Michael Blackin Sales Consulting Director

1. Michael Blackin Sales Consulting Director Ohio Digital Government Summit

2. Security Critical To Business Continuity • 2007 • Organized crime • Sensitive data • Identity theft • Constant threat • 1997 • Amateur hackers • Web site defacement • Viruses • Infrequent attacks

3. Security Breaches Front Page News

5. Security: A Preventive Control • Examine information lifecycle and secure every point throughout • Do not limit yourself to structured data • Automate your controls whenever possible to lower costs

6. Secure Data Lifecycle Management Lockdown Information Secure Origination Control Access Points Data Destruction Manage Exceptions

7. Secure Data Lifecycle Management Lockdown Information Secure Origination Control Access Points Data Destruction Manage Exceptions

8. Secure Origination Authentication Application access controls Segregation of duties Unstructured data Request and approval process Classification of asset Admin

9. Secure Data Lifecycle Management Lockdown Information Secure Origination Control Access Points Data Destruction Manage Exceptions

10. KING 18031 sfING Org 10 SCOTT 14220 SCOjd PIERMAR 17170 ByAgE Network KNOX 12029 SMITH Org 20 uthenticate KYTE 17045 gAMES CAREY 12032 fONES Org 30 HOECHST 18029 MIER Admin Access Control Comprehensive Auditing Encrypted Data In Motion Authenticate Authorize Audit Lockdown InformationStructured Data Users Data Segregation of Duties (What about Privileged Users?) Encrypted Data at Rest

11. But… Structured Information Unstructured Information 10% 90% • Most sensitive data is unstructured… • Printed reports not shredded • Documents on thumb drives • Sensitive email • Lack of control Source Gartner: 2005

12. Lockdown InformationUnstructured Data Information Rights Management • Sealing documents and emails protects them wherever they go • Central server manages rules - even for copies of documents that leave your network • Central server audits usage – even for copies of documents that leave your network

13. Secure Data Lifecycle Management Lockdown Information Secure Origination Control Access Points Data Destruction Manage Exceptions

14. Business Intelligence Executives Analysts • WS-Security • Web Services Mgmt • Audit Control Access Points • Authentication • Authorization • Audit Service Oriented Architecture Service Providers Structured Data Unstructured Data Users and Administrators Other Agencies • Authentication • Authorization • Audit • Policy • Encryption • Audit Applications Federation

15. Secure Data Lifecycle Management Lockdown Information Secure Origination Control Access Points Data Destruction Manage Exceptions

16. Collect and Consolidate Audit Data Automate Compliance Reporting Detect and Prevent Insider Threats Monitor, Test, Adjust Lower IT Costs With Audit Policies Manage ExceptionsConsolidate and Tamper-Proof your Audit Repository Monitor Policies Security Reports Service Datastore Application Directory

17. Secure Data Lifecycle Management Lockdown Information Secure Origination Control Access Points Data Destruction Manage Exceptions

18. Data Destruction Authentication Application access controls Segregation of duties Unstructured data Request and approval process Classification of asset Admin

19. Key Takeaways • Focus on both Structured and Unstructured data • Secure information at rest and in motion • Take a long look at privileged users • Examine business process touch points • Enforce Non-repudiation • Eliminate sensitive information anywhere not required

20. For more information… Kevin Wallace Account Manager 614.343.3794 kevin.wallace@oracle.com Ed Pinkin FMW Account Manager 617.645.8943 edward.pinkin@oracle.com