|
INTERVIEW
“Disparate security data needs a common point of control”
Computer
Associates (CA) has expanded its suite of security solutions with eTrust Security
Command Centre (eSCC) to monitor various security needs of an organisation.
Piti Pramotedham, managing director for CA’s Asia South operations speaks
to Chitra Padmanabhan about the recent launch of the solution in India
* What is the role of an eSCC?
eSCC is designed to help a security manager integrate
the entire security management of the organisation under a common point of control.
An organisation can experience various types of security threats, ones that
originate from within and those that are external. To address these, most organisations
have deployed multiple security solutions from various vendors, which generate
disparate data. For instance, an organisation may have an anti-virus solution
from one vendor and an access management solution from another vendor, which
do not gel with each other and are difficult to manage. eSCC provides a holistic
approach to all aspects of managing business security.
* How does the eSCC actually work?
eSCC basically looks into three solution areasidentity
management, which secures user access, single sign-on and self-service administration
across the entire life-cycle of the users digital identity, access management
and threat management. The solution collects business resource information and
stores it in a single resource catalogue and automatically detects and responds
to security-related events that could compromise the business. Moreover, the
solution gathers and integrates critical security data from third-party products,
including those offered by CheckPoint, Cisco, IBM, Internet Security Systems,
McAfee, Microsoft, Nessus, Netscreen, Nortel, Snort, Symantec, Trend Micro and
other companies. eSCC would provide vendor-neutral solutions and would be used
for collecting and integrating key security and system data from disparate technologies
with enterprise management systems. In short, the solution will give an organisation
a holistic picture about the security status of their systems.
* What is the potential for such a solution in India?
Security-related technologies in India are as advanced
as they are anywhere in the world. But, what is lacking is a comprehensive security
policy and adequate resource allocation for security-related needs. In a recent
Indian security survey carried out by Ernst & Young more than 34 percent
of organisations rate themselves as less than adequate in their ability to determine
whether their systems are currently under attack. In such a scenario, a solution
that provides a birds eye view of all the security resources in an organisation
has great potential. Above all, the solution has a capability to deliver greater
return on investment and enhance the risk management capability of an organisation.
CA rates India as its fastest growing segment and is expecting an 80-90 percent
growth rate in the coming year.
* Elaborate on the strategies laid down by CA for India
India is a crucial market for CA worldwide. While many
other markets are experiencing lower or stagnant growth rates, the Indian market
is posting a steady growth rate in some areas like security management and storage
management. What is needed in this market is the creation of sound awareness
levels. Secureworld, an initiative designed by CA aimed at spreading
awareness was recently conducted in New Delhi and Mumbai. Additionally, sustained
PR campaigns would also be an integral part of the marketing efforts. The key
here is to understand the fact that the security market is evolving from dozens
of vendors providing solutions in different categories of the security segment.
As vendor and solution consolidation continues to occur our efforts at marketing
such kind of solution will receive an additional boost.
|