SE

CU

RE

MA

G 2

01

1 B

Y S

EC

UR

EM

ET

RIC

TE

CH

NO

LO

GY

VOLUME 4 2012

Not for Sale

Not f

or S

ale

SECUREMETRIC TECHNOLOGY GROUP

Hosted by:

SecureMetric TechnologyEditorial Team

CONTACT US:SecureMetric TechnologyAddress: 2-2, Incubator 2, Technology Park Malaysia, Bukit Jalil, 57000 Kuala Lumpur, Malaysia.Tel: +603 8996 8225Fax: +603 8996 7225

HighlightTrade Mission to Vietnam, Laos & Cambodia with MOSTI, Malaysia

Exhibitions 2011National eID & ePassport ConferenceCSO and the ASEAN Bankers Forum

Project 2011MyEGAl Hilal BankBank Rakyat

NewsSecureMetric scores 4.5 out of 5 in MSC's SCORE + Programme

ProductsProfessional Consultancy Services

Awards

Kuala Lumpur, Malaysia

National eID &ePassport Conference

2012

2009Lisbon, Portugal

2010Athens, Greece

2011Istanbul, Turkey

SECUREMETRIC TECHNOLOGY GROUPCOVER STORYS

EC

UR

EM

AG

20

12

BY

SE

CU

RE

ME

TR

IC T

EC

HN

OL

OG

Y

1

VOLUME 4 2012

National eID & ePassport Conference

Kuala Lumpur 2012The 4th edition National eID & ePassport Conference will be hosted on October 2012, Kuala Lumpur, Malaysia. (Date and venue to be confirmed by February)

After 3 successful conference in Lisbon (2009), Athens (2010) and Istanbul (2011), the organizing committee wishes to extend the 2012 edition to be the first edition to be host in Asia. We target to gather more than 400 top level delegates with the brightest minds in the industry from around the world to Kuala Lumpur, to witness and share the foundation and evolution of global eID infrastructure, based on the digitalization of citizen ID documents.

Over 80% of the European Union Member States and ICAO Countries have introduced or are in the process of introducing biometric-based ID documents or are at least considering doing so. The trend towards this form of technology is increasing essential and under important consideration of all countries administration.

The 4th edition is supported by the Ministry of Science, Technology and Innovation (MOSTI) of Malaysia. With support from state members of ASEAN, we wish to promote the awareness and understanding of the global eID development to this region to establish a fundamental knowledge sharing and discussion platforms to contribute towards global eID agenda.

EU-ASEAN eID InteroperabilityMr. Gérard Galler, Information Society & Media Director General is responsible for the Digital Agenda is expected to share about the experience of cross border eID Interoperability for European Union and also directive towards cross continent eID interoperability. European Union is taking this opportunity to explore on how to establish a mutual Digital Agenda with ASEAN toward EU-ASEAN eID Interoperability.

SecureMetric is proud to be a silver sponsor for this year's National eID & ePassport Conference in Istanbul, Turkey. This 3rd edition with the support of the Turkish Ministry of Foreign Affairs and under the patronage of Mrs Neelie KROES, Vice-President of the European Commission responsible for the Digital Agenda. The event was held on 24 & 25 October 2011, at Istanbul, Turkey.

The follow-up to very successful previous conference editions in Lisbon 2009 and Athens 2010, will continue to focus on recent developments in different countries across the Globe and new major political initiatives both nationally and from the European Commission.

SecureMetric showcased its PKI products in this conference and share its success stories in making PKI more acceptable in the South East Asia region.

In addition to being a sponsor, SecureMetric is

Government Policies, Current Development, Past Experiences and ChallengesThere are at least 10 top speakers from European and non-Asia continents together with representatives from Asia to share about their government policies towards their countries’ Digital Agenda, the current stage of development together with their past experiences and challenges.

Latest Trends in Technology Evolution, Present and FutureThere are several high profile speakers representing experts from the industry to share and discuss about what are the latest trends in term of technology evolution related to eID, ePassport, eGovernment, eInvocing, PKI and Mobile PKI. They will also give an insight on what they foreseen to be the f¬¬uture trends.

proud to be able to invite top government officials and delegates from Malaysia, Indonesia, Singapore and Vietnam to this event. With the success of this event and the initiative from SecureMetric, Malaysia will host next year's event in Malaysia.

The conference has given Malaysia its rightful recognition as a pioneer in the implementation of the eID with many success stories. Lt Col (R) Dato' Husin Jazri, CEO of Cyber Security Malaysia was also invited to share with the conference participants the success stories of Malaysia's implementation of eID.

SecureMetric is looking forward to making this event a success in Malaysia. This will eventually leapfrog Malaysia into the world arena as a world class country with many success in implementing eID and ePassport.

Mr. Gérard Galler joined the European Commission in 1998 to support research on smartcards through the EU Framework Programme for Research. He ran eEurope Smartcards, a policy initiative in the early 2000 to faster the pan-European deployment of smartcards, From 2003 till 2006, he served scientific counsellor in the European Commission Delegation to Georgia & Armenia where he also dealt with EU assistance. Within the Information Society Directorate-General, he is now in charge of the follow-up and revision of EU electronic signatures directive.

SecureMetric is the Silver sponsors forNational eID & ePassport Conference 2011, Istanbul

SECUREMETRIC TECHNOLOGY GROUP

VOLUME 4 2012

HIGHLIGHT

SecureMetric Technology was invited to join the delegation on a Trade Mission to Vietnam, Laos and Cambodia from 17 to 23 July led by the Malaysia Ministry of Science, Technology & Innovation (MOSTI) including agencies under MOSTI, namely MDeC, MIMOS, CyberSecurity Malaysia & SIRIM.

At a business forum held in Hanoi, Vietnam, a total of 10 memorandum of understanding (MOU) were signed to forge collaborative efforts and promote Malaysian technologies to the developing markets in Vietnam. The exchange of MOU documents were witnessed by Datuk Seri Dr. Maximus Johnity Ongkili, Minister of Science, Technology and Innovation Malaysia and Dr. Le Doan Hop, Minister of Information and Communications Vietnam

SecureMetric Technology Group’s MOU with Vietunion, the provider of e-commerce applications and communities online, is to establish a central authentication and payment platform for Vietnam.

Under the MoU signed between Mr Edward Law, CEO of SecureMetric Technology with Mr. Nguyen Hoang Ly, CEO of VietUnion in Hanoi on Monday, the two sides will jointly develop a safe and convenient transaction system that will act as a single authentication and payment platform for e-commerce, e-bill, e-government, e-tax, e-banking and others in Vietnam.

This system will also provide solutions for online public services at the fourth level, the highest in the e-government system, including solutions for tax declaration, payment and refund online.

While the next MOU signed between Mr. Edward Law and Mr. Phung Viet Thang - Deputy General Director of FIS Vietnam, formalises on establishing the Annual Support Agreement for the Partner’s Certificate Authority (CA) System in Vietnam. SecureMetric will use its technical expertise and project experience to continue support the FIS on maintaining its CA backend system, monitoring its CA operations and project implementation in Vietnam.

Trade Mission to Vietnam, Laos & Cambodia with MOSTI, Malaysia

MOU Between SecureMetric

Technology & VietUnion Vietnam

A group photo of The Trade Mission Team lead by MOSTI with team lead by Ministry of Information and Communication Vietnam

MOU Signing between Edward Law, CEO of SecureMetric Technology, and Mr. Nguyen Hoang Ly, CEO of VietUnion.

MOU Signing between Edward Law, CEO SecureMetric Technology, and Mr. Phung Viet Thang - Deputy General Director of FIS Vietnam.

MOU Between SecureMetric

Technology & FPT Information

System(FIS) Vietnam

VOLUME 4 2012

NEWS Every year, MDeC measures its MSC companies for their capabilities and finds way to help them improve. Each MSC companies are measured with SCORE+ programme which categorized Business Performance, Financial Capability, Management Capability, Operational Management, Marketing Capability, Talent Development and Innovation. Through SCORE+, MDeC is able to accurately identify strength and gaps among MSC Malaysia-status companies and match developmental initiatives in order to cultivate a combination of intrinsic and extrinsic qualities that are essential to their success.

SecureMetric scored 4.5 out of 5 points in SCORE+. According to MDeC; there are more than 2800 MSC companies but rarely with 4.5 or more SCORE+ points. This has shown SecureMetic is a capable company in the above 7 categories.

SecureMetric scores 4.5 out of 5 in MSC's SCORE + Programme

4.5/5.0

SE

CU

RE

MA

G 2

01

2 B

Y S

EC

UR

EM

ET

RIC

TE

CH

NO

LO

GY

2

SecureToken ST3 Wins Big in APICTA 2011SecureToken ST3 Wins Big in APICTA 2011

SECUREMETRIC TECHNOLOGY GROUPAWARDSAPICTA MSC Malaysia 2011SecureMetric was awarded as WINNER for the Best of Security category in the Malaysian chapter of the competition. As a WINNER, SecureMetric represents Malaysia to Pattaya, Thailand to showcase its SecureToken ST3 in the International round of the APICTA 2011 competition. SecureMetric's SecureToken ST3 won the Malaysian chapter of the competition due to the following feature:1. Market acceptance and penetration.2. Innovation which makes PKI a more acceptable technology.3. Excellent user experience making the use of PKI technology easy even for the

layman.4. Affordable with ready product localization making it far more superior than

its competing product from the US and Europe.

International APICTA 2011PSecureMetric went to Pattaya on 11.11.11 and won the MERIT award for the Best of Security Application in the 11th International APICTA 2011 competition.

SecureMetric presented its award winning SecureToken ST3 to a panel of 4 judges from Thailand, Hong Kong, Macau and Malaysia. The judges was so impressed with the product that they only have positive things to say about SecureToken ST3.

During the competition, SecureMetric had to compete with participants from Hong Kong, Pakistan, Indonesia, Singapore and many more. It was a very close competition among all the participants. In the end, SecureToken ST3 came out as the MERIT winner.

All in all, the event was a great success for all. The gala dinner where the awards were presented was well organised with cultural shows from Thailand and Brunei. The next International APICTA 2012 which is in its 12th year will be held in Bandar Seri Begawan, Brunei Darussalam. See you guys there next year!

VOLUME 4 2012

UPDATES SECUREMETRIC TECHNOLOGY GROUP

SE

CU

RE

MA

G 2

01

2 B

Y S

EC

UR

EM

ET

RIC

TE

CH

NO

LO

GY

SecureMetric helps secure Malaysia’s biggest

eGovernment portal – MyEG

When Malaysia’s biggest eGovernment portal, MyEG, needs to secure their online transactions, they seek for SecureMetric. MyEG needed to protect their online transactions for their car transfer business. The number of users of the system is expected to be more than 5,000. SecureMetric assisted MyEG to implement a OTP system using SecureMetric’s SecureOTP Authentication System 3. With the implementation of SecureOTP, MyEG is now able to protect their online transactions from phishing as well as other online threats. The project was completed, from conceptualisation to production, in 3 months! SecureMetric has once again kept its promise to deliver its solutions on budget and on time.

SecureMetric partners with Ascertia UK to provide Digital

Signature solution toAl Hilal Bank, Abu Dhabi

Al Hilal Bank, a forward thinking bank from Abu Dhabi, was searching for a digital solution for their transactional banking channel. They approached Ascertia for this solution. The proposed solution was a combination of the award-winning Ascertia ADSS product and SecureMetric’s SecureOTP solution. The combined proposed solution was a sure win solution for all parties. The seamless integration of both ADSS and SecureOTP impressed Al Hilal Bank. It combined both Ascertia’s and SecureMetric’s strength to make the digital signature solution even more secure without compromising the user friendliness of the system. As the project is in Al Hilal Bank, Abu Dhabi and the solution comes from Ascertia UK with SecureMetric in Malaysia, this is truly a successful global project

Bank Rakyat Chooses SecureToken ST3

South East Asia Best Selling Token

Bank Rakyat, an Islamic banking services provider in Malaysia, has chosen SecureMetric’s SecureToken ST3 for their Cash Management system. Bank Rakyat went with ST3 because SecureMetric was able to give excellent local support on the PKI token as well as innovative solutions that will help Bank Rakyat provide a better and safer Cash Management system to their customers. The project took 2 months to implement and is expected launch this pilot project next month. SecureMetric, once again were able to help Bank Rakyat complete the project well below their budget. In addition, SecureMetric also provided value added service which the bank appreciates.

SecureMetric sponsors another successful event in Ho Chi Minh City

This year, the CSO and the ASEAN Bankers Forum event was combined to make the event a more eventful and fruitful conference. SecureMetric sponsored both events with 2 speaking slots, 1 in the CSO event and the other in the ASEAN Bankers Forum event. SecureMetric was promoting a new services, the ISO27001 consultation services and penetration testing services. SecureMetric’s partner, Cyber Intelligence, presented to the delegates on the ISO27001 certification. Mr. Sivanathan Subramaniam, CSO of SecureMetric Technology, gave a spellbinding talk entitled “ISO 27001: We are certified, but are we safe?”. More than 150 delegates from around South East Asia region attended the CSO event. Most of the organization representatives were eager to know more about SecureMetric’s new ISO27001 services. During the ASEAN Bankers Forum event, Mr Chin Wan, SecureMetric’s Regional Sales Director, gave a talk on how digital signatures can help banks simplified operations while at the same time reducing risk and saving cost. The audience were impressed that digital signature can now be used to increase employee productivity while at the same time manage their risk.

SecureMetric Makes Software in Indonesia More Secure.SecureMetric shipped more than 100,000 units of SecureDongle series to Indonesia market.

SecurMetric is proud to be the No.1 software license protection vendor in Indonesia with more than 100,000 units shipped in 2012. There are strong sights showing increasing awareness and demand for strong security on software licensing protection in line with high growth in Indonesia software industry. To date, SecureMetric is servicing to more than 350 software companies which offer software solutions and/or products to various private and public sectors in the region.

ASEANBANKERFORUM

PRODUCTS SECUREMETRIC TECHNOLOGY GROUP

SE

CU

RE

MA

G 2

01

2 B

Y S

EC

UR

EM

ET

RIC

TE

CH

NO

LO

GY

VOLUME 4 2012

ProfessionalConsultancy ServicesProfessionalConsultancy Services

ISO 27001 Consultancy ServicesComprehensive consultancy service to design, establish and implementInformation Security Management System (ISMS) based on ISO/IEC 27001

Digital Forensics Services Early Case Assessment

IProtect – protection of potential digital evidences, Intellectual Property and brand (evidence preservation service)

Digital forensics investigations and analysis

) Social Engineering Awareness Assessment (SEAA)SEAA is a threat awareness audit to gauge the employees’ awareness to information security incidents due to social engineering attacks.

Features• Non-intrusive malware simulation program complete with tools, processes

and outputs• Comprehensive post-evaluation assessment report covering: o benchmark analysis o segment hit rate analysis o Fail / pass rational analysis o Future awareness actions analysis• Recommendations based on training and policy / process perspectives

AA

AA

Threat Assessment Service (TAS)Threat Assessment Service is a valuable and insightful opportunity for you to evaluate the effectiveness of your current security infrastructure. Want to know if malware has infiltrated your systems? If sensitive data is being lost? The true measure of your endpoint, web and messaging security? Threat Assessment Service is enabled by the Trend Micro Threat Discovery Appliance, a key component of Trend Micro Threat Management Services (TMS).

TMS is a non-intrusive network security overwatch service that provides an additional security layer that strengthens an organization’s existing security infrastructure against data-stealing malware threats that have evaded detection. It monitors the corporate network for threatening malware activity and delivers discovery, containment, and remediation services that provide a last line of defense for your valuable data and resources.

FeaturesThreat Assessment Service uses non-invasive technology and the Trend Micro™ Smart Protection Network to provide an informative risk report that reveals the following information:• Active malware infiltrations• Infection points• Threat exposure levels• Sensitive data loss• Potential compliance violations

BB

BB

Data Loss Assessment (DLA)DLA provides real-time content scanning of sensitive data at network layer to gauge the level of data loss in the organization. The service detects data leaks with a unique approach that uses highly accurate fingerprinting and content matching technology.

FeaturesAssess the current vulnerabilities and identify the sensitive data on the network:• Data Loss Monitoring• Provides centralized management• Monitors sensitive data / intellectual property• Detect data stealing malware leveraging Smart Protection Network o keyloggers, spyware and trojans that collect and post sensitive data on

the internet o phone home malware o hidden FTP processes that transfer stolen data to remote hacker sites o botnet data collectors

CC

CC

Vulnerability Assessment Service (VAS)VAS is a service powered by Trend Micro and Qualys used to assess the level of security vulnerability for an organization’s information assets. It provides SaaS-based Vulnerability Management for Stronger Security & Verification of Compliance.

Features• Powered by Qualys• A service not just for vulnerability scanning but for its management.• Security, compliance and risk management• Already certified as PCI ASV(Authorized Scan Vender).• Secure hybrid SaaS (Yearly contract with hardware rental)• Provide vulnerability scanning for both external and internal.• Automated vulnerability management process.• Centralized reporting and management.

DD

Security Posture Assessment

SecureMetric Technology