatory requirements, standards and guidelines into a single set of straightforward requirements that clearly map the many points where global, state and industry regulations overlap. This enables organizations to easily define commonalities among regulatory bodies; to leverage policies, processes and tools already in place; and to establish a streamlined, cost-effective plan to achieve continuous compliance across the enterprise.

The integration of Network Frontiers’ UCF and Lumension® Risk Manager (shipping in the second half of 2009), enables enterprises to manage compliance requirements more effectively by utilizing controls and standards that have been clearly defined and eliminate redundancy.

Through Lumension® Risk Manager, customers will have direct access to the UCF’s comprehensive compliance database, allowing organizations to:

• Create a single point of reference for hundreds of complex regulations, requirements and guidelines
• Assert compliance across multiple authority documents simultaneously
• Eliminate redundancies by eliminating overlapping requirements and documents
• Drill down for comprehensive explanations and sources for each common control

“Key to simplifying compliance management and reducing costs is leveraging the appropriate tools and technologies,” said Brandon Dunlap, Managing Director of Research at Brightfly. “The Unified Compliance Framework allows security professionals to easily address hundreds of regulations by harmonizing a set of controls against which all regulatory standards and best practices are mapped. By adopting the UCF, compliance related technology vendors are providing a real value-add to their customers: to implement a single set of controls and comply with many different industry regulations and standards while reducing significant costs related to compliance with mandates such as PCI-DSS (Payment Card), Sarbanes Oxley, CobiT, NIST and many others.”

Director of Solution Marketing at Lumension Jeff Hughes commented: “As regulations and technology practices have mounted over the years, organizations continue to struggle to keep ahead of the latest requirements. Adding to the compliance chaos is the onslaught of new mandates that are introducing new standards, requirements, processes, controls, and guidelines. Enterprises need a way to link security activities with compliance mandates in order to fill gaps and provide visibility for auditors. Through the UCF, our customers can achieve a more cost effective, streamlined plan, reduce complexity and cut costs of compliance and audit by rationalizing their IT controls through a single framework for a cohesive look into the organization’s compliance and risk posture.”

“Further, the UCF allows our customers to enhance their compliance and risk management efforts to manage critical risk and comply with multiple industry and global regulations under a single umbrella. I believe it’s a great way to provide value-add for our customers by further simplifying regulatory mandates and bringing sanity to the world of compliance chaos.”

The UCF includes controls from a variety of regulations and guidelines, including Sarbanes-Oxley (SOX), Basel Data Security Standard (PCI DSS), NASD Manual, HIPAA, FERC Security Program, Uniform Electronic Transactions Act, IRS Revenue Procedure and Federal Rules of Civil Procedure.

“The only way to take full advantage of the UCF is to leverage our common controls in a solution which incorporates the UCF,” said Craig Isaacs, CEO of Network Frontiers. “Lumension Risk Manager leverages the UCF to ensure enterprises can get a broad and deep view of their security and regulatory profile, automatically identify key concerns, and remediate risk effectively and efficiently within the context of standardized compliance regulations and controls.”

Links to Lumension’s Multimedia

• Optimal Security Blog: Naked Truth about Compliance and Risk Management: Bottom Up vs. Top Down Approach
• Optimal Security Videocast on Compliance and Risk Management
• Whitepaper: Five Ways to Reduce Your Audit Tax

Lumension is currently finalizing the integration of the UCF database and it will be made available to all Lumension customers currently utilizing Compliance and Risk Management solutions.

New enhancements and key features to Lumension® Endpoint Security v4.4 include:

• Enhanced Encryption Capabilities– ensures customers are provided with the most reliable, safe and secure data protection solution with full, unlimited capacity encryption capabilities from the endpoint, administrator-defined passwords. The Lumension Cryptographic Kernel (LoCK) encryption technology is in the process of being validated for FIPS-140-2 (level 2) certification
• Expanded OS Platform and Virtualization Support – extended support for Windows Server 2008, SQL Server 2008, and virtualized server configurations allow organizations to reduce total cost of ownership and supports server-side cost reduction and “green” initiatives
• Extended Reporting and Database Optimization – new Syslog support and database optimization lowers administrative burden, reduces database footprint, increases query speeds, and improves maintenance for lower administration costs

“Data protection continues to remain a significant priority for many enterprises today and in order for enterprises to protect sensitive data, they need to adopt proactive security methodologies to safeguard confidential information,” said Dee Liebenstein, vice president of product management. “The new enhancements to Lumension® Endpoint Security are a continued effort to provide our customers with improved product features and functionalities, further help organizations mitigate and manage their risk and protect vital information with improved management in order to keep costs to a minimum.”

Availability

Lumension® Endpoint Security v4.4 is now available worldwide. For a free trial of the latest version of Lumension® Device Control and/or Lumension® Application Control, please visit http://www.lumension.com.

Resources

Portable Panic: The Evolution of USB Insecurity

New Insider Threat Emerges in the New Economy

“Today’s work environment is proving to be a challenge for IT administrators and security professionals as employees introduce new risks through the use of removable media, mobile devices, laptops, and Social Web applications without putting security at the forefront,” said C. Edward Brice, senior vice president of worldwide marketing. “In an attempt to bring awareness around Web 2.0 security risks and challenges, we took an innovative approach by working with Spark Design to develop an interactive game that would educate the IT audience on top security risks that may not be top of mind for IT professionals.”

“The Office Campaign is designed to educate IT professionals on how they can address these security risks with key technologies such as Vulnerability Management, Data Protection, and Endpoint Protection to cure common office headaches.”

The Spectrum Awards recognizes outstanding efforts in the fields of marketing research, direct marketing, advertising, online marketing, multi-cultural marketing and public relations. These prestigious awards give marketing professionals an opportunity to gain peer recognition and reward for their outstanding work in local communities. The complete list of finalists and winners for the American Marketing Association Spectrum Awards is available online at http://www.amaphoenix.org/spectrum09winners.htm.

The Lumension DCSC seamlessly integrates into the Configuration Manager 2007 environment, eliminating the need for Microsoft customers to implement separate hardware and software to employ data security across their network. Lumension DCSC allows customers to use the Configuration Manager 2007 console and standard user interface to create, deploy and monitor very granular device control policies across groups and devices managed by the System Center. Policies will be continually enforced even when systems are not connected to the System Center environment. Additionally, organizations managing virtualized systems with Configuration Manager 2007 can use Lumension DCSC to enforce policy on the virtual USB and CD/DVD hardware. The same policy and enforcement capabilities are supported for both host (physical) and guest (virtual) systems.

“Data security continues to remain a top priority for organizations everywhere and we are excited to extend the tried and proven capabilities of Lumension Device Control into the Microsoft System Center environment to help organizations better protect data against leakage while continually enforcing policies across their IT environment,” said Rich Hlavka, SVP Business Development, Lumension. “Customers have made it clear they want to leverage the power of Configuration Manager to implement more advanced security configurations. Lumension Device Control for System Center will enable them to add market-leading data protection and malware control capabilities quickly and efficiently across their existing System Center managed infrastructure.”

“By centrally managing, deploying, enforcing and monitoring device access and file transfer policies via the already established Configuration Manager environment, Microsoft customers can significantly reduce additional implementation costs and quickly enhance their security policy enforcement,” continued Hlavka.

“Microsoft System Center delivers the management and monitoring capabilities customers require for their IT operations, while providing an open environment for partners to extend the functionality to address additional needs within the complex enterprise environment,” said Ryan O’Hara – Director, System Center Product Management, Microsoft. “Lumension has extended our management capabilities by creating a Microsoft System Center Configuration Manager 2007 integrated solution delivering data protection and data encryption for customers, areas that are critical for data security within the enterprise and provide added security for customers.”

With Lumension DCSC, Microsoft customers can:

• Minimize data loss or theft by enforcing USB device usage and data encryption policies;
• Prevent unauthorized devices from connecting to endpoints within the organization;
• Automatically encrypt critical information on removable devices and media; and,
• Prevent introduction of malware via USB devices. I

In conjunction with the enhanced capabilities, Lumension is also announcing a Lumension DCSC beta test program for interested Microsoft System Center customers and partners starting May 4, 2009. Product and beta test information is available at Lumension Device Control for System Center..

Lumension DCSC is currently scheduled for general availability in Q3 2009.

For a free trial of the award winning Lumension Device Control, please click on Free Eval.

About Lumension®

Lumension Security, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Utah, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized. More information can be found at www.lumension.com.

Lumension, the Lumension logo, are trademarks or registered trademarks of Lumension Security, Inc. All other trademarks are the property of their respective owners.

Improved Operational Efficiency and Lowered TCO with Endpoint Security Suite

With the combined power of Lumension® Device Control and Lumension® Application Control within the Lumension® Endpoint Security Suite, enterprises can dramatically reduce risk due to data loss and the insider threat with a minimum investment – an important factor for organizations large and small who are under the gun to improve overall security measures with flat or even reduced budget parameters. New enhancements and key benefits include:

• Validated encryption capabilities via in-process FIPS 140-2 Certification – assures customers in both the public and private sector of the most reliable, safe and secure data protection solution
• Expanded OS platform and virtualization support – allows organizations to take advantage of advances in virtualization technology to reduce operational costs
• Extended reporting and database optimization – lowers administrative burden while significantly reducing database footprints (50% reduction), allowing for 64% increase in query speeds, thus lowering administrative costs

Lumension Vulnerability Management: Optimizing IT Operations

Considering that the vast majority of cyberattacks exploit known security flaws, vulnerability management has never had greater importance than today when it comes to managing risk. It remains the single most effective security defense a company can undertake to manage its greatest amount of risk with the lowest possible cost. To that end, the newest versions of Lumension Patch and Remediation and Lumension Scan were designed to optimize IT operations’ patch management efforts.

New enhancements and key benefits include:

• The broadest non-Windows content coverage – now provides the deepest Linux and Unix coverage to optimize IT operations by automating patch and remediation across all systems and servers
• Optimized management of Windows and non-windows patches – new account management capabilities provide simple sign-on for entitled non-Windows content along with prerequisite patch management to reduce administrative burden
• Enhanced inventory visibility for virtual machines – now automatically identifies and groups virtual machines for more effective vulnerability management and visibility of both physical and virtual environments from a single console
• Network Access Control (NAC) Integration – integrates with existing NAC infrastructure to automatically assess and remediate non-compliant endpoints that try to access the network, thus improving the organization’s overall security posture Security and Systems Management Capabilities – centralizes the management, policy enforcement, and reporting of security and systems management tasks

"As IT complexity increases, Lumension’s data and endpoint protection combined with vulnerability management solutions enhance customers' ability to protect vital information and manage critical risk," said Charles Kolodgy, research director for Security Products at IDC. "Lumension's comprehensive suite of solutions provides enterprises with smart, cost-effective tools that can mitigate the ever increasing range of security risks facing organizations today."

In addition to the enhancements to Lumension Patch and Remediation and Lumension Scan, Lumension has also made some important updates to Lumension Content Wizard, which simplifies the creation and management of custom software patches, scripts, and desktop configurations. The goal with this set of enhancements was to further improve IT efficiencies and overall security posture for enterprise organizations. Key enhancements to Lumension® Content Wizard include:

• Power Management Wizard –Centralizes and enforces desired OS power options across the network, including monitor, hard drive, standby, and hibernation settings and timing. According to Gartner organizations that practice PC power management can save tens of thousands of dollars per year. For example, in a shop of 2,500 unmanaged PCs, Gartner projects annual savings of $43,300.1
• Wizard-Based Content Creation – provides easy-to-use wizard-based creation of custom software patches and remediations along with security and systems management configurations
• Software Removal Wizard - quickly identifies installed software on endpoints and determines which unsupported or unlicensed applications should be uninstalled.
• Local Policy Set Wizard - easier setting of local security configuration policies, such as disabling guest accounts, unnecessary services, password complexity and length, unattended systems log off, via the new policy wizard
• Content Exchange Forum – allows content collaboration made simple via a company internal site access thru the Lumension Content Wizard 1PC Power Management Activation Leads to Significant Power and Cost Savings, Gartner, February 2009

“The external and internal exchange of critical corporate data within the workplace is happening at an unimaginable pace, while the rise of malware and cyberattacks continue to occur at unprecedented levels. The only way companies can effectively combat today’s security threats is by proactively mitigating and managing risk,” said Mike Wittig, president and CTO of Lumension. “At the crux of the security issue is balancing the onslaught of new security threats with the total cost of ownership over your technology investment. With our new product enhancements, we are offering our customers a cost-effective solution to manage critical risk and protect sensitive corporate data.”

“Our goal behind the enhancements to our products is two-fold,” said Dee Liebenstein, senior director of product management. “First and foremost, we are continually evolving our product features and functionalities to further empower enterprises to simply security management and keep threats at bay. Second and equally important is to enhance PC power management capabilities through these product upgrades. Given the budgetary pressures, more organizations are realizing that the greatest savings come from employing power management features. By utilizing Lumension Content Wizard’s power management features, companies can achieve remarkable savings while supporting green initiatives and reducing total endpoint TCO.”

Availability

Lumension Vunerability Management is now available. Lumension Endpoint Suite will be made available June, 2009. For a free trial of the industry leading solutions, please visit Lumension Free Eval.

Lumension @InfoSecurity Europe

Please visit Lumension at booth # J60 Earl’s Court at InfoSecurity Europe 2009 where, at the top of every hour while the show floor is open, you can learn the latest trends and security best practices.

About Lumension Security, Inc.

Lumension Security™, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized. More information can be found at www.lumension.com.

Lumension, the Lumension logo, are trademarks or registered trademarks of Lumension. All other trademarks are the property of their respective owners.

In today’s Web 2.0 world, businesses face a tough IT environment – emerging Web threats such as polymorphic and stealth malware coupled with risks introduced by highly distributed software, leaving more organizations unsure of the secure state of the software running on their endpoints. In this dynamic IT environment, organizations need solutions that provide an effective way to regain control of endpoints by establishing a trusted application environment that prevents execution of unwanted software and eliminates security threats from unknown malware.

The Lumension Endpoint Integrity Service (EIS) will enable solutions from multiple vendors, including Microsoft and Lumension, to validate endpoint software integrity by definitively identifying compromised or unapproved software. These solutions will be designed to more effectively address the threat of unsignatured or unknown malware that evades traditional perimeter and host-based endpoint security solutions such as antivirus, antispyware, and intrusion prevention systems.

The Lumension Endpoint Integrity Service is designed to support a wide range of advanced security solutions such as: software policy compliance, whitelist audit and enforcement, security configuration validation and drift avoidance, software license and security management, and change control process enforcement. The Lumension EIS provides the following:

• Key information necessary to validate the integrity of software for both OS and applications running on endpoints (servers, desktops, laptops, and virtual machines)
• Leverages relational intelligence from Lumension’s industry-leading security content database (which includes security configuration, vulnerability, and patch management information) to facilitate truly seamless updates within highly secure (“locked down” or “whitelist enforced”) software environments
• The foundation for enterprise-class application control for large heterogeneous environments

Lumension Endpoint Integrity Service leverages a software integrity information schema (or information structure) identified by Microsoft, Lumension and other leading security solution providers as holding the necessary information to validate software integrity. With this powerful information schema Lumension, Microsoft and other ISVs will deliver a more robust and feature-rich software verification and integrity solutions that are currently available.

The schema includes:\

• Information trust rating system which rates provenance and integrity of metadata
• Cryptographically strong SHA-256 hashes for all executable files
• Complete certification information
• Highly detailed and structured vendor, version, and installation date

As part of the agreement, Microsoft will provide validation information for its commercially available software for inclusion in the Lumension EIS. Additionally, Microsoft will license data from the Lumension EIS for use in their own commercial security products to provide fully-verified software validation information to its customers. Moreover, the Lumension EIS will include software integrity information for a wide range of independent software vendors and provide verified software integrity information with very high trust ratings, sourced directly from ISVs or from original media or images.

The trust rating system evaluates the provenance and integrity of the information in a specific entry. Another benefit of the trust rating system is that it overcomes serious concerns about many collections of software information that may contain information randomly harvested by Web crawlers that indiscriminately traverse the Internet, leaving the information’s provenance in question.

Lumension’s Senior Vice President of Business Development Rich Hlavka said, “With the proliferation and continued evolution of malware and cybercrime on the Internet, organizations are increasingly challenged to respond to the dynamic and ever-changing threats. This work with Microsoft is a significant step forward in helping companies effectively protect and manage endpoints while lowering the overall TCO, as a result achieving greater business success their IT investments.”

“Through this collaboration, we’ve established a seamless process for developing trusted software integrity information readily available for security ISVs to leverage in their endpoint management and security solutions. To that end, we look forward to partnering with the general ISV community in creating the world’s largest library of verified software integrity information and making it available for inclusion in a wide range of management and security products. This effort will significantly reduce risk that security ISVs take in developing security solutions that leverage application validation,” continued Hlavka.

“Together Lumension and Microsoft are helping lead the next evolution in endpoint security management,” said Greg Kohanim, Product Unit Manager for Microsoft. “We believe this effort will accelerate collaboration and development of solutions that can ensure only authorized software will run on customers’ endpoints. The newly announced Microsoft Reputation Services will leverage data from the Lumension EIS as part of delivering a reputation platform and service for Microsoft and Forefront solutions.”

Lumension is a long-standing Gold Partner of Microsoft, providing security solutions to the Microsoft customer community since 1991. For more information on the Lumension EIS, please visit http://www.lumension.com/endpointintegrity.

About Lumension Security, Inc.

Lumension Security, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Utah, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized.® More information can be found at www.lumension.com.

The acquisition strengthens Lumension’s leadership position in operational endpoint security by extending end-to-end compliance and risk management capabilities to its existing solution portfolio. By integrating the IT compliance and risk management capabilities of Securityworks with Lumension’s operational endpoint security solution suite, Lumension is positioned to deliver a total, integrated solution suite that enables enterprises to immediately identify their business risks within the context of compliance regulations such as PCI, HIPAA, and Sarbanes Oxley, and automatically assess this risk and apply targeted risk remediation while automating compliance audit and reporting. Lumension is now in a position to offer security solutions to customers that will enhance automation, reduce the cost of compliance by 30-50 percent or more, improve availability of IT assets, and optimize risk management throughout the IT network¹.

Companies today face a unique set of business challenges – reduced IT resources, growth of compliance regulations, increasing multi-faceted threats and a lack of enterprise-wide risk visibility and verification. For example, according to a 2008 Enterprise Management Associates, Inc. report, 21 percent of companies that have a strategy in place to manage sensitive data do not believe it is effective. In response to these challenges, companies are increasing their investments in IT GRC-based technology. In fact, according to Forrester, the IT GRC market is projected to grow to $1.3 billion by 2011.

“The average organization’s risk environment is becoming increasingly complex as the threat from insiders continues to intensify. Growth and increasing sophistication in targeted malware and the ever-increasing number of compliance regulations with which companies must comply adds a daunting layer of complexity and increased costs to today’s business environment,” said Pat Clawson, chairman and CEO, Lumension. “What’s more challenging is organizations are implementing several siloed technologies to address these challenges, resulting in poor visibility across the enterprise risk environment and a disjointed, unmanageable approach to risk and compliance. Through this acquisition of Securityworks’ assets, Lumension will be able to deliver a unified solution suite that will enable companies to safeguard their valuable assets while managing their IT risk environment in a simple and cost-effective manner that our competitors cannot match.

“In combining these efforts under one holistic solution, customers gain peace of mind knowing they are able to implement a single solution that can address their compliance and reporting requirements, risk management and all endpoint security needs,” Clawson continued.

The risk and compliance management capabilities of Securityworks will empower Lumension’s customers to automatically identify key business interests and prioritize those interests against IT security-related risk within the context of standardized compliance regulations and controls. The combined suite provides enterprises with a more integrated approach to security and risk management which includes risk identification, prioritization and management, automated risk assessment, remediation, compliance management and reporting capabilities. As a result, organizations will have enhanced visibility and prioritization of potential risk exposure across their overall IT environment, enabling a much more focused deployment of IT resources in addressing the greatest areas of potential risk first.

“Securityworks is known for bringing its customers a complete and cost-effective compliance and risk management offering through automation that allows users to tap predefined compliance and control frameworks in order to quickly identify and prioritize IT risks to business interests,” said Bryan Fish, president of Securityworks. “By integrating these capabilities with Lumension’s market-leading solutions, customers can achieve greater visibility across their IT risk environment while reducing the cost of compliance through better automation of risk assessment and remediation processes. This is a solid step forward for organizations and one that we are proud to be part of.”

Lumension’s Risk and Compliance Management Solution will allow enterprises to more efficiently and effectively manage the end-to-end compliance and risk management process:

• Identify Business Interests – Identify and prioritize risk to business interests across all types of IT resources within the framework of predefined compliance and control regulations, best practices and automated workflows.
• Risk Assessment – Automatically assess IT network risks across vulnerabilities, configurations, applications and devices.
• Risk Remediation – Apply and confirm targeted remediation efforts across vulnerabilities, configurations, applications and devices while also establishing security policies across applications and devices, roles and groups.
• Compliance Management – Measure and report on compliance across industry, governmental regulations and control best practices, enabling the organization to assess once and comply with many.

The acquisition of Securityworks furthers Lumension’s commitment to providing complete endpoint security solutions for key vertical markets, including healthcare, public sector, financial services and retail. Furthermore, this acquisition opens up a new opportunity for Lumension to expand its reach into the IT GRC market.

For more information, please visit Securityworks-Lumension and visit Optimal Security Blog for more insight about the positive impact of this acquisition on Lumension’s current and future customers.
To schedule a media interview, please contact Cindy Kim at cindy.kim@lumension.com.

About Lumension

Lumension Security, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Utah, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized®. More information can be found at www.lumension.com.

About Securityworks

Securityworks, Inc. is a Dallas, Texas-based IT-GRC software solutions company delivering automated compliance and risk management capabilities to companies in the retail, healthcare, financial and manufacturing industries.

1 - Managing Spend on IT Security Spending and Audit for Better Results, IT Policy Compliance, February 2009
 

Addressing HIPAA Compliance and Lowering Costs with Lumension Solutions

Lumension delivers vulnerability management, data protection and endpoint protection solutions which provides proactive risk management, powerful data and endpoint protection and an effective policy reporting platform for constant audit readiness to meet many aspects of the HIPAA Security Rule, including:

• Complete asset identification of both managed and unmanaged assets
• Proactive monitoring of security configurations
• Automated vulnerability management and remediation of exposures before they are exploited by malicious entities.
• Full control over how electronic protected health information (EPHI) is copied to removable devices/media with forced encryption to ensure the constant protection of EPHI even if it leaves the traditional network border.
• Network integrity by preventing malware from downloading and/or executing on network assets.

These key capabilities help protect against attacks targeting health and personally identifiable information (PII), prevent loss, theft or misuse of data, enforce security policies, prepare organizations for compliance audits and lower the cost of IT security. To learn more about how Lumension’s security management software solutions can help healthcare organizations proactively address the HIPAA Security Rule requirements, please download the “Achieving HIPAA Security Rule Compliance with Lumension” whitepaper here.

“There is one certainty in this new economy: the risks to our networks, infrastructure and personal information are on the rise,” said Pat Clawson, Chairman and CEO of Lumension. “This couldn’t be more true than within the healthcare industry where the unprecedented initiative to make electronic records available must be tempered with ensuring appropriate protection is implemented. Those in the healthcare sector are faced with double-duty: protection of their patients’ electronic protected health information (EPHI) in compliance with HIPAA while ensuring operational efficiency, reducing IT costs and maintaining high levels of patient care.”

Lumension @ HIMSS09

At HIMSS09, Lumension will be sharing their expertise during two separate speaking engagements:

Track #1: Protecting Electronic Medical Records While Ensuring Compliance and Improving Productivity

• Who: Scott Van Horne, vice president, western region, Lumension
• When: March 6, 2009; 4:15-5:00 PM at booth #6263
• What: Scott Van Horne will walk through the perfect storm scenario that’s been brewing given the current state of the economy coupled with the increase in threats facing enterprises and healthcare organizations today. From there, he will discuss three best practices for protecting medical records while ensuring HIPAA compliance and improving overall productivity.

Track #2: Leveraging Mobile Technology to Optimize Efficiency and Protect Medical Records

• Who: Scott Van Horne, vice president, western region, Lumension; and Rob Israel, CIO, John C. Lincoln Health Networks
• When: March 7, 2009; 11:15-12:00 PM at booth #5859
• What: Rob Israel will share his organizations’ experience with Lumension's proactive endpoint security solutions. Through the use of Lumension’s endpoint protection technology, Rob Israel was able to tackle the security issues associated with mobile and consumer IT devices living on his company’s network to better safeguard sensitive customer and employee data. And, according to Forrester, not only did JCL hit a breakeven point within the first two years but they also saw a risk-adjusted 365% ROI.

To learn more about Lumension’s approach to the HIPAA Security Rule, please visit each speaking sessions as well as the booth (#8344) where Lumension will be demonstrating all of its endpoint security solutions.

Supporting Resources:

• Lumension Optimal Security Blog
• Customer Success Story: John C. Lincoln Health Network
• Achieving HIPAA Security Rule Compliance with Lumension – whitepaper

About Lumension, Inc.

Lumension, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Utah, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized.® More information can be found at www.lumension.com.

Lumension, the Lumension logo, are trademarks or registered trademarks of Lumension Security, Inc. All other trademarks are the property of their respective owners.

Conficker is an aggressively spreading computer worm that has been laying down a powerful botnet infrastructure that can then be managed by malicious controllers.

To better protect customers from the potential threat posed by the Conficker worm, Lumension has delivered the following enhanced capabilities within its Vulnerability Management Solution offering:

• Lumension Scan detection for MS08-067 (W3492), available to Lumension Scan customers
• Patch support for MS08-067, available to Lumension Patch & Remediation customers
• Lumension Scan detection for Conficker infection evidence, available to Lumension Scan customers as part of Lumension Scan update #170
• Malware Removal support as part of Microsoft’s Malicious Software Removal Tool, the latest definition files are now available to Lumension Patch & Remediation customers

The initial appearance of Conficker utilized a fairly sophisticated polymorphic approach that exploited a buffer overflow vulnerability to remotely distribute the malware code throughout IT networks. Later variants of the Conficker malware leveraged USB devices to propagate the malware code onto new endpoint systems. This combination of high-tech and low-tech approaches proved highly effective by evading traditional signature based perimeter defenses.

“Conficker is a wakeup call to everyone in that we need to realize that traditional signature based perimeter defenses are no longer effective in stopping sophisticated malware attacks said Pat Clawson, Chairman and CEO, Lumension. “Organizations must add new technologies and layers of defense such as device control and whitelisting based application security. By adding these latest enhancements to our Vulnerability Management Solution, and when combined with our Data and Endpoint Protection solutions, we offer the greatest amount of protection to our customers’ against this new breed of sophisticated malware like Conficker.”

For more information about Conficker and its continued propagation, please visit the Optimal Security blog for technical insight shared by Lumension’s team of security experts.

About Lumension Security, Inc.

Lumension Security, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Utah, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized.™ More information can be found at www.lumension.com.

Lumension, the Lumension logo, are trademarks or registered trademarks of Lumension Security, Inc. All other trademarks are the property of their respective owners.

The Optimal Security Podcast Series contains interviews from security experts; customer success stories, industry webinars and audiocasts as well as testimonials from various industry leaders who are taking proactive steps to protect their information and critical systems, while reducing overall TCO.

Lumension’s latest audiocast “Evolving Threats and Countermeasures: Conficker Worm and SQL Injection, addresses the Conficker worm and SQL injection attacks, which has wreaked havoc for many months. In this audiocast, organizations will learn:

• Why organizations need to streamline and automate their patch management software to support updates from vendors outside of simply Microsoft
• How the Conficker Worm works, it’s global impact and some vulnerability management recommendations to prevent it from impacting your organization
• And how you can protect your organization from the rising SQL injection attacks with patch management and application whitelisting

“With the increased sophistication of cybercriminals coupled with the rise in insider threats, organizations need to be incredibly proactive about managing their security risks, keeping security front and center on the agenda,” said C. Edward Brice, SVP worldwide marketing, Lumension. “The Optimal Security Podcast Series is a great resource for IT security professionals to stay up-to-date on the latest security threats in addition to our many social media initiatives such as our Lumension Optimal Security Blog, dedicated YouTube Channel, and Twitter feed. Our goal is to provide our customers and interested parties an in-depth look into vulnerability management and endpoint security which will ultimately arm them with the resources they need to better-protect their enterprises from malicious attacks.”

Lumension podcasts are viewable here. Users can subscribe to Lumension podcasts via the iTunes store by typing “Lumension” in the search field at the top of the iTunes Store window.

About Lumension, Inc.

Lumension, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Utah, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized.® More information can be found at www.lumension.com.

Lumension, the Lumension logo, are trademarks or registered trademarks of Lumension Security, Inc. All other trademarks are the property of their respective owners.

Lumension’s Patch and Remediation products are currently used by companies worldwide to prevent security breaches from occurring within corporate IT networks and endpoints. Lumension Patch and Remediation technology is a component of the company’s vulnerability management solution suite, which helps IT professionals proactively manage and automate their vulnerability management process in order to prevent malware from infiltrating or attacking vital corporate data.

“To see our patch and remediation intellectual property emerge from reexamination successfully is outstanding news for our customer base – I am glad to see that the U.S. Patent Office has confirmed the patentability of the patching technology defined in our U.S. Patent,” said Pat Clawson, Chairman & CEO of Lumension. “This notice issued by the U.S. Patent Office strengthens our credibility as the premier leader in the vulnerability management market.”
 

The Lumension/Shavlik litigation is subject to stay pending the U.S. Patent and Trademark Office’s issuance of the reexamination certificate relating to Lumension’s ‘660 patent. Lumension expects the reexamination certificate to be issued later this year.
 

About Lumension™

Lumension Security, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized. More information can be found at www.lumension.com.

Lumension, Lumension Patch and Remediation, Lumension Vulnerability Management Solution, and the Lumension logo are trademarks or registered trademarks of Lumension Security, Inc. All other trademarks are the property of their respective owners.

“Lumension has an ongoing commitment to security certifications across the world, and in the UK,” said Mike Wittig, president and CTO of Lumension.” “The CESG Claims Tested Mark (CCTM) accreditation is part of our on-going certification efforts to reassure governmental and non-governmental organizations around the world that our award-winning security management software solutions meet rigorous government and industry security standards.”

The CESG Claims Tested Mark (CCTM) scheme provides a government quality mark for the public and private sectors based on accredited independent testing against ISO/IEC 17025 and designed to prove the validity of security functionality claims made by vendors. As a CCTM accredited product, Lumension Device Control can now be used within the public sector, Central Government and the MoD.

“Our UK government customers have requested that Lumension Device Control 4.3.2 which is being implemented to achieve Compliance to the UK Data Handling Procedures is subject to third party scrutiny said Andrew Clarke, senior vice president of international of Lumension.” “CCTM is designed to prove the validity of the security claims for the product which therefore provides confirmation that it is an effective security measure. CCTM re-enforces our commitment to provide the most effective and secure solutions for our customers to help safeguard their valuable and sensitive data.”

Lumension Device Control formally Sanctuary Device Control is also currently in progress for FIPS 140-2 (security level 2) validation, a US government computer security standard used to accredit cryptographic modules and to certify private sector vendor products for use in government departments and regulated industries that collect, store, transfer, share and disseminate sensitive information.

To download a free whitepaper on data handling compliance please visit Compliance to the UK Data Handling Procedures.

About Lumension, Inc.

Lumension, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized.™ More information can be found at www.lumension.com.

Lumension, the Lumension logo, are trademarks or registered trademarks of Lumension, Inc. All other trademarks are the property of their respective owners.

“As data continues to be the primary motive behind cybercime and insider threats, one of the real challenges security professionals have had to face is the mobile dilemma,” said Pat Clawson, Chairman and CEO, Lumension. “As the adoption of mobile devices continues to accelerate, organizations face new security risks to their IT environment and business critical data. To effectively address the mobile challenge, enterprises need a way to impose similar rules and policies on mobile devices as they do on their endpoints such as laptops, desktops and servers. To that end, we are extending our data protection beyond traditional endpoints to now include mobile devices starting with Windows. With Lumension Mobile, organizations can enforce security policies, encrypt data, impose authentication on these devices and even remotely wipe the device if it has been lost, regardless of where it is.”

In addition, Lumension is pleased to announce the launch of Lumension Workshop, a new website that accelerates its innovations to the community by making test-market and early-stage product concepts available for review and testing by its customers. Lumension Mobile is the first tool available from the Workshop and can be downloaded today at http://workshop.lumension.com.

“Creativity and innovation drive business success,” said Heather Dunn, director of solution marketing. “Our goal behind the launch of Lumension Workshop is two-fold – enhance product usability and drive customer experience. The launch of this new platform allows our team to jumpstart the launch of new and exciting products, such as Lumension Mobile, while accelerating market and customer adoption of our newly launched technologies. Incorporating valuable feedback from our customers allows us to ensure we deliver the best market-ready products while meeting the needs of our customer community today.”

Data Protection for Windows® Mobile Devices

Lumension Mobile allows users to centrally control and manage security policies on Windows Mobile devices to protect valuable data. This includes the following:

• Enforce Passwords: Password protect mobile devices to secure valuable data
• Encrypt Email: Encrypt valuable data sent through email to and from mobile devices - 64-bit, 128-bit or 256-bit
• Block Removable Storage: Prevent malware introduction via removable storage cards
• Prohibit Bluetooth File Transfers: Protect data from being intercepted over Bluetooth
• Remote Device Wipe: Remotely wipe all information stored on mobile devices

For more information, please log onto http://workshop.lumension.com.

About Lumension™, Inc.

Lumension™, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized. More information can be found at www.lumension.com.

Lumension, the Lumension logo, are trademarks or registered trademarks of Lumension. All other trademarks are the property of their respective owners.

With the recent economic stimulus issued by global governments paired with rising insider threats, increased malware, un-patched machines and reduced IT budgets, it became necessary for Lumension to take the lead in issuing a Security Stimulus Package to help manage critical risks and protect vital information while enabling enterprises to reduce their total operating costs. With Lumension’s Security Stimulus Package, enterprise security organizations can now decrease vulnerabilities as well as reduce overall IT security costs. This special Security Stimulus Package includes:

• Free Risk Assessment Scanners
• Best Practices Guide to Managing Critical Risks and Protecting Vital Information
• Endpoint Security and Vulnerability Management ROI Calculators

To further improve security infrastructure and achieve operational efficiencies, Lumension is offering a special economic incentive for a free six-month subscription to any Lumension solution through June 30, 2009.

The package is available to any new or existing customer who calls into the offices and mentions the special offer code “Secure.”

“This past year has proven to be a rollercoaster for the industry, and as a result businesses are cutting back on their IT budgets in order to weather the current storm,” said Pat Clawson, Chairman and CEO of Lumension. “With the increased sophistication of cybercriminals and the rising insider threats, organizations need to put security front and center, especially given the bad guys are upping their game and increasing their efforts to steal our information without anyone detecting them. To that end, Lumension is offering companies free tools and resources necessary in managing critical risks and protect what’s most valuable today – data – without adding additional costs. All of which are vital to organizations that are currently struggling to maintain control over their IT security infrastructure despite the economic environment.”

Call today at 1-888 725-7828 / 1-480-970-1025 or visit us at Security Stimulus Package for more information on this special, limited time offer.

Multimedia:

• Lumension Optimal Security Blog
• YouTube Channel

This promotion is available to any new or existing customer who is interested in trying an extended (6 month) evaluation of any Lumension product that they do not currently have. To qualify, users must have between 10-100 seats or nodes and must use the promo code “Secure”.

About Lumension, Inc.

Lumension, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized.™ More information can be found at www.lumension.com.

Lumension, the Lumension logo, are trademarks or registered trademarks of Lumension, Inc. All other trademarks are the property of their respective owners.

Promotion Conditions

Participating, eligible customers will receive a free, limited, six-month license for one title (the “Software”) that such customer selects from the defined software offering within Lumension’s solution portfolio. This promotion applies only to Software for which the customer does not currently have a license or for which the customer has not had a license that expired within the preceding six months. Both new and existing Lumension customers are eligible, subject to the other stated eligibility requirements. To qualify for this promotion, the customer must have between 10 and 100 seats or nodes, as calculated by Lumension. To qualify, the customer must use the promotion code “Secure” when calling or emailing Lumension to request the Software. This promotion does not apply to any hardware, any services or certain software offerings of Lumension other than the selected Software title referenced above. Some solutions may require the use of additional hardware, software or services, including without limitation a license for Lumension’s applicable server version software; the customer is solely responsible to provide any needed elements other than the selected Software. The terms and conditions of Lumension’s Omnibus End-User License Agreement (EULA) shall apply to all access to and Use (as that term is defined in the EULA) of the Software. Other terms, conditions and restrictions may apply; please contact your Lumension representative for more information.

“Several security threats loom, but a major concern is the increased use of laptops and removable devices coupled with the number of companies affected by reduced IT budgets,” said Paul Henry, Lumension security and forensic analyst. “The proliferation of endpoints is a significant security challenge as our research shows network attacks using mobile devices as the entry point into the enterprise network are poised for unprecedented growth this year.”

Key Report Findings:

Web-borne malware will continue to thrive: Already in 2009, the industry has witnessed malware-based attacks aimed at social networking sites including Twitter and Facebook. As web-based threats loom, Lumension’s look back through history reveals that the threats will continue to build in 2009 until organizations learn to proactively and diligently manage their patching processes. According to Henry, “We need to bring some sanity back to the battle against web-borne malware, the common sense approach of addressing un-patched vulnerabilities needs to take priority over figuring out the next obfuscated delivery method posed by the black hats.”

USB device-based data leaks an ‘Achilles Heel’: Given the increased mobility of the workforce – especially as telecommuting continues to rise due to economic factors – USB devices are abundant in the enterprise. This, coupled with the fact that USB thumb drives tend to be most IT security professionals’ “Achilles heel” in terms of their lack of being 100 percent secure such removable media as well as data housed on USBs will continue to be at-risk. This is especially concerning given that a recent Ponemon study, commissioned by Lumension, revealed that 90 percent of IT security practitioners believe portable mobile device usage will increase security risks within their companies in the coming year.

Mitigation tactics need to evolve with botnet tactics: While botnets will continue to change tactics and evolve in ways determined to thwart current popular defenses, Henry points out that the real problem in 2009 is not the botnet threat, but how organizations are mitigating that threat. According to Henry, “Simply put, it [botnets] is a patch management issue – if the machines were patched to the most current software releases available, they would not be compromised in the first place. Until the underlying patch management issue is dealt with, botnets will continue their explosive growth on the public Internet.”

Optimal Security Blog Unveiling In tandem with findings, the company also formally launched its corporate blog – a portal for real-time insight into cybersecurity incidents from lead technical bloggers including Paul Henry, C. Edward Brice, Paul Zimski, and Don Leatham, coupled with high-level trends and insight from Chairman and CEO Pat Clawson. The goal in launching the blog is to provide yet another element to the company’s ongoing efforts to be a resource for their customers, partners and the industry at-large that are looking for practical advice, technical expertise and insight into the latest trends in endpoint security.

In addition to ongoing industry-wide commentary, the blog includes regular insight from Pat Clawson in “Clawson’s Corner” as well as ongoing podcast recordings and blog entries tied to Patch Tuesday and other big security events from industry pundit Paul Henry in “Security Insights.”

“The findings in our annual report reaffirm our stance that a dangerous mix of new threats – both internal and external – is brewing, we view the Optimal Security blog as an invaluable tool for organizations scrambling to stay abreast of the latest threats on the horizon,” said Pat Clawson, Lumension Chairman and CEO. “Although everyone is impacted by a slowed economy, the level of new and reenergized malicious attacks hatched each day is a major cause for concern for companies in the coming year. Our hope is that through our ongoing research efforts, coupled with regular communication to end-users via the blog and our endpoint security technical expertise, organizations will be armed with the defense mechanisms needed to win the war against cybercrime in 2009.”

For additional insight into the mega trends outlined in this year’s survey, please download the full results of the 2009 Annual Report.

About Lumension™, Inc.

Lumension™, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized. More information can be found at www.lumension.com.

Lumension, the Lumension logo, are trademarks or registered trademarks of Lumension. All other trademarks are the property of their respective owners.

Key Customer Wins in 2008 Expand Lumension’s footprint in the US and EMEA:

Lumension closed 2008 with 30% year-over-year revenue growth, securing key customer and partner wins that effectively expanded the company's presence globally.

Key partner wins - in addition to an already strong partner ecosystem - included: PGP Corporation, Configuresoft, and KACE. Key customer wins in 2008 included: Seattle Children's Hospital, Sundt and the New Mexico Department of Health.

Industry Accolades Highlight Lumension's Consistent Growth:

For Lumension, 2008 marked a year for solid growth as evidenced by key award wins where revenue strength played an important role. Key accolades included:

• Deloitte & Touche Technology Fast 500: Lumension was named to the 2008 Deloitte Technology Fast 500, ranking 203.
• Software 500: Lumension ranked sixth among the top 10 companies in the $30 to $50 million in software revenue growth range and ranked 282 overall.
• Inc 5,000: Ranked 1,296 in 2008 as a result of the company's strong revenue growth; ranked number 20 in the top security companies on the Inc. 5,000 and number 29 out of the top 100 Phoenix-based businesses on the list for 2008.

Analyst Support in 2008 Points to Lumension's Continued Leadership in Endpoint Security:

As the need to maintain a competitive advantage grows in an increasingly competitive industry environment, analyst support has become paramount to customer adoption. In 2008, Lumension received strong support from leading analyst firms including:

• IDC, which ranked Lumension as the #1 vendor in Proactive Endpoint Risk Management Vendor for four consecutive years.
• Frost & Sullivan, which awarded Lumension its Global Market Penetration Leadership Award for strong market share growth and technology innovation

New brand identity reflects the company's goal to bridge the gap between IT operations and IT security:

According to a recent study by the Ponemon Institute and Lumension, there is a growing divide across two traditionally diverse groups - IT operations and IT security - especially when it comes to risk within the IT network environment. With increasing security risks to systems and data from cybercriminals and insiders, combined with decreasing IT budgets, organizations need a more holistic approach to security. This is critical to maximizing security effectiveness across these disparate groups while maintaining strong IT operating efficiencies and compliance requirements.

Lumension understands the importance of bridging the gap that exists between these groups through a single consolidated, scalable and effective technology solution that works across both groups to optimize security and achieve success in this tough economy. To that end, Lumension recently unveiled a new brand strategy that uniquely positions the company and its offerings across the areas of IT operations and IT security. Lumension's "Optimal Security" approach will enable organizations to optimize their security resources to mitigate the greatest amount of business risk across people, technology, and processes in order to protect the information you value most today and tomorrow.

Supporting Quote from Pat Clawson, Chairman and CEO, Lumension:

"This past year has been quite a rollercoaster for the industry where a security 'perfect storm' has been brewing. The planned IT budget cuts expected and the impact of the economic downturn coupled with the increased sophistication of cybercriminals and the window of opportunity to attack is wide open," said Pat Clawson, Lumension's Chairman and CEO. "Now more than ever, enterprises need to protect themselves from attack from the outside in. Our company's performance this past year is a sure sign of our strength in the industry, and we're looking forward to continually arming our customers with the tools they need to defend themselves in an increasingly active cybersecurity environment."

Supporting Quote from C. Edward Brice, SVP Worldwide Marketing, Lumension:

"In a world where nothing can be 100% secure, IT Operations and IT Security must converge in order to optimize network and security resources across people, processes, infrastructure and technology," said C. Edward Brice, Senior Vice President of Worldwide Marketing for Lumension. "While the change to our brand is subtle - going from 'Lumension Security' to simply 'Lumension' - our goal is to better convey the company's vision, strategy and brand promise to our partners and customers. This means delivering a single source of highly integrated, adaptive, scalable and effective operational security solutions that eliminate risk from technology, protect vital information, and enhance overall IT efficiency and compliance posture."

Multimedia:

• Lumension Optimal Security Blog
• YouTube Channel

About Lumension Security, Inc.

Lumension Security, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized.™ More information can be found at www.lumension.com.

Lumension, the Lumension logo, are trademarks or registered trademarks of Lumension Security, Inc. All other trademarks are the property of their respective owners.

To help companies stay ahead of the threat curve, Lumension™, Inc., the global leader in security management, is kicking off Data Protection Awareness Day to educate and bring awareness to organizations worldwide on the importance of securing information. Leveraging social media tool Twitter, Lumension highlights the evolving threats to your sensitive information and provides key steps to help organizations protect the privacy and security of their confidential information.

Join Lumension LIVE on Twitter (January 28, 2009) at 15:00 GMT / 16:00 CET to chat directly with our security experts on the following:

• Understand the threats and risks to your data
• Ways you can proactively identify risks within your network and endpoints
• Steps to protect the privacy and confidentiality of your business’s critical information and systems
• And, ask any other question you would like LIVE on Twitter
• Understand the new insider threats that are becoming the greatest danger to your data.

For more information on how to reduce your threat landscape and increase your security posture, download a free whitepaper on ways to protect against new insider threats. For all other inquiries, please contact cindy.kim@lumension.com or uklumensionpr@lpp.com.

About Lumension™, Inc.

Lumension™, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized. More information can be found at www.lumension.com.

Lumension Security, the Lumension logo, are trademarks or registered trademarks of Lumension Security. All other trademarks are the property of their respective owners.

*Department for Business Enterprise and Regulatory Reform 2009 Information Security Breaches Survey

“This is a major development for us, as the certification re-enforces our commitment to providing the most effective and secure solutions for our customers to help safeguard IT systems and protect sensitive data,” said Mike Wittig, president and CTO of Lumension. “Achieving NIST’s In Process Listing for FIPS 140-2 Validation for our device encryption technology is a testament to our ongoing strategy of providing reliable, safe and the most secure data protection solutions for both private and public sectors. To that end, we remain focused on working with third party organizations such as NIST to ensure that our solutions meet the highest criteria levels set by these entities and exceed industry and regulatory standards.”

FIPS 140-2 is a US government computer security standard used to accredit cryptographic modules and to certify private sector vendor products for use in government departments and regulated industries that collect, store, transfer, share and disseminate sensitive information. FIPS 140-2 validation is a requirement for any cryptographic product which will be used in a US government agency network. The United States Federal Government is required to purchase cryptographic products validated to the FIPS 140-2 standard. In the international marketplace, ISO19790 is being adopted as a worldwide standard and is a direct adaptation of FIPS 140-2.

The testing process involves both an Algorithm validation (to test each algorithm implementation individually) and then a Module validation to test the operation of the module as a whole. The Federal Information Processing Standards (FIPS) 140-2 validation specifies security requirements necessary for a cryptographic module to be utilized within government security systems protecting sensitive, but unclassified, information. Security level 2 certified cryptographic modules meet all the basic level 1 requirements plus some additional requirements such as tamper evidence, role- or identity-based operator authentication and more.

Lumension is currently in the process of receiving Security Level 2 certification and is listed on the NIST website: http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140InProcess.pdf. Final validation is expected to be completed midyear.

For a free 30 day evaluation of Lumension Data Protection Solution, please visit FREE TRIAL.

To download a free whitepaper on ways to protect business data from loss and theft, please click on Taking Control of Your Data.

About Lumension Security™, Inc.

Lumension Security™, formed by the combination of PatchLink® Corporation and SecureWave® S.A., is a recognized, global security management company, providing unified protection and control of enterprise endpoints for more than 5,100 customers and 14 million nodes worldwide. Leveraging its proven Positive Security Model, Lumension Security enables organizations to effectively manage risk at the endpoint by delivering best-of-breed, policy-based solutions that simplify the entire security management lifecycle. This includes automated asset discovery, vulnerability assessment, remediation and validation; security configuration management; application control and device control; extensive policy compliance reporting; and integration with leading network access control solutions. Headquartered in Scottsdale, Arizona, Lumension has offices worldwide, including Virginia, Florida, Luxembourg, the United Kingdom, Spain, Australia, Hong Kong and Singapore. More information can be found at www.lumension.com.

Lumension’s advanced application whitelisting protects against malware and viral programs, while improving total data security and overall system performance to meet the needs of both IT security and IT operations. Additionally, Lumension’s Data Protection Solution provides the control and detailed forensics required to analyze and update security polices. As a result, organizations, such as EC Suite, can more efficiently detect risks, deploy patches and defend business information across a distributed environment to positively impact a company’s bottom line.

“IT security is difficult to justify from a financial return basis as security products seldom tie directly to revenue,” said Eric Ogren, principal analyst Ogren Group. “Adopting preventive, proactive security solutions to manage endpoint risk will improve security coverage of all devices in the network and multiple applications, and it will save operational expenses associated with attacks or inferior products. That’s a good combination that works for EC Suite.”

The Ogren Group’s analysis found EC Suite achieved an impressive 258 percent rate of return in the first year of operating Lumension security products, with a 964 percent average rate of return over the first three years. This calculation is based on the year-over-year cost savings of over $226,700 that EC Suite derives from integrating Lumension’s vulnerability patch process with its application control whitelisting technology.

"Leveraging Lumension’s security solutions has allowed us to take a proactive, integrated approach to operational security,” said William Bell, director of security, ECSuite.com. “As a result, we feel better-prepared to address the security challenges, such as increased spyware, Trojan attacks and intentional or unintentional information leakages that confront our organization, to preserve the integrity of our business.”

Lumension’s Endpoint Protection Suite protects against targeted threats and enables only authorized applications and devices to execute or connect to a network server, terminal services server, thin client, laptop or desktop. Lumension’s suite simplifies the discovery phase so that administrators can uncover all of the applications that are executing on the endpoints. Once known what applications are on the network, a policy can be established and enforced.

In addition, Lumension delivers the only vulnerability management solution that fully integrates network scanning, agent-based assessment and remediation in a single management console. For more information click here to access the new case study: “Lumension Security: a Case Study in Proactively Managing Endpoint Risk.”

For a free 30-day trial of Lumension’s award-winning solutions, please visit: http://www.lumension.com/Products/Evaluation-Request.aspx.

About Lumension Security™, Inc.

Lumension Security™, formed by the combination of PatchLink® Corporation and SecureWave® S.A., is a recognized, global security management company, providing unified protection and control of enterprise endpoints for more than 5,100 customers and 14 million nodes worldwide. Leveraging its proven Positive Security Model, Lumension Security enables organizations to effectively manage risk at the endpoint by delivering best-of-breed, policy-based solutions that simplify the entire security management lifecycle. This includes automated asset discovery, vulnerability assessment, remediation and validation; security configuration management; application control and device control; extensive policy compliance reporting; and integration with leading network access control solutions. Headquartered in Scottsdale, Arizona, Lumension has offices worldwide. PatchLink, now Lumension, was founded in 1991 by Sean Moshir. More information can be found at www.lumension.com.

Lumension Security, the Lumension logo, PatchLink® and Sanctuary® are trademarks or registered trademarks of Lumension Security. All other trademarks are the property of their respective owners.

“With the emergence of consumer technology in the workplace, coupled with social networking and Web 2.0 technologies and the increased sophistication of cyber criminals, truly securing an organization’s IT environment is an uphill battle,” said Larry Ponemon, chairman and founder, Ponemon Institute. “In the next year or two, these challenges will increase in both the breadth and depth of threats – the companies we surveyed made this very clear. The key for both IT operations and IT security is to find the common ground necessary to better-wage this security battle together.”
The 2008 Security Mega Trends Survey was developed to better understand if certain publicized IT risks to personal and confidential data are truly a concern for organizations in the next two years. Based on interviews with IT experts in operations and information security, the following eight mega trends rose to the top: cloud computing; virtualization; mobility and mobile devices; cybercrime; outsourcing to third parties; data breaches and the risk of identity theft; peer-to-peer (P2P) file sharing and Web 2.0.

Key Findings from the 2008 Security Mega Trends Survey include:

• Outsourced IT is a Major Concern: As companies look to reduce costs based on economic factors in 2009, outsourcing will continue to be an attractive option for efficiency gains. The security risks associated with outsourcing are tremendous according to survey data. The top risks posed by outsourcing according to IT security (50%) and IT operations (59%) respondents is the exposure of sensitive information to third parties and the threat that that data will be improperly protected in transit.
• Data Breaches and Cybercrime are on the Rise: Survey results indicated that the biggest concern relative to data loss is the threat of data making it into the hands of cyber thieves (46% for IT security and 24% for IT operations), thus wreaking continued havoc not just on the customers whose data was stolen but also on the organizations responsible for that lost data. IT survey participants reported that 92 percent of the organizations have experienced a cyber attack The injury to corporate brands as a result of a major data loss incident is critical, especially in an economic downturn
• Workforce Mobility Contributes to Data Loss: IT security and IT operations’ respondents (96% and 91% respectively) agree that employee mobility introduces a significant threat to securing corporate data as it diminishes IT’s ability to properly identify and authenticate remote users on the network.
• Emerging technologies - Web 2.0, P2P, virtualization and cloud computing - are growing in prevalence with Cloud computing causing the most concern: The influx of new technologies – both business and consumer technologies – has opened additional avenues for cyber thieves to steal trade secrets and confidential business information. Cloud computing came out on top with 61 percent of respondents ranking it as a major security concern among the emerging technology trends. Virtualization was perceived as the least concerning at this time, though survey respondents cited all of these types of technologies as key concerns in the next year, where the increased risk to expose sensitive data ranked highest among both respondent groups.

“Given the breadth and depth of security breaches spanning the globe this year – all of which have had a long-lasting negative impact on organizations and consumers alike – IT security and IT operations professionals have an increasingly critical task at hand, to protect sensitive data wherever it lives in an organization,” said Pat Clawson, CEO & Chairman, Lumension Security. “What became clear, in conducting this research, is that while these threats will only increase over time, the gap between these distinct groups is starting to close. This is a great step forward in waging the data security battle – the less siloed and more collaborative IT security and operations groups operate, the more successful they will be in protecting their company’s most valued asset: sensitive corporate data and trade secrets.”

For additional insight into the mega trends outlined in this year’s survey, please download the full results of the 2008 Mega Trends Survey.

Multimedia

• Lumension blog post with additional context and access to report charts
• Customer podcast interview

About The Ponemon Institute

The Ponemon Institute© is dedicated to advancing responsible information and privacy management practices in business and government. To achieve this objective, the Institute conducts independent research, educates leaders from the private and public sectors and verifies the privacy and data protection practices of organizations in a variety of industries.

About Lumension Security™, Inc.

Lumension Security™, formed by the combination of PatchLink® Corporation and SecureWave® S.A., is a recognized, global security management company, providing unified protection and control of enterprise endpoints for more than 5,100 customers and 14 million nodes worldwide. Leveraging its proven Positive Security Model, Lumension Security enables organizations to effectively manage risk at the endpoint by delivering best-of-breed, policy-based solutions that simplify the entire security management lifecycle. This includes automated asset discovery, vulnerability assessment, remediation and validation; security configuration management; application control and device control; extensive policy compliance reporting; and integration with leading network access control solutions. Headquartered in Scottsdale, Arizona, Lumension has offices worldwide. PatchLink, now Lumension, was founded in 1991 by Sean Moshir. More information can be found at www.lumension.com.

Attackers have grown in the sophistication of their tactics and, as a result, are developing more varied types of spyware, Trojans, and keystroke loggers than the highly visible and destructive worms and viruses of the past. Survey results uncover:

• 72 percent of respondents view worms, viruses and spyware as the top threats to their IT security;
• 52 percent view the accidental dissemination of confidential and regulated data and outside hackers as the biggest concern;
• 55 percent cited the number of vulnerabilities and fast-changing threats among the greatest operational hurdles to optimizing their IT security efforts; and
• 22 percent of respondents who are considering outsourcing said that they currently are considering outsourcing the management of IDS/IPS.

"The combination of rising threats coupled with the growing complexity of security technologies and current economic challenges is forcing more companies to seek new ways to protect their systems and data while doing so with fewer resources,” explained Pat Clawson, Chairman and CEO of Lumension. “The nature of the threat landscape is constantly morphing, so security technologies are continuously evolving and improving. As a result, it is critical that companies be on the lookout for new approaches to tackling infrastructure security, and doing so more cost-effectively.”

For a free 30 day trial of the industry leading Lumension Security Solutions, please click here

About Lumension Security™, Inc.

Lumension Security™, formed by the combination of PatchLink® Corporation and SecureWave® S.A., is a recognized, global security management company, providing unified protection and control of enterprise endpoints for more than 5,100 customers and 14 million nodes worldwide. Leveraging its proven Positive Security Model, Lumension Security enables organizations to effectively manage risk at the endpoint by delivering best-of-breed, policy-based solutions that simplify the entire security management lifecycle. This includes automated asset discovery, vulnerability assessment, remediation and validation; security configuration management; application control and device control; extensive policy compliance reporting; and integration with leading network access control solutions. Headquartered in Scottsdale, Arizona, Lumension has offices worldwide. PatchLink, now Lumension, was founded in 1991 by Sean Moshir. More information can be found at www.lumension.com.

Lumension Security, the Lumension logo, PatchLink® and Sanctuary® are trademarks or registered trademarks of Lumension Security. All other trademarks are the property of their respective owners.

In response to a recent incident that led to the loss of patient data, NHS Lothian teamed up with its ICT partner, Glasgow-based Northgate Information Solutions (Northgate), to conduct a review of its security protocols that govern the electronic use and transport of confidential information.

As a result of the review, the latest in encryption and device control technology, Lumension Security’s Sanctuary Device Control and Becrypt Disk & Connect protect were selected for implementation across the NHS Lothian ICT and laptop estate. The combined solutions cover more than 25,000 employees and complement existing record handling policies.

Sanctuary Device Control is being used to eliminate data leakage and prevent the introduction of malware by enforcing NHS Lothian policies regarding the use of all removable media. It has assigned user permissions across the 11,000-device estate, thus ensuring that only authorised users can write data from the network onto removable media while protecting data-at-rest and data-in-motion. The system utilises Lumension Security’s ‘Positive Security Model with Sanctuary’, meaning that only known and trusted removable devices are authorised to connect to the network. Any unknown or unauthorised devices will not be able gain access by default, preventing data loss or theft. In addition, Sanctuary Data Protection encrypts all approved devices, including USB drives, CDs and DVDs, delivers detailed forensics of device usage and data transfer and prevents malware introduction via removable media.

To ensure that NHS Lothian can demonstrate governance and policy compliance at any given time, Sanctuary provides the Lothian eHealth Department with a comprehensive audit log of all devices that have attempted to connect to the network, including those by unauthorised users. The system offers an option to create a back up copy of data downloaded to and from authorised removable devices.

The ‘Becrypt’ element of the implementation works by providing whole disk encryption for all NHS Lothian laptops. Unauthorised users cannot access data on these laptops, as they have to go through a User Authentication process.

Commenting on the new security Martin Egan, Director of eHealth with NHS Lothian said, “Data management and its security is an issue that we take very seriously, and is an area that requires careful monitoring and constant review. Recent well-publicised incidents have highlighted the need to ensure that ICT systems are robust and offer the proper levels of security and that regular staff training is conducted to ensure the proper management of patient records is adhered to.”

Mr. Egan continued, “Northgate responded to our needs professionally and have provided a security solution that has allowed my team to gain complete control over what users can access and what information can be transferred to portable storage device (USB sticks) while providing the necessary flexibility to ensure end user satisfaction. Staff are being re-trained, and the importance of information handling and its management has been reinforced. I am confident that these new measures will ensure that further incidents will be avoided and that the NHS Lothian model will be seen an industry best practice model.”

James Turnbull, Managing Director of Northgate’s Infrastructure Solutions division added, “The issue of data security is one that is effecting more and more organisations in today’s technology based business environment. NHS Lothian has moved quickly to update its security protocols and to ensure the proper handling of sensitive and confidential patient information by its staff. I am confident that the solutions provided will only help to reassure patients that any information being held is done so securely.”

Scottish-based Northgate Infrastructure Solutions, which is a division of Northgate Information Solutions (Northgate IS: www.northgate-is.com), has offices in Aberdeen, Glasgow and Linlithgow. Northgate Infrastructure Solutions is a leading supplier of specialist ICT services and solutions focussing on harnessing technology to improve business outcomes.

• Mobility and access services and solutions to allow staff to work anytime anywhere from any device.

• Managing ICT Assets to ensure businesses can rely on availability of IT as a key business tool.

• Storage services and solutions to ensure efficient storage, retrieval and management of information and applications.

• Protection for information, applications and infrastructure to safeguard customer relationships and reputation.

• Providing effective services and solutions to reduce carbon footprint, waste and energy costs.

• Utilising infrastructure to provide effective communications and reduce operating costs.

Northgate IS (Scotland) employs 40 staff throughout the region, and works with a wide range of public and private sector organisations including Grampian Fire & Rescue Service, United Dairy Farmers, Petroleum Experts, National Trust for Scotland and Balfour Beatty Rail Globally Northgate Information Solutions is a market leader in providing specialist software, outsourcing and information technology (IT) services to the human resources, local government, education and public safety markets.

The Northgate Group is owned by private equity company Kohlberg Kravis Roberts (KKR) and currently employs over 6,500 staff and operates in 46 countries across 5 continents. Northgate has approximately 4,500 large/medium customers and approximately 10,500 small to medium enterprise (SME) customers worldwide. Northgate works closely with over 20% of the Fortune 500 leading US companies, 90% of the UK local authorities and all of the UK's police forces.

About Lumension Security, Inc.

Lumension Security™, formed by the combination of PatchLink® Corporation and SecureWave® S.A., is a recognised, global security management company, providing unified protection and control of enterprise endpoints for more than 5,100 customers and 14 million nodes worldwide. Leveraging its proven Positive Security Model, Lumension Security enables organisations to effectively manage risk at the endpoint by delivering best-of-breed, policy-based solutions that simplify the entire security management lifecycle. This includes automated asset discovery, vulnerability assessment, remediation and validation; security configuration management; application control and device control; extensive policy compliance reporting; and integration with leading network access control solutions. Headquartered in Scottsdale, Arizona, Lumension has offices worldwide. PatchLink, now Lumension, was founded in 1991 by Sean Moshir. More information can be found at www.lumension.com

Lumension Security, the Lumension logo, PatchLink® and Sanctuary® are trademarks or registered trademarks of Lumension Security. All other trademarks are the property of their respective owners.

Lumension’s online tool set is available at ROI Tools and includes:

• Endpoint Security Value Calculator – gauges the potential savings an organization would experience by using the company’s integrated application and device whitelisting technology to protect against malware attacks, insider theft and data leakage from peripheral devices.
• Vulnerability Management ROI Calculator – estimates the expected return on investment from Lumension’s consolidated solution for network vulnerability assessment, automated patch and remediation, security configuration management and integrated enterprise-level compliance reporting.

“During this period of economic slowdown, companies face even greater pressure to ensure that all IT activities and investments provide clear cost benefits,” said C. Edward Brice, Senior Vice President of Worldwide Marketing, Lumension Security. “As an industry leader, it is imperative that we not only provide organizations with powerful, integrated solutions but cost-efficient technologies that provide tangible value to make security more effective.”

Lumension has made available a new whitepaper titled “Minimizing Security-related Total Cost of Ownership” to help organizations calculate the (TCO) to achieve optimal security in today’s complex security environment. The whitepaper outlines how security implementations in four major areas can significantly reduce IT TCO and offset direct costs of these technologies by minimizing the overall impact to a company’s bottom line.

Additionally, Lumension issued a customizable Patch Management Value Report that provides full visibility into the added benefits customers can gain from its investment in Lumension PatchLink Update. According to a recent report by Aberdeen Group, vulnerability management makes up roughly 14 percent of the average IT security budget and organizations deemed “Best in Class” reported a marginal return of over 90 percent on those investments.

Coupled with the benefit that the vulnerability management calculator provides, Lumension’s patch management report is designed to help organizations demonstrate the cost savings, risk mitigation and operational benefits of deploying Lumension’s “Best in Class” solutions. The company’s product suite offers advanced policy enforcement, rapid patch and remediation that reduces IT overhead and resource costs, improving efficiencies across the enterprise.

For a free 30 day trial of Lumension Security’s award-winning vulnerability management, endpoint protection and data protection solutions, please click here.

In addition to the ROI Calculator, Lumension also offers other premium tools and resources to discover which applications are running on your network or to assess your endpoint risk, for more information, please click here.

About Lumension Security™, Inc.

Lumension Security™, formed by the combination of PatchLink® Corporation and SecureWave® S.A., is a recognized, global security management company, providing unified protection and control of enterprise endpoints for more than 5,100 customers and 14 million nodes worldwide. Leveraging its proven Positive Security Model, Lumension Security enables organizations to effectively manage risk at the endpoint by delivering best-of-breed, policy-based solutions that simplify the entire security management lifecycle. This includes automated asset discovery, vulnerability assessment, remediation and validation; security configuration management; application control and device control; extensive policy compliance reporting; and integration with leading network access control solutions. Headquartered in Scottsdale, Arizona, Lumension has offices worldwide. PatchLink, now Lumension, was founded in 1991 by Sean Moshir. More information can be found at www.lumension.com.

Lumension Security, the Lumension logo, PatchLink® and Sanctuary® are trademarks or registered trademarks of Lumension Security. All other trademarks are the property of their respective owners.

In the video, Bell says, “Lumension Security’s solution suite as a whole helps us meet PCI DSS compliance by not only meeting our patch and remediation requirements, but also our antivirus to be deployed on the system and controlling of information requirements, along with other various different requirements that are part of the PCI DSS.”

Lumension Security’s best-of-breed, integrated Vulnerability Management Solution (VMS), Data Protection, and Endpoint Protection enable EC Suite.com to construct a multilayered security approach that provides protection from data threats - including data leakage, malware and spyware - and policy enforcement for approved applications and devices. Lumension Security also enables EC Suite.com to better meet PCI DSS compliance.

EC Suite.com is using Lumension Security’s all-in-one solution suite, including: Sanctuary Whitelisting Application Control, Device Control software that proactively enforces policies regarding the use of applications and removable storage media on corporate PCs, laptops and servers; Vulnerability Management Solution enables vulnerability assessment, rapid patching and remediation, validation and compliance reporting; and PatchLink Developers Kit, a content development application that allows users to code their own customized patches.

For a free 30 day trial of Lumension Security’s award winning Vulnerability Management, Endpoint Protection and Data Protection solutions, please visit Free Eval.

To view all of Lumension Security’s videos on security challenges and hot topics, please visit My Lumension Videos.

About Lumension Security™, Inc.

Lumension Security™, formed by the combination of PatchLink® Corporation and SecureWave® S.A., is a recognized, global security management company, providing unified protection and control of enterprise endpoints for more than 5,100 customers and 14 million nodes worldwide. Leveraging its proven Positive Security Model, Lumension Security enables organizations to effectively manage risk at the endpoint by delivering best-of-breed, policy-based solutions that simplify the entire security management lifecycle. This includes automated asset discovery, vulnerability assessment, remediation and validation; security configuration management; application control and device control; extensive policy compliance reporting; and integration with leading network access control solutions. Headquartered in Scottsdale, Arizona, Lumension has offices worldwide. PatchLink, now Lumension, was founded in 1991 by Sean Moshir. More information can be found at www.lumension.com.

With a directive to ensure that all USB memory sticks holding the trust’s data are encrypted, Lancashire’s Data Security Officer Alan Boardman held an amnesty on all USB sticks that had previously accessed the network. Once these rogue devices had been collected, Lumension Security Sanctuary Data Protection was rolled out across the trust and employees were issued with an officially sanctioned USB memory stick for storing and transporting work data. Sanctuary enables IT managers to create a “whitelist” of approved devices that are allowed to connect to the network, blocking any device that is not authorised. Equally, all data transferred to the USB device is encrypted for safe use and can be transported without the fear of exposing confidential data to unauthorised users.

Alan Boardman comments: “We were specifically looking for a centralised data protection solution that automatically enforced encryption. Lumension Security’s solution provides this, as well as an impressive level of granularity that the competition didn’t. We can drill down into the access permissions of a particular device model, serial number or named employee, and have complete control over movement of data to and from all USB devices. The trust’s directive has been fulfilled and we now have the guarantee that all data stored on USB devices is encrypted and cannot be accessed if a thumb drive is lost or stolen.”

Boardman’s IT team can assign read/write access per individual user for each officially sanctioned USB device that connects to the network. Lumension Security Sanctuary Data Protection also allows the team to centrally shadow and log all usage of USB memory sticks for auditing and compliance purposes, giving Lancashire a record of exactly what data has been downloaded to and from what USB devices.

“Lancashire Care NHS Foundation Trust was quick to recognise that data stored on USB devices was a big risk factor,” comments Andrew Clarke, senior vice president of International for Lumension Security. “With Lumension Security Sanctuary Data Protection solution, the trust doesn’t have to worry about loss of reputation through an employee losing a memory stick, which may contain confidential corporate information. Lancashire Care is a forerunner in the public sector in its approach to