1. 1Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) Info-Tech Research Group, Inc. Is a global leader in providing IT research and advice. Info-Tech’s products and services combine actionable insight and relevant advice with ready-to-use tools and templates that cover the full spectrum of IT concerns. © 1997-2014 Info-Tech Research Group Inc. Vendor Landscape: Data Loss Prevention Adversaries have changed the game, it’s time you change your DLP. Info-Tech's products and services combine actionable insight and relevant advice with ready-to-use tools and templates that cover the full spectrum of IT concerns.© 1997 - 2014 Info-Tech Research Group

2. 2Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) Data loss prevention (DLP) is an essential tool for data protection in the ever more heterogeneous corporate environment. Introduction Enterprises seeking to select a solution for DLP. Their DLP use case may include: Enterprises that have identified the need for DLP. Enterprises that are required to comply with regulatory compliance standards such as PCI-DSS, HIPAA, and GLBA. Enterprises that have an interest in further securing sensitive data, such as trade secrets and personal information, entering and leaving their network and infrastructure. This Research Is Designed For:This Research Will Help You: Understand what’s new in the DLP market. Evaluate DLP vendors and products for your enterprise needs. Determine which products are most appropriate for particular use cases and scenarios.

3. 3Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) Book a Guided Implementation Today: Info-Tech is just a phone call away and can assist you with your evaluation. Our expert Analysts can guide you to successful technology selection. Here are the suggested Guided Implementation points for the DLP Vendor Landscape: Guided Implementation points in the DLP Vendor Landscape Section 1: Shortlist Assistance and Requirements Get off to a productive start: Discuss the market space and how vendors are evaluated. Decide on which deployment option suits you best and narrow down the options based on customized requirements. Section 2: RFP and Budget Review Interpret and act on RFP results: Review vendors RFPs and ensure the solution is meeting your needs. Discuss average pricing of solutions and what can fit into your budget. Section 3: Negotiation and Contract Review Purchase optimization: Review contracts and discuss best practices in negotiation tactics to get the best price for your solution. This symbol signifies when you’ve reached a Guided Implementation point in your project. To enroll, send an email to GuidedImplementations@InfoTech.com or call 1-888-670-8889 and ask for the Guided Implementation Coordinator.GuidedImplementations@InfoTech.com

4. 4Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) Market overview Data loss prevention (DLP) entered the security scene in the mid-2000s as the next effective solution to enterprise security concerns. Originally, all of the DLP providers on the market were startups specializing in the area. Primary usage of DLP was centered around meeting compliance and regulatory requirements. The existing DLP technologies were able to demonstrate data protection. By 2010 unstructured data became more important and more numerous than structured data. DLP had grown in protective capabilities and was now being used to protect intellectual property. Advanced data fingerprinting and detection methods enabled organizations to secure their sensitive and valuable data. DLP functionality has progressively branched out to other security products such as email and web security gateways. The DLP segment is growing as the market focus shifts to securing data rather than detecting adversaries. Advanced, proactive, protection-based models with content and context awareness will grow even more with DLP capabilities. Advanced threat vectors, both from external and insider threats, are pushing for advanced detection methods like behavioral analysis with threat intelligence support. A growing demand for intelligent business integration will push the incorporation of more contextual information into DLP decision making to reduce false positives and reduce administrative workloads. Redactive capabilities will protect data while allowing business continuity. Predictive detection models will evolve in order to identify the next possible data breach. The DLP market will continue to divide into two main segments: simple dedicated DLP solutions for less demanding security organizations and advanced add-on functionality to comprehensive security operations for high demand organizations. How it got here Where it’s going As the market evolves, capabilities that were once cutting edge become default and new functionality becomes differentiating. Unstructured data fingerprinting has become a Table Stakes capability and should no longer be used to differentiate solutions. Instead focus on advanced environment support and multiple enforcement actions to get the best fit for your requirements.

5. 5Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) DLP vendor selection / knock-out criteria: market share, mind share, and platform coverage Absolute Software. Entered the DLP market with the acquisition of the specialist DLP vendor, Palisade Systems. CA Technologies. The largest independent software vendor in the ITOM market offers a DLP solution. Clearswift. The recent release of the CIP product is the capstone on historically strong DLP functions and offerings. Code Green Networks. A smaller, dedicated DLP vendor, but with a feature-strong product offering. Fidelis Cybersecurity Solutions. An acquired subsidiary of General Dynamics Advanced Information Systems. McAfee. The second largest security software company offers a mature DLP product. RSA. The security division of EMC continues to support innovative DLP functionality. Symantec. The largest security software company offers a complete and granular DLP solution. Trustwave. With a traditional focus on compliance, Trustwave competes on detection methods and specific use cases. Digital Guardian, formerly Verdasys. This security vendor focuses on data protection and offers a highly feature-rich DLP solution. Websense. Traditional focus on email and web security plays well to this vendor’s DLP offering. Included in this Vendor Landscape: Content and context aware DLP has emerged as the baseline for viable vendors leaving behind solutions that apply policies without viewing content or analyzing the context. Simple regulatory compliance solutions no longer serve the general market as demand grows for comprehensive, multi-faceted DLP solutions. For this Vendor Landscape, Info-Tech focused on those vendors that offer broad capabilities across multiple platforms and that have a strong market presence and/or reputational presence among mid and large-sized enterprises.

6. 6Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) Criteria Weighting DLP criteria & weighting factors Vendor is committed to the space and has a future product and portfolio roadmap. Focus Vendor offers global coverage and is able to sell and provide post-sales support. Support Vendor is profitable, knowledgeable, and will be around for the long term. Viability Vendor channel strategy is appropriate and the channels themselves are strong. Sales Implementing and operating the solution is affordable given the technology. Affordability Multiple deployment options and extensive integration capabilities are available. Architecture The end-user and administrative interfaces are intuitive and offer streamlined workflow. Interface The solution provides basic and advanced feature/functionality. Features Interface Architecture Affordability Product Vendor Viability Focus Sales Support Product Evaluation Criteria Vendor Evaluation Criteria

7. 7Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) Table Stakes represent the minimum standard; without these, a product doesn’t even get reviewed If Table Stakes are all you need from your DLP solution, the only true differentiator for the organization is price. Otherwise, dig deeper to find the best price to value for your needs. The products assessed in this Vendor Landscape TM meet, at the very least, the requirements outlined as Table Stakes. Many of the vendors go above and beyond the outlined Table Stakes, some even do so in multiple categories. This section aims to highlight the products’ capabilities in excess of the criteria listed here. The Table StakesWhat does this mean? The solution provides a central reporting engine for policy creation and management with canned reports and RBAC. Centralized Reporting Engine The solution provides options, such as block, move, quarantine, and delete, for violations. Multiple Enforcement Actions The solution scans content and context of files in real time, 24/7. Real-time Scanning The solution is capable of structured and unstructured data fingerprinting for scanning. Fingerprinting The solution scans inbound and outbound messages for security violations. Email & IM Support What it is: Feature

8. 8Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) Advanced Features are the capabilities that allow for granular market differentiation Info-Tech scored each vendor’s features offering as a summation of its individual scores across the listed advanced features. Vendors were given one point for each feature the product inherently provided. Some categories were scored on a more granular scale with vendors receiving half points. Breadth of protocol support, cloud protection, peer to peer, Web 2.0, and virtualization environment support. Advanced Environment Support Multiple operating system and device type support with offline protection, removable media, print screen, and copy and paste support. Endpoint Support Advanced data fingerprinting of non-Microsoft documents, graphic, audio, and visual file formats, and double byte characters. Data Fingerprinting Support for real-time decryption and re-encryption of information. Decryption and Re- encryption Support E-discovery support, drill-down and pivot functionality, and export capabilities with data preservation. Forensic Capabilities Integration with augmentation solutions like DRM, Active Directory or LDAP, SIEM, and NAC. Integration What we looked for: Feature Advanced FeaturesScoring Methodology For an explanation of how Advanced Features are determined, see Information Presentation – Feature Ranks (Stoplights) in the Appendix.Information Presentation – Feature Ranks (Stoplights) Behavioral detection methods with dynamic, real-time scanning and detection of data at rest, in motion, and in use. Advanced Detection Methods Encryption and data redaction enforcement actions with real- time workflow kickoff end-user notification. Advanced Enforcement Actions Centralized reporting engine with out-of-the-box policy support and custom policy creation with bi-directional workflow integration Policy and Reporting

9. 9Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) Issue an RFP to ensure that the vendor fits your needs, not the other way around Use Info-Tech’s Data Loss Prevention RFP Template to conduct this critical step in your vendor selection process.Data Loss Prevention RFP Template The Statement of Work Proposal Preparation Instructions Scope of Work Basic Feature Requirements Advanced Feature Requirements Sizing and Implementation Vendor Qualifications and References Budget and Estimated Pricing Vendor Certification Info-Tech’s Data Loss Prevention RFP Template is populated with critical elements including:

10. 10Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) Provide vendors with a consistent set of instructions for key scenarios from the perspective of IT and departmental managers. Outline solution capabilities and processes around: o Traffic Detection and Protection o Writing and Customizing Policies o Policy Violation Enforcement Actions o Access Control Provisioning o Endpoint Protection o Reporting Take charge of vendor finalist demos with a Vendor Demonstration Script The Data Loss Prevention Vendor Demonstration Script will: A product demo, using Info-Tech’s Data Loss Prevention Vendor Demo Script, helps enterprise decision makers better understand the capabilities and constraints of various solutions.Data Loss Prevention Vendor Demo Script

11. 11Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) Appendix 1.Vendor Landscape Methodology: Overview 2.Vendor Landscape Methodology: Product Selection & Information Gathering 3.Vendor Landscape Methodology: Scoring 4.Vendor Landscape Methodology: Information Presentation 5.Vendor Landscape Methodology: Fact Check & Publication 6.Product Pricing Scenario

12. 12Info-Tech Research Group Vendor Landscape: Data Loss Prevention (DLP) Info-Tech Research Group Helps IT Professionals To: Sign up for free trial membership to get practical solutions for your IT challenges www.infotech.com Quickly get up to speed with new technologies Make the right technology purchasing decisions – fast Deliver critical IT projects, on time and within budget Manage business expectations Justify IT spending and prove the value of IT Train IT staff and effectively manage an IT department “Info-Tech helps me to be proactive instead of reactive – a cardinal rule in a stable and leading edge IT environment. - ARCS Commercial Mortgage Co., LP Toll Free: 1-888-670-8889