Issue link: http://read.uberflip.com/i/45522
malware, as well as email encryption, DLP filtering and Web content filtering. Our transition to an outsourced email security service has immediately added value to our security program with its very strong DLP engine. There are two things in particular that we like about this vendor. One is that we don't have to maintain the DLP dictionaries, something that most vendors would defer back to you. The other is that the appliances, which are not on our premises, attempt to make a TLS connection to the peer email server; if it can't connect and there is sensitive information, it sends a secure message to the recipient with a link to read it. In fact, a 60-day report recently showed that 219 messages were encrypted and, of these: • 90 percent used the TLS server-to-server method • 12 were manually encrypted • Only 10 required positive interaction by the recipient The vendor created the rules and all the work behind it and, while we still need folks to run reports and take some actions, a lot less is required from our team. I believe that this type of setup should and will become the standard for today's email security practice. Regarding Web browsing, we moved from a complex in-house solution composed of three different vendors to one SaaS solution in June 2010. Since merging to it, the malware infection in our machines has decreased by 80 percent. Yes, you read that correctly. The number of viruses/malware that made it inside the network has gone down from an average of about 650 per month to about 140 per month, as shown in the following table. (The very high 48 Risky Business ILTA White Paper numbers were due to self-inflicted situations that were not actually viruses/malware.) This data represents threats that made it to our network before being cleaned up. Month of Event Jan-2009 Feb-2009 Mar-2009 Apr-2009 May-2009 Jun-2009 Jul-2009 Aug-2009 Sep-2009 Oct-2009 Nov-2009 Dec-2009 Jan-2010 Feb-2010 Mar-2010 Apr-2010 May-2010 Jun-2010 Jul-2010 Aug-2010 Sep-2010 Oct-2010 Nov-2010 Dec-2010 Jan-2011 Feb-2011 Total Number of Threat Events 2928 1416 449 950 585 460 868 123 198 63 213 29797 40 138 205 186 110 43 41 122 100 24 4083 102 89 82 43415