Compliance

Recently, BT has introduced integrated data security solutions to strengthen enterprises' defense against unauthorized activity, and to continually ensure customers improved compliance, enhanced security posture, and prevention of financial loss. We are committed to helping our customers solve real world business problems with real world solutions.

Business Opportunity -- The Best Defense is a Good Offense

The United States is witnessing increased regulation of business process-oriented laws including the Sarbanes-Oxley (SOX) Act of 2002, the California Senate Bill 1386, Database Protection Act (SB 1386) of 2001, the Gramm Leach Bliley (GLB) Act of 1999, and the Health Insurance Portability and Accountability Act (HIPAA) of 1996/2003.

Each of these laws imposes strict requirements on enterprises to establish or identify, document, test and monitor "internal control" processes. Most, if not all, of these processes are supported by increasingly sophisticated information technologies. Being unprepared can cost enterprises more than money - under Sarbanes-Oxley, jail time is possible for non-compliant executives.

SOX, GLB, HIPAA and SB 1386 all have data privacy and protection in common. Each has varying requirements but all share the following common enterprise mandates:

• Security Policies: Well-defined policies for data privacy and protection discourage the government from imposing their own standards-the least desirable of all situations.
• Security Processes: Demonstrating policy in action with people using technology in a predictable manner to protect data from attackers.
• Robust Audit Trail: The foundation of evolved process, where regulators require evidence of what happened to justify why events need not be reported.
• Preventative Measures: Encryption, digital signing and real-time detection of attacks all serve to pre-empt attacks on data.

The BT Solution

BT's Managed Security Services include Managed Security Monitoring, Managed Log Retention and Web Portal reporting as a foundation for managing compliance with data privacy and protection regulations. Real-time threat detection and prevention, a well-defined response process, and a robust audit trail are critical for enterprise IT organizations to manage SOX, GLBA, HIPAA, and SB 1386. BT's Security Consulting services bring best practices to bear in establishing lasting and proven IT policies before regulators arrive.

Vulnerability Scanning ensures a baseline is established and ongoing improvements are identified.

Outsourced Device Management services bring best practices to perimeter security devices.

Compliance Solution Checklist

	Proven Policy	Security Consulting
	Industry Leading Protection Process	MSM Service
	Real Time Response to Attack	MSM & Analysts
	Real Time Visibility Into Process	Web Portal
	Collecting and Storing 100% Unaltered Logs Securely Transferred to BT SOCs for Correlation, Analysis, Alerting & Reporting	Managed Log Retention
	Robust Reporting & Forensics	Web Portal
	Lowest Cost, Perimeter Best Practices	Device Management

Request Compliance Whitepaper
Request White Paper: Managed Log Retention for Improved Compliance and Risk Mitigation