I-Secure Product Overview © 2010 ECC International. All Rights Reserved 1 ECC International PHILIPPINES :: MALAYSIA :: VIETNAM © 2010 ECC International. Information Security Management Made Easy i-SeQure PRODUCT OVERVIEW

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 2 Agenda Product Introduction Product Benefits Product Highlights Functional Architecture Functions Overview: Asset Management Risk Management Incident Management Measurement Management Awareness Management Product/Service Packages

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 3 Introduction Comprehensive Information Security Risk Management Tool based on ISO risk management process. Six User Friendly Modules for identification, management and reporting of information assets and associated risks, security incidents, security measurements and security awareness trainings.

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 4 Introduction Unique Modules such as Information Security: Measurement, Awareness and Incident Management Easily Configurable to suit any kind of organization with different organizational structures and departments. The tool is multi-user and multi-location accessible through a simple browser.

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 5 Benefits Quick start to ISO based information security management system implementation and certification. Information security risk management process made simpler, efficient and effective. Enhances communication and coordination amongst the information security management team through a single dashboard. Compliance with ISO based risk management framework and ISO recommended guidelines. Ensure consistent and repeatable approach to information security risk management. Flexible and configurable to suit any kind of organization.

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 6 Highlights Identify, classify and characterize information assets Pre-defined list of threats and associated vulnerabilities Automatic generation of Statement of Applicability Security measurement made easy through 11 measurement categories and 30 metrics Indentify and analyze 7 categories of information security incidents. Reporting made easy through filter based report generation in multiple formats. Upload security awareness materials and management awareness programs. Security risks and incident dashboards

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 7 Functional Architecture ASSET MANAGEMENTRISK MANAGEMENT INCIDENT MANAGEMENTMEASUREMENTS AWARENESS MANAGEMENTDASHBOARD WORKFLOW SETTINGS REPORTS PDF, DOC,EXCEL

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 8 Functions Overview: Asset Management 1.Identify and Characterize the Asset 2.Classify the Asset based on Confidentiality 3.Categorize the Asset based on 7 types. 4.Rate the information assets based on confidentially, integrity and availability. 5.Associate an asset with a department, asset owner and location.

I-Secure Product Overview © 2010 ECC International. All Rights Reserved Identify threats and vulnerability. 2.Asses the probability and impact of the risk. 3.Evaluate and classify the risks. 4.Select the risk treatment options. 5.Develop the risk treatment plan. 6.Generate the State of Applicability Functions Overview: Risk Management

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 10 Functions Overview: Incident Management 1.Capture information security incident details. 2.Classify the incident into 7 types. 3.Record necessary action items 4.Manage the incident to closure. 5.Associate incidents to assets.

I-Secure Product Overview © 2010 ECC International. All Rights Reserved Select the measurement from 11 categories and 20 pre-defined metrics 2.Set measurement objectives. 3.Collect the measurement data. 4.Perform trend analysis Functions Overview: Measurement Management

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 12 Functions Overview: Awareness Management 1.Plan and schedule security awareness, training and education programs. 2.Register participants and manage attendance. 3.Associate training titles with standards set of training materials. 4.Upload training materials.

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 13 Functions Overview: Reports 1.Instant report generation at a click. 2.Use filter to decide the required information in each report. 3.Export reports to different formats such as Word, PDF and Excel. 4.Generate 10 different types of reports.

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 14 Product Packages Servicesi-Secure Standard i-Secure Silver i-Secure Gold Installation SupportXOffsiteOnsite* Set-Up and ConfigurationXOffsiteOnsite* User TrainingE-learning (Self)OffsiteOnsite* Data UploadX Maintenance SupportOne MonthSix MonthsOne Year Information Security Awareness Training Materials X

I-Secure Product Overview © 2010 ECC International. All Rights Reserved 15 Thank you !