Enterprise IT Industry Topic Series Cloud Computing / ISG Solutions – Week 4

1. Enterprise IT Industry Topic SeriesCloud Computing / ISG Solutions – Week 4 Travis Greene Justin Taylor Senior Product Marketing Manager Sales Enablement Specialist Travis.Greene@netiq.comjutaylor@netiq.com October 1, 2012

2. Situational Fluency Successful conversations with existing and potential customers are founded on your ability to show understanding of the world they live in, the business issues they face, and the ability to speak their language. This enablement series focuses on how to ensure your conversations on Cloud Computing are credible. 36% of Business Leaders indicate that conversations they have with sales reps are of value to them. Our goal is to enable Customer-centric conversations, conversations focused on their issues and priorities

3. Today’s Agenda • Identity, Access and Security-related cloud problems, matched to NetIQ solutions • Controlling Access to Cloud Services and Data • Increased Risk in Mixed Environments • Compliance in the Cloud • Summary • Q&A

4. ISG-Related Cloud Problems

5. Controlling Access to Cloud Services and Data Since SaaS is purchased directly by the business, there is a tendency for users to sign up directly, rather than through IT controls • Lack of visibility and control of data may put organizations at risk for data loss • If access is not managed properly, organizations may encounter large unanticipated fees or over-subscription

6. Controlling Access to Cloud Services and Data - SolutionsReduce the Risk of Data Loss and Unexpected Costs • NetIQ Sentinel • Integrated SIEM to identify Cloud services accessed from the network, affording greater control and faster response to an attack • NetIQ Secure Configuration Manager • Helps ensure security policies are enforced across traditional, private cloud and IaaS environments

7. Controlling Access to Cloud Services and Data - SolutionsReduce the Risk of Data Loss and Unexpected Costs • NetIQ Identity Manager • Extends identity management to include SaaS offerings • Allows the organization to control the provisioning process, certify access and report on system activity SaaS Single sign-on and strong authentication Automated process Full reporting Corporate credentials secured IT Department

8. Increased Risk in Mixed Environments Most IT organizations are supporting both traditional and cloud-based services, with hybrid public/private configurations • Mixing high and low value workloads on the same hardware introduces risk that a breach to one can cascade to others • Users commonly use the same credentials for their cloud hosted applications as they do for their internally hosted applications, increasing the risk of a breach

9. Increased Risk in Mixed Environments- SolutionsReduce the Risk of Cascading Security Breaches • NetIQ Secure Configuration Manager • Automatically identify systems in traditional, private cloud and IaaS environments that are poorly configured and vulnerable to attack

10. Increased Risk in Mixed Environments- SolutionsReduce the Risk of Cascading Security Breaches • NetIQ Access Manager • Extends access management to include SaaS offerings like SalesForce.com, Google Apps or Office365 • Extend single sign-on experience to cloud hosted applications, making access more convenient for users and eliminating the need for users to save passwords in an unprotected format SaaS Single sign-on and strong authentication Automated process Full reporting Corporate credentials secured IT Department

11. Compliance in the Cloud Compliance doesn’t stop at the firewall. Organizations lack controls and cannot effectively certify and report on cloud services, to meet compliance standards • Security teams need a way to integrate compliance reporting across multiple cloud and traditional environments

12. Compliance in the Cloud - SolutionsIntegrated Access Management and Compliance Reporting • NetIQ Secure Configuration Manager • Monitor and report on system configurations in traditional, private cloud and IaaS environments • Maintain compliance continuously through an automated process that produces audit and IT staff efficiencies • Manage risk, prioritize, and quickly address misconfigurations that could lead to failed audits and breaches

13. SummaryWhy You Should Care

14. Why You Need to Understand ISG-Related Cloud Problems and Solutions • Cloud is a disruptive technology to the way IT services are being delivered • Compliance in the cloud is an afterthought, but must be managed to avoid audit surprises • Controlling access to cloud services and data should be an extension of what is done for internal applications and services • Increased risk in mixed environments demands technology to mitigate the risk • Your customers are struggling with how to address the problems that cloud computing causes – help them and become a trusted advisor

15. Enablement Wrap-Up

16. Enablement Roadmap • Upcoming Enablement Webcasts • October 8: AGS 6.1 (LADD CHANGE TITLE) • On-demand Deliverables • Industry Topic Conversation Cards: October • Industry Topic Sales Conversation Guides: October • Cloud Computing On-demand Curriculum: November • NetIQ U • EMEA: October 9-11, Munich / North America: October 22-24, Provo

17. Questions?