Providing a better understanding of the value of Network Content Monitoring, Capture and Replay for the following roles:
While technology consistently creates the means to simplify complex tasks, expedites most forms of communications and allows for increased productivity and performance, it also produces new challenges in regards to IT security, information governance and in a broader sense, overall society. And although most users of technology are good honest people, there are those who leverage these new tools to cross the line of what is consider morally, ethically and legally acceptable.
Infractions range from using an employer’s email system to harass a co-worker to leveraging one’s access rights in order to sneak out confidential organizational data such as names and credit card records. And while there are many security measures in place to protect the access and movement of any given data and information, there are regular "break-ins," making headlines - often occurring from the inside.
Depending on one’s role within an organization, the key concerns and liabilities may appear to differ between positions, but in fact actually share many common objectives. It is quite often that Human Resources, Compliance, Risk and Security managers seek alignment to address a common concern.
Organizational Role |
Key Concerns & Requirements |
netReplay® Solution |
C-Level Executives and Risk Management |
- Theft of proprietary data and intellectual property information.
- Breech of systems and public announcement of potential theft of data
- Penalties & fines due to non-compliance
- Employee misuse of resources, abuse and resulting legal action
- Damage to brand and reputation
- Inability to demonstrate best efforts
|
- Reduce risk and increase security - monitor network content for misuse, data leakage, non-compliance and policy misconduct.
- Clearly demonstrate what is happening with the information and communications residing on the networks.
|
IT Security Management |
- Security - protection of customer, Personally Identifiable Information ( PII), confidential data and Intellectual Property
- Data Leakage and Data Theft
- Breech of systems and public announcement of potential theft of data
- Damage to brand and reputation
|
- Reduce risk and increase security - monitor network content for misuse, data leakage, non-compliance and policy misconduct.
- Quickly move security team from a reactive "capture everything" mode to a much more effective proactive "collect, monitor and analyze" approach.
|
Compliance Management |
- Failure to comply with regulations and/or enforce policies
- Failure to address information archiving mandates (e.g.: SEC 17A-4)
- Penalties & fines due to non-compliance
- Inability to understand level of adherence to regulations and policies.
- Costs associated with failed audits
|
- Ability to audit and demonstrate what has occurred in relation to compliance mandates.
- Provides a easy-to-use way to archive transactions and all communications between employees and the end-consumer (e.g.: SEC 17A-4)
|
Human Resources |
- Increased liability due to threat of employee legal action caused by lack of enforcement of Acceptable Use Policy
- Increased risk due to extreme inappropriate employee behavior that includes harassment, pornographic websites, derogatory and hateful content via emails, Instant Messages, etc.
- Wasteful, non-productive use of resources such as chatting, IMs, or online auctions and shopping during working hours.
|
- Reduce risk and increase security - monitor network content for misuse, data leakage, non-compliance and policy misconduct.
- Able to perform investigations without disrupting or upsetting workforce.
- Able to monitor adherence to Acceptable Use Policies and apply frequent less extreme corrective measures such as training and warnings.
|
Legal / Electronic Discovery |
- Need a reliable way to process massive amounts of network data for legal holds and data preservation obligations
- Defending organization must do everything within its power to preserve the information required for legal proceedings
- Collect and reproduced documents in original format even when evidence contains numerous data types ranging from emails and instant messages to voicemails, images, web pages.
|
- Out-of-the-box capabilities, can begin to immediately collect data
- Quickly and efficiently captures all data necessary for any litigation hold - preservation obligation
- Replay exactly what, when, and how information was seen and handled by user, thereby demonstrating both proof of user's content and related actions.
- Speed investigators to a quicker "document decision-ing" phase of the investigation.
|
Digital Investigations and Cyber Forensic Professionals |
- Need to properly collect, analyze, identify and present credible evidence
- Hampered by the daunting volume and many forms of digital information
- Often need to collect content covertly
- eed solution that does not require significant amounts of training or experience before user becomes effective
|
- netReplay quickly and efficiently captures all data necessary for formal records retention and digital evidence collection
- Increases credibility of results by replaying exactly what, when, and how it was seen and handled by user, thereby demonstrating both proof of user's content and related actions
- Deployment flexibility of Rack-mount or Portable solution options
|
Law Enforcement Professionals |
- Need to properly collect, analyze, identify and present credible evidence
- Hampered by the daunting volume and many forms of digital information
- Often need to collect content covertly
- Data collection activity must be able to deploy quickly
- Need solution that does not require significant amounts of training or experience before user becomes effective
|
- Out-of-the-box capabilities, it can begin to immediately collect data
- Easy-to-learn and easy-to-use digital forensic tool - more law enforcement professionals can learn to use tool.
- Provides a high-level of precision on what it is collecting and analyzing complying with legal requirements such as warrants
- Deployment flexibility of Rack-mount or Portable solution options
|
