Addamark Technologies Offers Cost Effective Compliance With Data Retention Regulations

Business Wire, March 29, 2004

Business Editors/High-Tech Writers

SAN FRANCISCO--(BUSINESS WIRE)--March 29, 2004

Addamark Omnisight(TM) 2.0 Mitigates the Legal Risk Associated

with Meeting Information Assurance Controls

Addamark Technologies today announced a new version of its data management system designed to address the impact of federal regulations on data retention. Addamark Omnisight(TM) 2.0 offers both new and enhanced features that enable enterprises to more efficiently collect, retain and review enterprise event data. This data contains the legal records required for information security and regulatory compliance. Noridian (Blue Cross / Blue Shield), Lehman Brothers, PFF Bank & Trust and Rockwell Automation are among the companies currently using Addamark Omnisight as a basis for compliance with federal regulations and guidelines.

"Addamark's data management solution offers a highly flexible, responsive, and scalable solution allowing us to query large volumes of event logs on a daily basis," said Troy Aswege at Noridian (Blue Cross / Blue Shield). "Addamark Omnisight helps us meet our goal of full compliance with government regulations and strict adherence to security best practices."

Enterprise event data is a critical component of legal strategies involving corporate security and liability. According to legal requirements, log data must be complete, accurate, and verifiable in order to be legally admissible. Federal regulations and guidelines including the Gramm-Leach-Bliley Act (GLBA), HIPAA, FFIEC, NISPOM, and Sarbanes-Oxley mandate that log data be collected and stored to conform to standards of legal admissibility and business reliability, as well as enable efficient analysis in the event of an investigation. The SEC 17a-3 and 17a-4 for example, requires brokers and dealers maintain records for at least up to six years.

"Historical analysis and reporting of log data is essential for compliance with information security regulations," said Mark Nicolett, vice president and research director at Gartner. "As the amount of enterprise log data continues to grow at a tremendous rate, companies not only need real-time analysis of the data in order to mitigate security threats, but also the ability to collect, retain and review this data over the long term in order to meet information security regulatory compliance."

Addamark enables compliance while simultaneously reducing the IT cost structure of storing and accessing enterprise event data. Addamark Omnisight takes a new approach to data management by collecting and storing a wide variety of logs, including application, work station and server logs in a central, consolidated repository. This repository can manage terabytes of data, and easily scales to meet evolving needs. For audit or investigation requirements, the logs are constantly accessible for routine report generation and ad-hoc queries.

Omnisight 2.0

Distinguishing features of Omnisight 2.0 include making it easier for enterprises to understand and expedite regulatory compliance, gather data from across the organization and store it at a higher rate of compression, as well as flexibly query it in the event of an investigation.

-- Addamark Security Analytics Subscription (SAS) -- This new

service enables enterprises to expedite regulatory compliance

by being able to quickly implement a central log repository

and generate reports tailored to the requirements of specific

regulations. SAS provides certified and tested log adapters

for many common application, infrastructure, and security

systems. It also includes out-of-the-box reports for reviewing

suspicious activity, identifying policy violations, and

conducting information security investigations as required by

federal laws and regulations. It currently supports over 40

specific log file types and provides over 75 common reports in

order to facilitate specific compliance efforts targeted to

these classes of log sources.

-- Addamark Collector -- New with Omnisight 2.0, Addamark

Collector creates a reliable infrastructure to gather and load

log files from all sources across an enterprise as required by

regulations. Collector centralizes and loads any type of log

data into Omnisight's Scalable Log Server for retention and

review requirements.

-- Addamark Analyzer -- The new version of Addamark Analyzer

provides an intuitive and interactive web-based user interface

for the review and analysis of log data stored in Omnisight's

Scalable Log Server. Analyzer is optimized to meet the unique

requirements for the review and investigation of massive

amounts of log data. It schedules and delivers reports in a

variety of formats, and alerts incident response teams on the

basis of exception reports.

-- Addamark Scalable Log Server -- Addamark Scalable Log Server

uses unique compression technology to reduce data to more

efficient sizes, often exceeding 10 percent of the original

data size. It also offers clustering capabilities allowing it