Making Information Security Real: RSA & EMC Drive Business Acceleration Through Information-Centric Security

SAN FRANCISCO, Feb. 6 /PRNewswire/ -- RSA(R) CONFERENCE 2007 -- RSA, The Security Division of EMC , today announced a series of new initiatives and products designed to make information security a reality for organizations worldwide, and help them solve their most sensitive and complex security challenges.

The announcements include the integration of EMC's and RSA's flagship products -- the Symmetrix(R) DMX-3 enterprise storage platform with RSA SecurID(R) two-factor authentication -- and a definitive agreement to acquire Hyderabad, India-based Valyd Software Private Ltd. as part of a major expansion of RSA's enterprise data protection (EDP) strategy designed to effectively secure information wherever it resides.

"For too long, information security has been an embarrassing misnomer: despite billions of dollars of investment, data breaches are not slowing down and four out of five organizations admit to having little confidence in the security of their information," said Art Coviello, EVP at EMC Corporation and President at RSA, The Security Division of EMC. "It is time to re-focus information security -- away from the perimeter and onto the information itself -- in order to provide customers with the confidence that their assets, brands and end-users are protected and to free them up to realize new business possibilities."

"Security thinking needs to catch-up to the reality that corporate and customer data is dynamic, and forever on the move both inside and outside the network. This negates the capabilities and efficacy of static, traditional gateway-based approaches and can lead to various points of vulnerability and exposure," commented Jon Oltsik, Senior Analyst, Information Security at Enterprise Strategy Group. "The rising tide of global regulatory compliance is driving what will soon become a fundamental tenet of good corporate citizenship: building security into the information infrastructure from the outset, so that it protects data wherever it is and whoever is accessing it."

The initiatives announced today will help enable customers to gain the necessary level of confidence in the security of their critical assets. Protecting information is one of the core elements of EMC's information infrastructure strategy, and RSA's information-centric approach -- which binds security directly to information and the people who need it -- supports the strategy through the delivery of end-to-end protection.

Information-centric security includes the following key elements: 1. Secure the information Preserve the confidentiality and integrity of critical business information wherever it resides 2. Secure access to the information for a. Your employees Enable secure access to key corporate resources - anytime, anywhere b. Your customers Offer self-service channels, prevent fraud, and enhance consumer confidence c. Your partners Open internal systems to ease collaboration with trusted partners 3. Manage the information for compliance & security audits Achieve compliance with security policy and regulations New initiatives and solutions include: RSA-enabled security integrated with EMC Symmetrix DMX-3 storage system

EMC and RSA today unveiled new security features that distinguish the market-leading EMC(R) Symmetrix DMX-3 enterprise storage platform as the most secure high-end storage array in the industry. Integrating advanced technology from its RSA division, EMC is introducing stronger authentication, authorization and audit capabilities to its enterprise storage portfolio to further secure the overall foundation of customers' information infrastructures.

EMC & RSA expand growing information-centric security services portfolio

The company announced that it is expanding its portfolio of information- centric services with three new security services designed to accomplish the following: help customers classify their data according to business risk; maintain confidentiality and privacy of sensitive corporate data; and cost- effectively manage security-related information for compliance and security audits.

-- Classification for Information Security: is an RSA consulting service that is designed to classify levels of sensitive information in a customer environment. This consulting service aligns information based on different security sensitivities at different stages of its lifecycle, helps customers achieve predictable handling of information based on security requirements, and avoids the expense of overprotecting information that is not sensitive -- Design and Implementation for Storage Encryption: is a service designed to ensure that a customer has an end-to-end data-encryption solution for adequately securing data in a tape backup, on a Fibre Channel-based storage array or in an IP-network environment. With encryption appliances from leading security partners, RSA's Design and Implementation for Storage Encryption will deliver an appliance-based encryption solution, with key management integrated into a customer's storage environment -- Design and Implementation for Security Information Management: is a service designed to provide a consolidated collection, management, reporting, analysis and storage system for security-related events and data. This service integrates appliances from the RSA enVision(TM) product line with EMC Centera(R) and EMC Celerra(R) networked storage solutions into customer environments, helping to more cost-effectively manage security information and events to assure security policy effectiveness and ease the burden of compliance

Enterprise data protection technology expansion through acquisition of Valyd and new strategic partnerships

RSA announced today a major expansion of its EDP strategy designed to secure information and protect data effectively, wherever it resides. Core to this development is the definitive agreement to acquire Hyderabad, India-based Valyd for an undisclosed sum, that will - upon the acquisition's close - immediately provide RSA's customers with new solutions for effective enterprise-wide encryption management, including:

-- RSA(R) Database Security Manager, designed to deliver highly secure data protection for a variety of database management systems -- RSA(R) File Security Manager, designed to provide protection of sensitive data maintained in files

In addition, RSA has established strategic partnerships with CipherOptics, Decru and NeoScale Systems to bring these best-of-breed encryption solutions to market with RSA and create common standards for key exchange and management across all encryption endpoints. RSA has also established a strategic technology alliance with Epicor|CRS which will provide the first RSA key management-enabled point-of-sale solution to retailers. The CRS RetailStore(TM) solution will be integrated with RSA(SM) Key Manager software, a stand-alone key lifecycle management offering that enables businesses to effectively control encryption keys by providing centralized, secure and simplified administration for all applications.

Continuing the drive towards ubiquitous stronger authentication (as announced on February 5th)

RSA has announced new and expanded strategic partnerships that extend its drive to bring confidence, flexibility and choice in strong authentication to consumers, enterprises and government organizations. The strategic partnerships accelerate RSA's initiative to enable secure access to information -- whether by customers, partners or employees -- and foster ubiquitous stronger authentication by embedding the industry-leading RSA SecurID algorithm into everyday devices. RSA has formed new technology partnerships with biometrics technology vendors MXI Security, Privaris and UPEK, Inc., and is pleased to announce new technology and partnership developments -- and plans for additional, future integration -- with existing partners RedCannon, Research In Motion and SanDisk.

Wachovia Selects RSA to Accelerate its Business through Strengthened Online Security (as announced on February 5th)

As part of its comprehensive Security Plus suite of services, Wachovia has deployed the RSA(R) Adaptive Authentication solution and joined the RSA eFraudNetwork(SM) community to further protect its customers, their funds and personal information when banking online -- while imposing minimal impact on the online user-experience.

RSA Solutions Enable EDS To Solve Business Problems Securely (as announced on January 29th)

EDS, a leading global technology services company, has been successfully using a suite of RSA solutions, including the RSA enVision solution acquired from Network Intelligence, with several EDS clients. EDS is also using the solution to monitor its own devices and network. Deploying the RSA enVision solution internally to help with SAS 70 compliance has given EDS the ability to develop repeatable processes and templates for compliance reporting under complex environments that can now be rolled out to customers worldwide to help meet multiple rules, regulations, guidelines and standards including Sarbanes Oxley, Health Insurance Portability and Accountability Act (HIPAA), Gramm- Leach-Bliley Act (GLBA), Payment Card Industry (PCI) and North American Electric Reliability Council (NERC).

More information on RSA's announcements and related initiatives may be found online at http://www.rsa.com/rsaconference2007/. In addition, RSA's information-centric solutions will be featured at Booth #1316 at RSA Conference 2007, February 5-9, 2007, at the Moscone Center in San Francisco.

About RSA

RSA, The Security Division of EMC, is the premier provider of security solutions for business acceleration, helping the world's leading organizations succeed by solving their most complex and sensitive security challenges. RSA's information-centric approach to security guards the integrity and confidentiality of information throughout its lifecycle - no matter where it moves, who accesses it or how it is used.

RSA offers industry-leading solutions in identity assurance & access control, encryption & key management, compliance & security information management and fraud protection. These solutions bring trust to millions of user identities, the transactions that they perform, and the data that is generated. For more information, please visit http://www.rsa.com/ and http://www.emc.com/

RSA, SecurID and enVision are either registered trademarks or trademarks of RSA Security Inc. in the United States and/or other countries. EMC, Symmetrix, Centera and Celerra are registered trademarks of EMC Corporation. All other products and/or services mentioned are trademarks of their respective companies.

This release contains "forward-looking statements" as defined under the Federal Securities Laws. Actual results could differ materially from those projected in the forward-looking statements as a result of certain risk factors, including but not limited to: (i) adverse changes in general economic or market conditions; (ii) delays or reductions in information technology spending; (iii) risks associated with acquisitions and investments, including the challenges and costs of integration, restructuring and achieving anticipated synergies; (iv) competitive factors, including but not limited to pricing pressures and new product introductions; (v) the relative and varying rates of product price and component cost declines and the volume and mixture of product and services revenues; (vi) component and product quality and availability; (vii) the transition to new products, the uncertainty of customer acceptance of new product offerings and rapid technological and market change; (viii) insufficient, excess or obsolete inventory; (ix) war or acts of terrorism; (x) the ability to attract and retain highly qualified employees; (xi) fluctuating currency exchange rates; and (xii) other one-time events and other important factors disclosed previously and from time to time in EMC's filings with the U.S. Securities and Exchange Commission. RSA and EMC disclaim any obligation to update any such forward-looking statements after the date of this release.

CONTACT: Matt Buckley RSA, The Security Division of EMC (781) 515-6212 mbuckley@rsa.com Sandra Heikkinen OutCast Communications (212) 905-6040 rsa@outcastpr.com