enabling government transformation€¦ · aligning it programs to achieve next-generation...

Enabling govErnmEnt transformationSymantec Federal Government Solutions

Enabling Government Transformation

2

Symantec provides federal government agencies with cost-effective, secure, and reliable solutions to support next-generation government.

symantEc fEdEral govErnmEnt solutions

3

As the federal government transforms itself to make next-generation government a reality, certain initiatives have emerged as central to this shift.

collaboration: Working across departments and agencies has never been more important. Line of business strategies reduce duplication in how agencies provision IT, lower costs,

leverage IT specialization, and accelerate time-to-program delivery. In addition, the insights and efficiencies that come from government entities and the private sector working closely together can enhance decision making and streamline processes. But with collaboration comes a host of challenges including access to common platforms, tools that support the open exchange of information, security concerns, and cultural and organizational barriers due to limited experience partnering with others. Collaboration requires a mind shift—a new level of openness to share information, processes, and

infrastructure—as well as a technology shift to new systems to support the sharing of knowledge and best practices.

security: The amount of sensitive and confidential information that federal government organizations must manage and protect is growing exponentially. Rapidly changing threats, complex government IT environments, and a

growing number of endpoints make it difficult for government to understand a department or agency-wide security posture at any point in time and to properly control and protect information. The Federal Information Security Management Act (FISMA), the National Institute of Standards and Technology, the OMB Trusted Internet Connection (TIC) mandate, and the Comprehensive National Cyber Security Initiative (CNCI) set forth guidelines to more effectively secure the nation’s infrastructure and systems. While progress is being made, navigating these regulations, identifying priorities, and understanding the tools

Paving thE way for nExt-gEnEration govErnmEnt

The December 2008 report by the Commission on Cybersecurity for the 44th Presidency states the challenge plainly: “America’s failure to protect cyberspace is one of the most urgent national security problems facing the new administration.”


4

Government should be collaborative. Executive departments and agencies should use innovative tools, methods, and systems to cooperate among themselves, across all levels of government, and with nonprofit organizations, businesses, and individuals in the private sector.

–Presidential Memorandum for the Heads of Executive Departments and Agencies on the Subject of Transparency and Open Government

and technologies available to protect sensitive and private data can be a daunting task.

compliance: From personal data privacy and protection to national defense initiatives and energy efficiency,

achieving compliance with all manner of regulations is a complex and costly issue for federal government agencies. Compliance with FISMA or regulations such as the Energy Independence and Security Act, that sets a target for the government to reduce energy and other resource consumption by 30 percent by fiscal 2015, were created with the right end goals, but measuring up and meeting these targets is difficult with limited budgets. In addition, complying with the Freedom of Information Act (FOIA) and the Federal Rules of Civil Procedure (FRCP) puts added pressure on federal agencies

to make information available yet secure. Technology can play a critical role in helping federal government agencies use automation to comply with internal policies and external regulations and minimize the burden on existing resources.

Paving thE way for nExt-gEnEration govErnmEnt

Through virtualization, the OMB estimates the federal government can save 16–27 percent annually on its IT infrastructure budget—a potential savings of $18 billion to $29 billion over 10 years (based on a five-year technology refresh cycle).


5


6

In order to support initiatives critical to government transformation, federal agency CIOs, CSOs, and their teams are making strategic decisions about their current infrastructure, but they face several challenges and realities as they proceed down this path.

budget limitations: Flat budget growth across many federal agencies places a significant emphasis on cost-efficiency and automation. Technology can help government meet the challenge of doing more

with less. For example, cloud computing, virtualization, and social media provide operational efficiencies and savings, while data protection and storage management automate processes and optimize resource usage.

data growth: The growing volumes of data that need to be stored, managed, and moved are taxing government infrastructures. And requirements to make this data accessible to other government entities, third parties, and citizens

place new demands on existing systems. Tools to cost-effectively gain better control over data and ensure availability play a vital role in continuity of operations. Executive-level reporting that aggregates information and provides a snapshot view streamlines data security and management processes.

challEngEs of govErnmEnt transformation

“…the challenge most mentioned by CIOs has been information sharing across departments and agencies.”

–Nineteenth Annual Survey of Federal CIOs, TechAmerica, February 2009


7

it complexity: The combination of system scale, diversity, and pace of change is creating unprecedented levels of complexity in the government IT environment. A proliferation of mobile devices, endpoints, and compliance requirements are just a few of the challenges testing the limits of IT organizations. Simplifying IT complexity through automation and increased visibility is essential.

information security and privacy: Significant attention and resources are being devoted to information security and maintaining personally identifiable information. Because the threat landscape is dynamic and evolving and information security is a common thread that weaves through every initiative, maintaining data security and privacy requires a strategic and centralized approach that is broad and inclusive. Information must be securely stored, managed, and shared across departments, agencies, and with the public. Symantec has more than a decade of experience helping federal government IT management and staff to identify technology solutions that address these challenges and fit their specific needs.

“We expect cybersecurity issues will continue to increase in profile and priority in the federal IT market for the next several years.”

–Tim Dowd, Chief Executive Officer of INPUT


8

Automated methods have become increasingly important for several reasons, including the complexity of achieving compliance with various laws, executive orders, directives, policies, regulations, standards, and guidance; the increasing number of vulnerabilities in information systems; and the growing sophistication of threats against those vulnerabilities.

–Presidential Memorandum for the Heads of Executive Departments and Agencies on the Subject of Transparency and Open Government


9

Focusing efforts on the right IT programs that align with and can be leveraged across multiple transformation initiatives is critical.

Sensitive to limited budgets, Symantec helps federal government agencies identify cost-effective technology solutions that address the challenges of data growth, IT complexity, and information security and privacy to support key IT programs, including:

it modernization: Government’s ability to improve security, continuity of operations, data storage and access, collaboration, and interoperability, requires a cost-effective approach to systems modernization. Symantec offers a range of solutions to modernize government infrastructures—service-oriented architecture (SOA), Web 2.0 applications, virtualization, and cloud computing—to address new initiatives and manage costs. These solutions are also essential as government agencies strive to modernize the healthcare system and reduce environmental impact and lower costs through green IT.

it consolidation: Faced with mounting IT complexity, government organizations are turning to IT consolidation to lower IT costs, increase efficiencies and accuracy, and simplify IT management. Symantec is helping organizations gain control of sprawling infrastructures with solutions for data center optimization, server consolidation, storage management, and shared services.

cybersecurity: Increasingly open networks, dynamically changing threats, and an expectation by the public that their personal information is secure puts unprecedented pressure on CIOs and their staff to secure data and systems. Symantec has solutions that can help across the board to monitor the global threat environment, protect data and systems, and maintain compliance with IT policies and external regulations.

automation: Managing significant amounts of data and maintaining IT compliance can easily become a time-intensive and manual process that drains valuable resources. Symantec provides solutions to automate data management, monitoring, and compliance reporting for organizations seeking cost-effective ways to support critical programs while keeping pace with data growth and compliance mandates.

aligning it Programs to achiEvE nExt-gEnEration govErnmEnt


10

Federal government agencies are being asked to do more with less. Whether you’re modernizing existing technology infrastructure to support key government programs and compliance, consolidating IT to reduce complexity and lower costs, protecting personal information and systems from cyberthreats, or automating processes to increase cost-efficiency and effectiveness, Symantec has solutions to help.

Symantec offers a breadth of solutions and depth of expertise to help you deploy a cost-effective, secure, and reliable approach to government transformation.

archiving: Automate the retention and storage of email, files, instant messages, and other unstructured content in accordance with IT policies.

discovery and retention management: Capture, classify, and store email, instant messages, Microsoft® SharePoint® content and files to enforce retention policies, quickly respond to FOIA and FRCP discovery requests, and reduce storage costs and management overhead.

data center consolidation: Standardize and automate the management of heterogeneous storage platforms. Consolidate storage resources and maximize usage. Simplify data center migration and optimize data center utilization.

symantEc solutions for fEdEral govErnmEnt agEnciEs

According to the informationweek 2009 Analytics Report on Government IT Priorities, Cybersecurity is the top IT priority with 76 percent of respondents rating it very or extremely important.


11

KEy trEnds symantEc hElPs you with thEsE solutions

it modernization Enhance service delivery for a range • of programsProvide management-level reporting• Improve operational efficiency and • lower costsSupport secure Web-based access, • interactions, and collaborationProtect confidential information • Realize IT/operational efficiencies and • cost savings through SOA

Archiving • Discovery and Retention Management • Data Loss Prevention• Virtualization Management• Green IT • High Availability and Disaster • RecoveryStorage Management• Service-Oriented Architecture • IT Service Management• IT Compliance •

it consolidation Optimize data storage and • management Reign in explosive data storage growth• Improve operational efficiency and • lower costsLeverage shared services through SOA• Provide a centralized management • view

Data Center Consolidation• Archiving • Storage Management• Service-Oriented Architecture• High Availability and Disaster • Recovery Virtualization Management• Endpoint Management • IT Service Management• Green IT •

cybersecurity Improve security situational • awarenessProtect against known and unknown • threatsComply with internal IT policies and • external regulationsSafeguard personal information and • IT infrastructure

Data Protection• Data Loss Prevention• Real-time Situational Awareness• Global Threat Intelligence • Endpoint Management • IT Compliance • Discovery and Retention Management •

automation Increase cost-efficiency • Enhance IT staff productivity• Reduce time spent on repeatable tasks• Streamline compliance with IT policies • and external regulations

Workflow• Archiving • Discovery and Retention Management • High Availability and Disaster Recovery• Data Protection• Storage Management• IT Service Management• IT Compliance •

data Protection: Protect information from both external threats and improper compliance with department or agency policies. Ensure that only compliant endpoints access the department or agency network. Manage a complete data protection policy across the organization to eliminate data theft, minimize data loss accidents, and reduce data security risks resulting from non-compliant access.

data loss Prevention: Prevent sensitive or confidential information from leaving inappropriately. Enforce and manage federal security and DLP policies and remediate from a single console to secure data.

virtualization management: Instantly provision and protect managed and unmanaged endpoints while reducing application licensing costs and increasing productivity with streaming, virtualization, and desktop broker technologies.

green it: Reduce capital and operating expenses of running a data center by improving utilization of new and existing hardware and adopting solutions such storage-tiering and clustering.

high availability and disaster recovery: Protect mission-critical applications and data against planned and unplanned downtime by automating application recovery across physical and virtual environments on major application, server and storage platforms. Meet Continuity of Government objectives across technologies and data centers by automating backup and recovery, application clustering, and data replication.

storage management: Standardize and automate the management of heterogeneous storage platforms to maximize storage utilization, increase IT responsiveness, and lower infrastructure and operational costs.

global threat intelligence: Improve security situational awareness and reduce the administrative burden of protecting sensitive information against known and unknown threats with the largest collection of worldwide threat intelligence data and automated security updates. Quickly and accurately assess the network security of government enterprise networks and connected systems. Leverage information to protect against threats from cybercrime intrusions, inbound and outbound email, instant messages and Web traffic with antivirus, antispam, antimalware, Web threat protection, and URL and content filtering technologies.


12


13

Problem:A federal government agency needed to better enforce security at the endpoints (desktops, laptops, servers, and devices) but faced a host of challenges, including a decentralized organization of 4,200 employees based at the headquarters, in remote offices, and in the field, as well as a variety of consultants, all working within a heterogeneous workstation environment.

solution:Symantec Endpoint Security solutions were implemented within two weeks—including installation, configuration, testing, and all the necessary approvals of security policies—with no impact to employees. Benefits included:

Reduction in calls to the IT help • desk as a result of greater automation and control of the endpoints Increase in IT employee • productivity as a result of a more centralized view and greater automation controlReduction in audit costs due • to increased visibility of the endpoints

symantEc hElPs fEdEral govErnmEnt agEncy sEcurE its infrastructurE


14

Endpoint management: Drive down IT costs and improve efficiencies with comprehensive application and client management. Protect the gateway and ensure optimal performance. Comply with consolidation of external Internet connections as required by CNCI and TIC.

service-oriented architecture: Streamline integration of new and existing technologies for a strong interoperable architecture to collaborate and securely share information. Accelerate the delivery of new processes to support emerging programs and optimize efficiency, enforce processes and policies, and automate redundant tasks in existing processes.

it service management: Actively manage the entire asset lifecycle and align service resources with ITIL to optimize your IT investments. Track IT asset allocation configuration, deployed versions, relationships, and historical information. Monitor software and hardware usage for re-allocation and contract negotiation.

it compliance: Automate key compliance and security processes using the Security Content Automation Protocol to reduce risk and operational cost, identify and protect against threats, and achieve compliance with internal policies and external regulatory requirements such as FISMA and FDCC.

A range of services, including the Symantec Cyber Threat Analysis Program (CTAP), backs Symantec solutions. Highly skilled Symantec consultants, with access to the Symantec Global Intelligence Network and more than 20 years of cyber intelligence experience, help strengthen your defensive posture while increasing your proactive capabilities. The CTAP will extend your view of the global threat landscape and provide the skilled resources to deliver effective risk mitigation and response efforts.

“When an organization intends to change or enhance their current endpoint security strategy, they need a partner like Symantec who has a firm understanding of their business and can really help them define the right solution for their specific needs…Whether endpoints are mobile or connected to the network, protecting them from exposure to security and virus threats will become ever more increasingly challenging.”

–Greg Malacane, Senior Business Analyst, the Alchemy Solutions Group, a global sales consulting firm that conducts Total Operational and Economic Impact™ research


15


16

Over the past 25 years Symantec has established itself as the world leader in IT security and infrastructure solutions, a position it sustains with significant investment in research and development, technology acquisition, and industry and government partnerships. Through ten years of work with federal agencies, Symantec has developed a deep understanding of the unique challenges government agencies face and how to address these challenges with a portfolio of industry-leading software, services, and support.

Symantec solutions have garnered widespread recognition from leading industry analyst firms including Gartner, Forrester Research, and IDC.

Gartner has listed Symantec in its • Leaders Quadrant for storage services, security information and event management, email active archiving, content monitoring and filtering for data loss prevention, email security boundary, enterprise antivirus, email archiving, and

North American managed security services providers.

Forrester Research named • Symantec a Forrester Wave™ leader for enterprise database monitoring and real-time protection, client management suites, enterprise security information management, information leak prevention, IT asset management, and messaging archiving.

IDC identifies Symantec as a • leading vendor for data protection and recovery, cross-platform clustering and availability, email archiving applications, security and vulnerability management, policy and compliance software, host and vulnerability software, secure content management, messaging security software, and antivirus software.

Symantec rounds out its industry-leading solutions with market knowledge, relationships, and expertise that deliver compelling value to federal CIOs, CSOs, and their staff, including:

A track record of helping • government organizations achieve collaboration without compromising security

The largest collection of threat • intelligence in the world

why symantEc?


17

Experience using technology to • streamline support of compliance regulations

Rigorous platform independence to • ensure support for the entire spectrum of operating environments, storage platforms, and emerging technologies

A collaborative relationship with • hardware and software leaders

Technical, professional, consulting • and managed services solutions dedicated to customer success

let symantec help you transform your it operations to make next-generation government a reality.


18

Symantec has long been an active participant in associations and organizations dedicated to the support of government excellence through IT. A testament to that, in 2009 Symantec Chairman, John W. Thompson, became the 50th recipient of TechAmerica’s highest honor, the David Packard Medal of Achievement.


19

Symantec is a global leader in providing security, storage and systems management solutions to help consumers and organizations secure and manage their information-driven world. Our software and services protect against more risks at more points, more completely and efficiently, enabling confidence wherever information is used or stored.

for specific country offices and contact numbers, please visit our website. for information in the united states, call toll-free +1 (800) 745 6054.

Copyright © 2009 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.

symantec world headquarters

350 Ellis Street

Mountain View, CA 94043 USA

+1 (650) 527 8000

+1 (800) 721 3934

www.symantec.com

symantec has the technology, capabilities, and experience to enable next-generation government.

Take the next step: Contact your Symantec representative, or visit http://go.symantec.com/federalgovernment

enabling government transformation€¦ · aligning it programs to achieve next-generation...

Documents