t04 monitor2-en

20
Статический анализ кода с помощью ERPScan CheckCode Илья Медведовский к. т. н., директор Digital Security

Upload: laurie-leblanc

Post on 08-Jun-2015

188 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: T04 monitor2-en

MonitorBayer CropSciencelands an Excellence Award thanks to 1-2-3 Monitoring

ING Nationale-Nederlandenimproves security, optimizes operationsand controls its Business Services

Industrial Bankmakes audit compliance easier

Tango/04grows spectacularly

Latest news in System Management and Security for the CEO, CIO and CISO - No. 2

The new trend in

monitoring strategies

Page 2: T04 monitor2-en

3

Raul Cristian Aguirre

President and CEO

4

With an innovative business concept, using 150 service outlets across Argentina monitored by Tango/04, Bayer wins an international corporate award

Bayer: 1-2-3 Monitoring,International Business Excellence Award

7

ING's IT Systems Manager retraces how he gained proactivity, higher availability and an improved image of the IT department in only a couple of weeks

ING Nationale-Nederlanden improves security,optimizes operations and controls its Business Services

10Tango/04 achieves record financial results 10 out of the 20 top banks choose Tango/04The new DashboardServer allows historical overviewing, trend prediction and real-time KPIs

News

11Cartoon

Dilbert

12One of the biggest private bankers of Argentinean funds increases its control, performance and trustworthiness with Tango/04

Industrial Bank simplifies its audit compliance

14 15

Tango/04 close to you

About Tango/04

Letter from the CEO

2

I am sure you are being pressured more and more lately to

increase the quality of your services, do more with less, add value to the

business and, at the same time, keep your company's assets secure while complying with all applicable rules and regulations.

It's not surprising then that CIOs these days perceive monitoring as the basic pillar of healthy IT

governance. Either because COBIT, ITIL or ISO tells them so, or just out of common sense.

But many CIOs use a wrong approach. And fail.

We witness the success of our customers, while many others fail. Why? Because the true “success” of an IT department simply lies in aligning IT and business.

Let's face it; a CEO doesn't care about the CPU-usage graphs or the status of virtual memory. Monitoring only your IT infrastructure adds very little value to anyone outside the IT department.

Monitoring infrastructure is just a small step towards your end goal: to make your critical services run better. Just the way a server (and its CPU) is only a means to support your business services and does not have an intrinsic value to your business on its own, monitoring only your technical components (CPU, memory, etc. ) also does not add any value to your business.

Maybe the biggest value we provide to our clients is our focus: business optimization and control. Yes, we also monitor IT infrastructure (CPU, virtual memory and everything a Systems Manager needs), with an excellent solution just for that. But we always remember the real goal of IT monitoring.

Monitoring projects are a journey. Our mission is to always make you choose the right way.

This walk, if you take the right path, ends in the full alignment of your IT infrastructure with your business. To unleash the maximum value that IT can give to your company.

That is why today, we would like to share with you the success of some of our clients like Bayer or ING Nationale-Nederlanden. They were able to monitor a large infrastructure and a myriad of security issues, as well as the business itself, looking for added value, avoiding pitfalls, and gaining prestige and even international awards. In only a couple of weeks, instead of months or even years. And at a lower cost than when they'd only monitor their infrastructure.

Welcome to Control, Security and Continual Improvement. And thank you for helping us to be a leading solution for yet another year.

Monitoring only your infrastructure won't do the trick!

Monitoring your IT

infrastructure

is just a small step

towards your end goal:

Monitoring your

Critical Services

Table of contents The new trend in

monitoring strategies

Latest news in System Management and Security for the CEO, CIO and CISO - No. 2

Page 3: T04 monitor2-en

3

Raul Cristian Aguirre

President and CEO

4

With an innovative business concept, using 150 service outlets across Argentina monitored by Tango/04, Bayer wins an international corporate award

Bayer: 1-2-3 Monitoring,International Business Excellence Award

7

ING's IT Systems Manager retraces how he gained proactivity, higher availability and an improved image of the IT department in only a couple of weeks

ING Nationale-Nederlanden improves security,optimizes operations and controls its Business Services

10Tango/04 achieves record financial results 10 out of the 20 top banks choose Tango/04The new DashboardServer allows historical overviewing, trend prediction and real-time KPIs

News

11Cartoon

Dilbert

12One of the biggest private bankers of Argentinean funds increases its control, performance and trustworthiness with Tango/04

Industrial Bank simplifies its audit compliance

14 15

Tango/04 close to you

About Tango/04

Letter from the CEO

2

I am sure you are being pressured more and more lately to

increase the quality of your services, do more with less, add value to the

business and, at the same time, keep your company's assets secure while complying with all applicable rules and regulations.

It's not surprising then that CIOs these days perceive monitoring as the basic pillar of healthy IT

governance. Either because COBIT, ITIL or ISO tells them so, or just out of common sense.

But many CIOs use a wrong approach. And fail.

We witness the success of our customers, while many others fail. Why? Because the true “success” of an IT department simply lies in aligning IT and business.

Let's face it; a CEO doesn't care about the CPU-usage graphs or the status of virtual memory. Monitoring only your IT infrastructure adds very little value to anyone outside the IT department.

Monitoring infrastructure is just a small step towards your end goal: to make your critical services run better. Just the way a server (and its CPU) is only a means to support your business services and does not have an intrinsic value to your business on its own, monitoring only your technical components (CPU, memory, etc. ) also does not add any value to your business.

Maybe the biggest value we provide to our clients is our focus: business optimization and control. Yes, we also monitor IT infrastructure (CPU, virtual memory and everything a Systems Manager needs), with an excellent solution just for that. But we always remember the real goal of IT monitoring.

Monitoring projects are a journey. Our mission is to always make you choose the right way.

This walk, if you take the right path, ends in the full alignment of your IT infrastructure with your business. To unleash the maximum value that IT can give to your company.

That is why today, we would like to share with you the success of some of our clients like Bayer or ING Nationale-Nederlanden. They were able to monitor a large infrastructure and a myriad of security issues, as well as the business itself, looking for added value, avoiding pitfalls, and gaining prestige and even international awards. In only a couple of weeks, instead of months or even years. And at a lower cost than when they'd only monitor their infrastructure.

Welcome to Control, Security and Continual Improvement. And thank you for helping us to be a leading solution for yet another year.

Monitoring only your infrastructure won't do the trick!

Monitoring your IT

infrastructure

is just a small step

towards your end goal:

Monitoring your

Critical Services

Table of contents The new trend in

monitoring strategies

Latest news in System Management and Security for the CEO, CIO and CISO - No. 2

Page 4: T04 monitor2-en

Luis Cuadrado, Data Processing Coordinator,

remembers those times well. ''They called us many

times a day, and each time we had to find out

whether an incident took place on the server, in the

databases, on the iSeries, or in Siebel, or if it was a

problem on the end-user's systems. Quick resolution

was completely out of the question.''

Facing this problem, Bayer tried to find a solution which would provide a global overview of Business Services and processes to:

?identify problems proactively and in real time at any stage of Bayer's business processes,

?take early action to promptly fix any incidents, prevent ing loss of revenue due to unavailability, and

?report on Service Level Agreements (SLA) compliance.

Bayer had already implemented VISUAL Message

Center and VISUAL Security Suite to monitor its IT

infrastructure and security (steps 1 and 2 of the

Tango/04 1-2-3 Monitoring Approach). To expand

the deployment into Business Services

Management (BSM, the 3 in 1-2-3), proved a

winning bet.

The solution permits to quickly and intuitively model

the interdependencies among applications and

underlying IT components, offering extensive control

over business services, monitoring each process'

step. This brought a long list of benefits to Bayer.

Wanted: Proactivity and Control

The Solution: Service-Oriented Monitoring

''We've become responsible for monitoring the

whole business. With Tango/04 we were able to

align two very different worlds; technology and end

users. Now we can control whole processes and

determine the root cause of an incident very

rapidly", explains Cuadrado.

''The business monitoring system was up and

running in a short time", adds Santiviago. ''Because

Tango/04 focuses on multiplatform monitoring, we

can control this mixture of systems, which is

now working out very well. We have a

real-time overview of all the elements

in the processes, with timely alerts

and clear flagging of incidents,

which is really spectacular.''

Bayer CropScience now has full

control of every stage, from

initial order taking to final

payment, supervising all the

intermediate steps. ''We have

really lowered response times",

concludes Cuadrado.

“Besides monitoring technology, we also

monitor many Key Performance Indicators

(KPIs) crucial to our business'', Cuadrado explains.

"It is very easy to manage the KPIs. Tango/04 helped

out with the initial setup, but now we add and

maintain them by ourselves without any help'',

Diego Santiviago says. "Tango/04 software is very

flexible and easy to use, so you can keep extracting

more and more value from it over time.''

Technical Controls and Business KPIs

With an innovative business concept, using 150 service

outlets across the country, monitored by Tango/04, a Bayer

branch wins an international corporate award

Bayer

guarantees the

with Tango/04highest quality of service

CropScience

"We were able to

align two worlds: IT

and business. Now

we can control

whole processes

and determine the

root cause of an

incident very

rapidly.”

5

Bayer is one of the biggest pharmaceutical

companies in the world.

Present in virtually every country and with more

than 100.000 employees, this German giant sets the

tone as one of the most innovative and prolific

developers of new medication and chemical

compounds with thousands of different uses.

Bayer's division CropScience focuses on improving

environmentally friendly agriculture, offering

improved seeds, biotechnological solutions for

plague control and solutions to improve the overall

health of the environment.

The Problem

Bayer CropScience Argentina experienced many

problems when attempting to control and ensure

the quality of its most important service: order

fulfillment and processing.

The sales network consists of 150 outlets throughout

the country. Each distributor has its own laptop,

printers and access to Bayer's CRM Siebel for order and

sales transactions, plus an underlying heterogeneous

and complex IT infrastructure at the Bayer site.

"These outlets generate more than 80% of Bayer

CropScience's revenue. If, for any reason, a

distributor cannot access our Siebel system, they

may choose to sell products from our competitors'',

explains Francisco Rastelli, IT Manager at Bayer.

''Four years ago, we launched a completely new

business concept: to reach the end user, the actual

producers, farmers and owners of the fields, directly.

Back then we did not know anything about the final

buyer of our products, and now we have complete

overview of order and billing histories'', adds Diego

Santiviago, responsible for e-Commerce at Bayer

CropScience.

To make all this run smoothly it is essential to

meticulously monitor not only Siebel, but also all the

supporting components, dozens of servers and

distributed platforms. "It was very complex to

discover and diagnose problems. Sometimes it was

the end user who alerted us of a failure, complaining

that he had been waiting 15 minutes to print out a

bill'', adds Santiviago.

Obtained Benefits: It's Good to be Agile

?Proactively manage all IT incidents

?Immediately know where and why a process is failing

?Create a continual improvement plan with relevant supporting information

?Ensure Bayer CropScience operations availability and quality of service

Latest news in System Management and Security for the CEO, CIO and CISO - No. 2

Page 5: T04 monitor2-en

Luis Cuadrado, Data Processing Coordinator,

remembers those times well. ''They called us many

times a day, and each time we had to find out

whether an incident took place on the server, in the

databases, on the iSeries, or in Siebel, or if it was a

problem on the end-user's systems. Quick resolution

was completely out of the question.''

Facing this problem, Bayer tried to find a solution which would provide a global overview of Business Services and processes to:

?identify problems proactively and in real time at any stage of Bayer's business processes,

?take early action to promptly fix any incidents, prevent ing loss of revenue due to unavailability, and

?report on Service Level Agreements (SLA) compliance.

Bayer had already implemented VISUAL Message

Center and VISUAL Security Suite to monitor its IT

infrastructure and security (steps 1 and 2 of the

Tango/04 1-2-3 Monitoring Approach). To expand

the deployment into Business Services

Management (BSM, the 3 in 1-2-3), proved a

winning bet.

The solution permits to quickly and intuitively model

the interdependencies among applications and

underlying IT components, offering extensive control

over business services, monitoring each process'

step. This brought a long list of benefits to Bayer.

Wanted: Proactivity and Control

The Solution: Service-Oriented Monitoring

''We've become responsible for monitoring the

whole business. With Tango/04 we were able to

align two very different worlds; technology and end

users. Now we can control whole processes and

determine the root cause of an incident very

rapidly", explains Cuadrado.

''The business monitoring system was up and

running in a short time", adds Santiviago. ''Because

Tango/04 focuses on multiplatform monitoring, we

can control this mixture of systems, which is

now working out very well. We have a

real-time overview of all the elements

in the processes, with timely alerts

and clear flagging of incidents,

which is really spectacular.''

Bayer CropScience now has full

control of every stage, from

initial order taking to final

payment, supervising all the

intermediate steps. ''We have

really lowered response times",

concludes Cuadrado.

“Besides monitoring technology, we also

monitor many Key Performance Indicators

(KPIs) crucial to our business'', Cuadrado explains.

"It is very easy to manage the KPIs. Tango/04 helped

out with the initial setup, but now we add and

maintain them by ourselves without any help'',

Diego Santiviago says. "Tango/04 software is very

flexible and easy to use, so you can keep extracting

more and more value from it over time.''

Technical Controls and Business KPIs

With an innovative business concept, using 150 service

outlets across the country, monitored by Tango/04, a Bayer

branch wins an international corporate award

Bayer

guarantees the

with Tango/04highest quality of service

CropScience

"We were able to

align two worlds: IT

and business. Now

we can control

whole processes

and determine the

root cause of an

incident very

rapidly.”

5

Bayer is one of the biggest pharmaceutical

companies in the world.

Present in virtually every country and with more

than 100.000 employees, this German giant sets the

tone as one of the most innovative and prolific

developers of new medication and chemical

compounds with thousands of different uses.

Bayer's division CropScience focuses on improving

environmentally friendly agriculture, offering

improved seeds, biotechnological solutions for

plague control and solutions to improve the overall

health of the environment.

The Problem

Bayer CropScience Argentina experienced many

problems when attempting to control and ensure

the quality of its most important service: order

fulfillment and processing.

The sales network consists of 150 outlets throughout

the country. Each distributor has its own laptop,

printers and access to Bayer's CRM Siebel for order and

sales transactions, plus an underlying heterogeneous

and complex IT infrastructure at the Bayer site.

"These outlets generate more than 80% of Bayer

CropScience's revenue. If, for any reason, a

distributor cannot access our Siebel system, they

may choose to sell products from our competitors'',

explains Francisco Rastelli, IT Manager at Bayer.

''Four years ago, we launched a completely new

business concept: to reach the end user, the actual

producers, farmers and owners of the fields, directly.

Back then we did not know anything about the final

buyer of our products, and now we have complete

overview of order and billing histories'', adds Diego

Santiviago, responsible for e-Commerce at Bayer

CropScience.

To make all this run smoothly it is essential to

meticulously monitor not only Siebel, but also all the

supporting components, dozens of servers and

distributed platforms. "It was very complex to

discover and diagnose problems. Sometimes it was

the end user who alerted us of a failure, complaining

that he had been waiting 15 minutes to print out a

bill'', adds Santiviago.

Obtained Benefits: It's Good to be Agile

?Proactively manage all IT incidents

?Immediately know where and why a process is failing

?Create a continual improvement plan with relevant supporting information

?Ensure Bayer CropScience operations availability and quality of service

Latest news in System Management and Security for the CEO, CIO and CISO - No. 2

Page 6: T04 monitor2-en

h a v e a c l e a r a n d

understandable view of the

business, without having to depend on the

IT department.

''The end users don't suffer anymore. We're much

more relaxed now, controlling everything in real

time", reflects Santiviago.

Cuadrado adds, ''We have 42-inch screens in our

control center that show business processes,

infrastructure and security. When someone comes

in, before greeting, they quickly glance at the

screens to make sure everything is okey.''

''This way, 80% of our business is perfectly

controlled'', Rastelli concludes.

''We finished the entire project in just a month and a

half. This shows how easy Tango/04 is to implement

and how quickly you can get a return on your

investment'', Cuadrado indicates.

"The solution is impressive. We are very happy'',

adds Santiviago.

''We can now say that we are the most advanced

branch in our region when it comes to monitoring”,

Rastelli concludes.

Conclusions: A Rapid Return on Investment

WebConsole:Seeing Business Processes inReal Time

If you monitor only standalone components the

whole system maybe down while each monitored

component seems perfectly healthy. By monitoring

at the application level, Bayer CropScience can

internally publish reliable, real-time reports on the

state of the entire business.

Using these web-based dashboards Bayer can

answer the age-old question 'why isn't the system

working' professionally and rapidly. Moreover, all

the business stakeholders, from CIO to CEO, can

"We can now say that we are the most

advanced branch in our region when it

comes to monitoring.”

7

With a complex infrastructure and a

growing business, demanding audits

and multiple services to monitor, they

needed a more efficient monitoring

solution. Learn how they got

proactive, increased availability and

improved IT's credibility in only a

couple of weeks

ING

improves its security,

optimizes operations

and controls its Business Services

Nationale-Nederlanden

The ING Group is one of the world's leading financial

corporations offering banking, insurance and asset

management services to more than one million

customers worldwide. Since 1978 ING Nationale-

Nederlanden has been operating in Spain providing

individuals and families with the best savings and

investment solutions. ING Nationale-Nederlanden

is represented in Spain through its network of

offices and more than 2500 franchised insurance

and investment agencies.

Common problems in daily operations

In 2007 Jordi Bueno Molpeceres, IT Systems

Manager at ING Nationale-Nederlanden Spain

faced a problem that many companies face today.

Even though he had various monitoring tools, none

of them was sufficiently heterogeneous,

multiplatform, proactive or powerful to control

ING's Business Services from a global perspective.

They were isolated tools and did not offer the

“big picture”.

Critical applications deserve to be monitored

Many of the tools ING Nationale-Nederlanden used

were low cost, open source (like Nagios) or

internally developed, so none of them could ensure

the quality of service ING was aiming for.

"The tools did not deal with the real IT department's

needs. They were not oriented to business services

monitoring but to isolated technical components",

comments Jordi Bueno, "we needed agility, to find

out about a problem before the end user did."

The availability of services such as the CRM or web

applications is crucial in any modern company, and

ING Nationale-Nederlanden was no exception.

"An incident that affects the quality of our service

has a high cost in lost business, worsens our image,

reduces the productivity of our sales network or

means delays in corporate reporting", Bueno

explains.

The project wins the corporate Business Excellence AwardThe success of the Bayer CropScience business

concept in Argentina won the Bayer corporate

Business Excellence Award 2007. ''We were

pioneers when we started selling agricultural

products directly to the end user in the fields,

helping us to set up a strategic database for

marketing activities. This award means that we

had one of the best ideas in all of Bayer

worldwide." As every idea, it needs a well-oiled

underlying infrastructure. "Here Tango/04 played

a critical role'', says Rastelli. ''Without Tango/04

this success would not have been possible''.

Examples of Controls and Indicators

Availability of Critical Applications:?Siebel CRM?INFOPRINT (receipt printing)?MAPICS (billing) ?Oracle databases and middleware?PCPI (interfaces between Siebel and iSeries)

Business and Performance KPIs (Key Performance Indicators):?Wrong Orders: a problem in an order can mean a client

has to wait indefinitely. Now immediate alerts are sent when such a situation arises.?Delayed Delivery: detecting general delays and

correcting them has a positive impact on the perception of the system by distributors and clients. Bayer can now detect any delay early on and solve it quickly.? Orders over a period of time: this indicator allows the

control and graphical representation of trends in ordering, by the hour, day, or month.

Bayer CropScienceService Control Point Overview

BSM Service Control Point Overview Report

Report Date: 07/02/2007 12:06:40 p.m.

Period: Period 06/25/2007 12:00:00 am to 07/04/2007 11:59:59 pm

Calendar: OnlineCropScience

Availability Failures

97.90% 7( SLA 95.00 % ) ( SLA 5 Failures )

Total Unavailability Time

MTBF Meen Time Between Failures

Longest Failure Time

1h 29m 26s 49m 49s

49m 00s 4m 21s

MTTR Meen Time To Repair

Availab

ilit

yP

ieA

vailab

ilit

y P

erc

en

tag

es

in T

ime

Nu

mb

er

of

Failu

res

in T

ime

2,1%

97,9% MTBSI Meen Time Between Services Incidents

53m 21s

2007-0

6-2

6

2007-0

6-2

5

2007-0

6-2

7

2007-0

6-2

8

2007-0

6-2

9

2007-0

6-3

0

2007-0

7-0

1

100

80

60

40

20

0

2007-0

6-2

6

2007-0

6-2

5

2007-0

6-2

7

2007-0

6-2

8

2007-0

6-2

9

2007-0

6-3

0

2007-0

7-0

1

2

1.6

1.2

0.8

0.4

0

Service Level Management reportsWith the application health data, Bayer can create periodical reports on Service Level

Agreements, including automated recommendations for improvement.

Page 7: T04 monitor2-en

h a v e a c l e a r a n d

understandable view of the

business, without having to depend on the

IT department.

''The end users don't suffer anymore. We're much

more relaxed now, controlling everything in real

time", reflects Santiviago.

Cuadrado adds, ''We have 42-inch screens in our

control center that show business processes,

infrastructure and security. When someone comes

in, before greeting, they quickly glance at the

screens to make sure everything is okey.''

''This way, 80% of our business is perfectly

controlled'', Rastelli concludes.

''We finished the entire project in just a month and a

half. This shows how easy Tango/04 is to implement

and how quickly you can get a return on your

investment'', Cuadrado indicates.

"The solution is impressive. We are very happy'',

adds Santiviago.

''We can now say that we are the most advanced

branch in our region when it comes to monitoring”,

Rastelli concludes.

Conclusions: A Rapid Return on Investment

WebConsole:Seeing Business Processes inReal Time

If you monitor only standalone components the

whole system maybe down while each monitored

component seems perfectly healthy. By monitoring

at the application level, Bayer CropScience can

internally publish reliable, real-time reports on the

state of the entire business.

Using these web-based dashboards Bayer can

answer the age-old question 'why isn't the system

working' professionally and rapidly. Moreover, all

the business stakeholders, from CIO to CEO, can

"We can now say that we are the most

advanced branch in our region when it

comes to monitoring.”

7

With a complex infrastructure and a

growing business, demanding audits

and multiple services to monitor, they

needed a more efficient monitoring

solution. Learn how they got

proactive, increased availability and

improved IT's credibility in only a

couple of weeks

ING

improves its security,

optimizes operations

and controls its Business Services

Nationale-Nederlanden

The ING Group is one of the world's leading financial

corporations offering banking, insurance and asset

management services to more than one million

customers worldwide. Since 1978 ING Nationale-

Nederlanden has been operating in Spain providing

individuals and families with the best savings and

investment solutions. ING Nationale-Nederlanden

is represented in Spain through its network of

offices and more than 2500 franchised insurance

and investment agencies.

Common problems in daily operations

In 2007 Jordi Bueno Molpeceres, IT Systems

Manager at ING Nationale-Nederlanden Spain

faced a problem that many companies face today.

Even though he had various monitoring tools, none

of them was sufficiently heterogeneous,

multiplatform, proactive or powerful to control

ING's Business Services from a global perspective.

They were isolated tools and did not offer the

“big picture”.

Critical applications deserve to be monitored

Many of the tools ING Nationale-Nederlanden used

were low cost, open source (like Nagios) or

internally developed, so none of them could ensure

the quality of service ING was aiming for.

"The tools did not deal with the real IT department's

needs. They were not oriented to business services

monitoring but to isolated technical components",

comments Jordi Bueno, "we needed agility, to find

out about a problem before the end user did."

The availability of services such as the CRM or web

applications is crucial in any modern company, and

ING Nationale-Nederlanden was no exception.

"An incident that affects the quality of our service

has a high cost in lost business, worsens our image,

reduces the productivity of our sales network or

means delays in corporate reporting", Bueno

explains.

The project wins the corporate Business Excellence AwardThe success of the Bayer CropScience business

concept in Argentina won the Bayer corporate

Business Excellence Award 2007. ''We were

pioneers when we started selling agricultural

products directly to the end user in the fields,

helping us to set up a strategic database for

marketing activities. This award means that we

had one of the best ideas in all of Bayer

worldwide." As every idea, it needs a well-oiled

underlying infrastructure. "Here Tango/04 played

a critical role'', says Rastelli. ''Without Tango/04

this success would not have been possible''.

Examples of Controls and Indicators

Availability of Critical Applications:?Siebel CRM?INFOPRINT (receipt printing)?MAPICS (billing) ?Oracle databases and middleware?PCPI (interfaces between Siebel and iSeries)

Business and Performance KPIs (Key Performance Indicators):?Wrong Orders: a problem in an order can mean a client

has to wait indefinitely. Now immediate alerts are sent when such a situation arises.?Delayed Delivery: detecting general delays and

correcting them has a positive impact on the perception of the system by distributors and clients. Bayer can now detect any delay early on and solve it quickly.? Orders over a period of time: this indicator allows the

control and graphical representation of trends in ordering, by the hour, day, or month.

Bayer CropScienceService Control Point Overview

BSM Service Control Point Overview Report

Report Date: 07/02/2007 12:06:40 p.m.

Period: Period 06/25/2007 12:00:00 am to 07/04/2007 11:59:59 pm

Calendar: OnlineCropScience

Availability Failures

97.90% 7( SLA 95.00 % ) ( SLA 5 Failures )

Total Unavailability Time

MTBF Meen Time Between Failures

Longest Failure Time

1h 29m 26s 49m 49s

49m 00s 4m 21s

MTTR Meen Time To Repair

Availab

ilit

yP

ieA

vailab

ilit

y P

erc

en

tag

es

in T

ime

Nu

mb

er

of

Failu

res

in T

ime

2,1%

97,9% MTBSI Meen Time Between Services Incidents

53m 21s

2007-0

6-2

6

2007-0

6-2

5

2007-0

6-2

7

2007-0

6-2

8

2007-0

6-2

9

2007-0

6-3

0

2007-0

7-0

1

100

80

60

40

20

0

2007-0

6-2

6

2007-0

6-2

5

2007-0

6-2

7

2007-0

6-2

8

2007-0

6-2

9

2007-0

6-3

0

2007-0

7-0

1

2

1.6

1.2

0.8

0.4

0

Service Level Management reportsWith the application health data, Bayer can create periodical reports on Service Level

Agreements, including automated recommendations for improvement.

Page 8: T04 monitor2-en

reason why most monitoring projects fail. With

Tango/04 these are nonissues: "We are perfectly able

to maintain and enhance the solution", says Bueno.

"Tango/04 met all our requirements and even adds a

Service Level Management (SLM) module to

manage SLAs for every monitored service. Plus, the

solution comes with hundreds of built-in reports."

Service-Oriented Monitoring: A big jump in quality

And what were the results? "The implementation was

very successful and it was done in the estimated time,

without any problems whatsoever", says Bueno.

"We now have tremendous visibility of both our

services and our infrastructure. We can now deal

with any incident proactively. We can handle event

and availability management like never before. We

also have outstanding reporting for strategic

capacity management, continual service

improvement and forensic analysis."

"We have made a quantum leap in quality. We found

a solution that permits high-value IT governance and

lets us align ourselves with best-practices

frameworks such as ITIL", concludes Bueno.

"Tango/04 is a solution of the highest standards,

reliable and innovative, with great after-sales

support services. I would like to give Tango/04 an A."

8

"With Tango/04,

we have made a

quantum leap

in the quality of

our business

services."

Key reasons for choosing Tango/04

"It is easy to use it, has incredibly short

deployment times, is more affordable and

the know-how stays here in ING."

The search for a powerful but easy-to-use solution

ING embarked on a search for a monitoring solution

capable of really controlling and optimizing the

company's business services and implementing new

security controls.

During a period of two months, different

alternatives were evaluated, including

old monitoring frameworks like HP,

CA or IBM. They even visited clients

using these solutions to see them

live in action.

Infrastructure, BSM, SLM and

Security all in the same

solution

So why did they choose

Tango/04 over world-renowned

brands? There were several

reasons, according to Bueno:

"Tango/04 is easy to use, has incredibly

short deployment times, is more affordable

and, at the end of the implementation project,

the know-how stays here in ING."

This last factor is vital when selecting a monitoring

solution. Older monitoring frameworks are so

complex that it is hard to reach the level of

confidence required to be autonomous, even after

months of implementation and training. This is also a

The project included the entire security of the Windows,

AIX, and IBM System i servers, including control of security

policies and audit changes, user management, groups and

privileges, important events, sensitive data access, control

of superusers, etc. It also included control of corporate

firewalls, antivirus software, Intrusion

D ete c t i o n Syste m s ( I D S ) , e tc .

Customized advanced rules were

a l s o c r e a t e d , s u c h a s

crosschecking the Employee

Attendance Tracking system and the Active

Directory to check whether the user who

attempted to log in was really in the office. "It's very

easy to enter new security policies, so they are

automatically controlled", explains Bueno. All this

provides for sustainable compliance with

internal and international standards,

laws and regulations (such as

Sarbanes Oxley or ISO 27001).

Latest news in System Management and Security for the CEO, CIO and CISO - No. 2

The project was completed in less than

40 days (including training), and covered

more than 80 servers and over 200 network

devices. Various web services were monitored

(public website, Intranet, Quotation software,

Scoring, etc.), CRM (Siebel), Call Center (Genesys)

and PBX, Corporate Reporting (Business Objects),

Data Warehousing processes, Bloomberg, Office

Automation, VPN, email services, file exchanges

and other critical applications. And the whole

supporting technical infrastructure: Windows, AIX,

IBM Host server (System i), Oracle, Exchange, Lotus

Notes, Messaging Services (WebSphere MQ and

EDITRAN), Directory (LDAP), Storage and Backup

Management (BRMS, Tivoli Storage Manager),

Communications and Networks, etc. Plus, the

entire Security Monitoring project was undertaken

in parallel.

?services

?Immediate detection of security incidents

?Reports for continual improvement (most frequent problems, etc.)

?Better Capacity Management (performance trending and forecasting, etc.)

?Visualization of business impact for all IT events (including security)

Indirect benefits:

?Increased IT teamwork

?Increased knowledge transfer thanks to one single console

?Increased visibility and credibility of the IT department

Increased availability and quality of

COMMUNICATION AND PBX

Firewalls

ClusterMQ Series

Cluster Siebel Gateway

BusinessObject

InternalWeb Server

National AIX01 AIX02

iSeriesINTERNAL NETWORK DMZ

ExternalWeb Server

gic_qo gic_esn fins_esngic_st

LDAP

Routers Switching PBX

SECURITY

gic_qo gic_esn fins_esngic_st

CRMCRMMQMQ

wwwwww wwwwww wwwwww wwwwww

wwwwww

MQMQ

OK

OK

Lines S7PRINCREM

S7PRDIARIO

DMTS

MQ

BO

Siebel / DataMirror Genesys

Alcatel PBX

Logins

Main View

Services Security Infraestructure

Branches

Madrid

Cataluña

Madrid

Cataluña

Palma de Mallorca

Gran Canaria

Tenerife

La Palma

Huelva

Cádiz

Sevilla

Córdoba

Jaén

Granada

AlmeríaMálagaMarbella

Ciudad Real

Toledo

Badajoz

Salamanca

Valladolid

BurgosLogroño

Pamplona

Vitoria

León

San Sebastián

MondragónBilbaoSantander

Gijón

OviedoLugo

La Coruña

Vigo

Zaragoza

Castellón

ValenciaValencia 2

Lorca

Alicante

Murcia

Albacete

Agile Security: Custom Rules for Advanced Intrusion Detection

"The implementation

was very successful.

It was done in the estimated time,

without any problems whatsoever.”

Return on Investment: What ING Got

Monitored Services in a matter of days

?Comprehensive functionality (multiplatform, 1-2-3 coverage, etc.)

?Short implementation time

?Autonomy: its ease-of-use allows ING personnel to maintain the solution by themselves

? Faster Return On Investment (ROI)

?Overall product quality (reliable and innovative)

Jordi Bueno Molpeceres is the IT Systems

Manager at ING Nationale-Nederlanden

(Spain). He was born in Barcelona and spent

his childhood in Valencia. He graduated in IT at

the University of Valencia and has a Master's degree in

Project Management from the La Salle Business School.

His strategic vision allowed him to execute a cutting-

edge service-oriented monitoring project with

enormous success. Hobbies: traveling (he

lived in four different countries) and

technology.

The profile of a leader

Page 9: T04 monitor2-en

reason why most monitoring projects fail. With

Tango/04 these are nonissues: "We are perfectly able

to maintain and enhance the solution", says Bueno.

"Tango/04 met all our requirements and even adds a

Service Level Management (SLM) module to

manage SLAs for every monitored service. Plus, the

solution comes with hundreds of built-in reports."

Service-Oriented Monitoring: A big jump in quality

And what were the results? "The implementation was

very successful and it was done in the estimated time,

without any problems whatsoever", says Bueno.

"We now have tremendous visibility of both our

services and our infrastructure. We can now deal

with any incident proactively. We can handle event

and availability management like never before. We

also have outstanding reporting for strategic

capacity management, continual service

improvement and forensic analysis."

"We have made a quantum leap in quality. We found

a solution that permits high-value IT governance and

lets us align ourselves with best-practices

frameworks such as ITIL", concludes Bueno.

"Tango/04 is a solution of the highest standards,

reliable and innovative, with great after-sales

support services. I would like to give Tango/04 an A."

8

"With Tango/04,

we have made a

quantum leap

in the quality of

our business

services."

Key reasons for choosing Tango/04

"It is easy to use it, has incredibly short

deployment times, is more affordable and

the know-how stays here in ING."

The search for a powerful but easy-to-use solution

ING embarked on a search for a monitoring solution

capable of really controlling and optimizing the

company's business services and implementing new

security controls.

During a period of two months, different

alternatives were evaluated, including

old monitoring frameworks like HP,

CA or IBM. They even visited clients

using these solutions to see them

live in action.

Infrastructure, BSM, SLM and

Security all in the same

solution

So why did they choose

Tango/04 over world-renowned

brands? There were several

reasons, according to Bueno:

"Tango/04 is easy to use, has incredibly

short deployment times, is more affordable

and, at the end of the implementation project,

the know-how stays here in ING."

This last factor is vital when selecting a monitoring

solution. Older monitoring frameworks are so

complex that it is hard to reach the level of

confidence required to be autonomous, even after

months of implementation and training. This is also a

The project included the entire security of the Windows,

AIX, and IBM System i servers, including control of security

policies and audit changes, user management, groups and

privileges, important events, sensitive data access, control

of superusers, etc. It also included control of corporate

firewalls, antivirus software, Intrusion

D ete c t i o n Syste m s ( I D S ) , e tc .

Customized advanced rules were

a l s o c r e a t e d , s u c h a s

crosschecking the Employee

Attendance Tracking system and the Active

Directory to check whether the user who

attempted to log in was really in the office. "It's very

easy to enter new security policies, so they are

automatically controlled", explains Bueno. All this

provides for sustainable compliance with

internal and international standards,

laws and regulations (such as

Sarbanes Oxley or ISO 27001).

Latest news in System Management and Security for the CEO, CIO and CISO - No. 2

The project was completed in less than

40 days (including training), and covered

more than 80 servers and over 200 network

devices. Various web services were monitored

(public website, Intranet, Quotation software,

Scoring, etc.), CRM (Siebel), Call Center (Genesys)

and PBX, Corporate Reporting (Business Objects),

Data Warehousing processes, Bloomberg, Office

Automation, VPN, email services, file exchanges

and other critical applications. And the whole

supporting technical infrastructure: Windows, AIX,

IBM Host server (System i), Oracle, Exchange, Lotus

Notes, Messaging Services (WebSphere MQ and

EDITRAN), Directory (LDAP), Storage and Backup

Management (BRMS, Tivoli Storage Manager),

Communications and Networks, etc. Plus, the

entire Security Monitoring project was undertaken

in parallel.

?services

?Immediate detection of security incidents

?Reports for continual improvement (most frequent problems, etc.)

?Better Capacity Management (performance trending and forecasting, etc.)

?Visualization of business impact for all IT events (including security)

Indirect benefits:

?Increased IT teamwork

?Increased knowledge transfer thanks to one single console

?Increased visibility and credibility of the IT department

Increased availability and quality of

COMMUNICATION AND PBX

Firewalls

ClusterMQ Series

Cluster Siebel Gateway

BusinessObject

InternalWeb Server

National AIX01 AIX02

iSeriesINTERNAL NETWORK DMZ

ExternalWeb Server

gic_qo gic_esn fins_esngic_st

LDAP

Routers Switching PBX

SECURITY

gic_qo gic_esn fins_esngic_st

CRMCRMMQMQ

wwwwww wwwwww wwwwww wwwwww

wwwwww

MQMQ

OK

OK

Lines S7PRINCREM

S7PRDIARIO

DMTS

MQ

BO

Siebel / DataMirror Genesys

Alcatel PBX

Logins

Main View

Services Security Infraestructure

Branches

Madrid

Cataluña

Madrid

Cataluña

Palma de Mallorca

Gran Canaria

Tenerife

La Palma

Huelva

Cádiz

Sevilla

Córdoba

Jaén

Granada

AlmeríaMálagaMarbella

Ciudad Real

Toledo

Badajoz

Salamanca

Valladolid

BurgosLogroño

Pamplona

Vitoria

León

San Sebastián

MondragónBilbaoSantander

Gijón

OviedoLugo

La Coruña

Vigo

Zaragoza

Castellón

ValenciaValencia 2

Lorca

Alicante

Murcia

Albacete

Agile Security: Custom Rules for Advanced Intrusion Detection

"The implementation

was very successful.

It was done in the estimated time,

without any problems whatsoever.”

Return on Investment: What ING Got

Monitored Services in a matter of days

?Comprehensive functionality (multiplatform, 1-2-3 coverage, etc.)

?Short implementation time

?Autonomy: its ease-of-use allows ING personnel to maintain the solution by themselves

? Faster Return On Investment (ROI)

?Overall product quality (reliable and innovative)

Jordi Bueno Molpeceres is the IT Systems

Manager at ING Nationale-Nederlanden

(Spain). He was born in Barcelona and spent

his childhood in Valencia. He graduated in IT at

the University of Valencia and has a Master's degree in

Project Management from the La Salle Business School.

His strategic vision allowed him to execute a cutting-

edge service-oriented monitoring project with

enormous success. Hobbies: traveling (he

lived in four different countries) and

technology.

The profile of a leader

Page 10: T04 monitor2-en

1110

Tango/04 is providing solutions to 10 of the 20

biggest financial institutions in the world (FORTUNE

Global 500, 2007). Whether in security monitoring

(Audits, Compliance and Real-Time Protection),

Business Services Management (BSM), or

infrastructure monitoring, banks increasingly

choose Tango/04 to reduce costs, optimize

processes and ensure the quality of services. In

several countries, Tango/04 has implemented more

successful monitoring projects than all its

competitors together.

Tango/04 achieves record financial results - again!

Tango/04 has achieved extraordinary results over

the financial year 2007. The company showed

profitability for the fifteenth year running, with a

growth rate that confirms its status as leader in

Corporate Monitoring Solutions in some territories.

For instance, overall sales in 2007 were up 76.4% in

Latin America.

“We are simply offering the value that companies

are looking for”, says Raul Cristian Aguirre, CEO and

founder of Tango/04. “With our new 1-2-3

monitoring strategy, its ease-of-use and its short

implementation times we are successful in those

projects where our competition is failing.”

During 2007 more than 100 new clients were added

to Tango/04's long list including ING Nationale-

Nederlanden, Nike, Boehringer Ingelheim, Helvetia

Prevision, etc. Tango/04 also opened new offices in

the USA and Brazil.

10 of the world's 20 largest banks choose Tango/04

Tango/04's new DashboardServer allows users to

create dashboards based on Web 2.0 technology to

show historical overviews, predict trends and

control many different metrics like Service Level

Objectives, Key Performance Indicators (KPIs),

technical metrics, and more, in real time. Thanks to

its advanced technology, users can design reusable

templates to represent any metric (with more than

50 different types of graphics), navigate through

historical charts, show contextual data and analyze

monitoring trends. This last characteristic is very

useful for Capacity Planning and for Capacity

Management according to the latest ITIL Best

Tango/04's new DashboardServer shows you the past, the present, and the future of business, security and IT

"Tango/04 gives you tremendous visibility"Jordi Bueno, IT systems manager, ING Nationale-Nederlanden

Dilbert

NewsLatest news in System Management and Security for the CEO, CIO and CISO - No. 2

Practices. Creating and customizing dashboards is

very easy and the database repository is self-

m a n a g e d ( o p t i m i z a t i o n a n d d a t a b a s e

housekeeping based on automatic policies) to

reduce management costs. Amongst the

dashboards that have already been implemented

by our clients are real-time dashboards for CRM

and Call Center control (Genesys/Siebel), credit

card transaction analysis, security policy violations

and various technological dashboards (Linux, UNIX,

Windows, iSeries, etc.). Some of these dashboards

are available out-of-the-box and can be customized

easily.

+76,4%(thanks!)

Tango/04, Monitor ing LeaderRecord growth (76.4%) in Latin America in 2007

www.tango04.com/76

Infrastructure Monitoring Security Monitoring Applications and Business Services Monitoring| |

[email protected]

VISUAL Message Center - Host Security Monitoring

User's Security Security Administration

VISUAL Message Center - Host Security Monitoring

Actions Special Administrators User's Profiles Changes SYSVAL & NETA Changes Control Objects

Other Controls Adapted Security

Authoritations List

DST Tools

Logon Failures

Users ControlUsers Inactivity

ABM Users

Page 11: T04 monitor2-en

1110

Tango/04 is providing solutions to 10 of the 20

biggest financial institutions in the world (FORTUNE

Global 500, 2007). Whether in security monitoring

(Audits, Compliance and Real-Time Protection),

Business Services Management (BSM), or

infrastructure monitoring, banks increasingly

choose Tango/04 to reduce costs, optimize

processes and ensure the quality of services. In

several countries, Tango/04 has implemented more

successful monitoring projects than all its

competitors together.

Tango/04 achieves record financial results - again!

Tango/04 has achieved extraordinary results over

the financial year 2007. The company showed

profitability for the fifteenth year running, with a

growth rate that confirms its status as leader in

Corporate Monitoring Solutions in some territories.

For instance, overall sales in 2007 were up 76.4% in

Latin America.

“We are simply offering the value that companies

are looking for”, says Raul Cristian Aguirre, CEO and

founder of Tango/04. “With our new 1-2-3

monitoring strategy, its ease-of-use and its short

implementation times we are successful in those

projects where our competition is failing.”

During 2007 more than 100 new clients were added

to Tango/04's long list including ING Nationale-

Nederlanden, Nike, Boehringer Ingelheim, Helvetia

Prevision, etc. Tango/04 also opened new offices in

the USA and Brazil.

10 of the world's 20 largest banks choose Tango/04

Tango/04's new DashboardServer allows users to

create dashboards based on Web 2.0 technology to

show historical overviews, predict trends and

control many different metrics like Service Level

Objectives, Key Performance Indicators (KPIs),

technical metrics, and more, in real time. Thanks to

its advanced technology, users can design reusable

templates to represent any metric (with more than

50 different types of graphics), navigate through

historical charts, show contextual data and analyze

monitoring trends. This last characteristic is very

useful for Capacity Planning and for Capacity

Management according to the latest ITIL Best

Tango/04's new DashboardServer shows you the past, the present, and the future of business, security and IT

"Tango/04 gives you tremendous visibility"Jordi Bueno, IT systems manager, ING Nationale-Nederlanden

Dilbert

NewsLatest news in System Management and Security for the CEO, CIO and CISO - No. 2

Practices. Creating and customizing dashboards is

very easy and the database repository is self-

m a n a g e d ( o p t i m i z a t i o n a n d d a t a b a s e

housekeeping based on automatic policies) to

reduce management costs. Amongst the

dashboards that have already been implemented

by our clients are real-time dashboards for CRM

and Call Center control (Genesys/Siebel), credit

card transaction analysis, security policy violations

and various technological dashboards (Linux, UNIX,

Windows, iSeries, etc.). Some of these dashboards

are available out-of-the-box and can be customized

easily.

+76,4%(thanks!)

Tango/04, Monitor ing LeaderRecord growth (76.4%) in Latin America in 2007

www.tango04.com/76

Infrastructure Monitoring Security Monitoring Applications and Business Services Monitoring| |

[email protected]

VISUAL Message Center - Host Security Monitoring

User's Security Security Administration

VISUAL Message Center - Host Security Monitoring

Actions Special Administrators User's Profiles Changes SYSVAL & NETA Changes Control Objects

Other Controls Adapted Security

Authoritations List

DST Tools

Logon Failures

Users ControlUsers Inactivity

ABM Users

Page 12: T04 monitor2-en

12

regulations and audits. Apart from the regular

Central Bank Audits, Industrial Bank holds internal

and external audits. The external audits are done by

Deloitte & Co on a yearly basis. This auditor reports

to Industrial Bank's management as well as to

Argentina's Central Bank. The internal audit deals

with certain preset audit areas and evaluates

whether previously taken decisions have been

implemented correctly.

Cejudo on how much Tango/04 has improved the

process: “the audit did not find any flaws, and

previous observations were also considered

resolved. I can affirm that Tango/04 has helped pass

audits much more quickly.”

The day after

Cejudo remembers that "after the training from

Tango/04 had finished, we were completely self-

sufficient". Industrial Bank now operates Tango/04

independently and has customized and added many

different reports. “For instance, the last time the

Central Bank people came here they gave us a new

directive to follow, to add a command to the group

of 'sensitive' commands that you need to watch

closely. All we had to do is add a filter to Tango/04's

VISUAL Security Suite, we did not even call the

Tango/04 support department. We are really very

satisfied with Tango/04.”

Industrial Bank is already planning the next steps of

their monitoring project. “We are planning to use

Tango/04 to audit communications and some new

applications we are implementing at the moment.”

That is how Industrial Bank is planning to continue

growing and maintaining real-time control, passing

audits easier every time and maintaining

the high level of compliance

they have now, thanks to

Tango/04.

One of Argentina's main private banks needed to monitor its systems to

tightly control security and critical applications to be in compliance with the

Central Bank's regulations

Industrial Bank

Benefits: increased control, performance and reliability

Among the many benefits that Tango/04 gave

Industrial Bank are the huge amount of time saved

and the increase of performance that was evident

after implementation. “Before, we could not fully

control our IT security and had to invest many man

hours obtaining some sort of overview. Windows

produces 200 pages of log files on a daily basis that

have to be checked, but nobody can sit down and sift

through 200 pages. So we had to rely on sampling,

which was not 100% error free.”

But once VISUAL Security Suite was implemented

things changed. “Nowadays reports are made and

100% checked in less than a morning.” A proof of

this increase in productivity is that those people

who had to check the security logs on a daily basis

can now focus on other tasks. “Above all we have

increased reliability.”

Logged control: the reports

Industrial Bank also uses Tango/04 to obtain the

necessary compliance reports. Once printed, they

can be scanned quickly as they only reflect truly

important events. And afterwards they are filed for

future auditing needs. Cejudo says: “we now have

folders containing reports of 3 or 4 months, whereas

before barely one month's worth of reports would fit

in these folders. The difference is huge and we can

control much more now. It is very handy to have

everything in one console. Every time I need

something, I directly go to the console and look for it

there. I don't have to sift through files or papers

anymore.”

The Audits

Like any banking institution, Industrial

Bank has to comply with rigorous

12

Industrial Bank is a private equity bank with a track

record spanning 80 years of financing growth. With

a network of 28 branches in the main cities of the

country, it offers its clients specialized services like

private, corporate and investment banking.

The need for a monitoring solution

The IT security department of Industrial Bank was

facing a problem that was affecting the performance

of its IT systems and thereby jeopardizing a complete

and timely compliance with Central Bank

regulations. Gustavo Cejudo, one of the members of

the team responsible for IT security at the bank,

explains how “difficult it was to check all the logs of

all our applications.” Industrial Bank mainly works

with two platforms: Windows and Linux and has

implemented many applications, making centralized

and integral monitoring difficult.

When choosing a monitoring solution, Industrial

Bank followed the corporate policy of inviting three

providers to bid for the project. “We chose Tango/04

for economic reasons, implementation times and

the quality of the solution, which set Tango/04 apart

from the other competitors.”

The number of logs that the IT department had to

examine on a daily basis was one of the main

problems they had. They had someone especially

assigned to the task of manually revising all logs.

Nevertheless, “we did not have 100% control as the

only viable alternative was taking samples. Not

having a proper tool to do the job forced us to invest

many man hours in order to be in full compliance with

Argentina's Central Bank”, Cejudo remembers,

continuing “fortunately we chose Tango/04,

especially because the new regulation is even more

demanding than the previous ones.”

Industrial Bank's IT team was complying, but only

barely because the sampling method did not give a

real overview of what was happening in the IT

systems. One of the observations Industrial Bank

made prior to the implementation of Tango/04 was

that, until then, there were no reports on the use of

sensitive commands. "With Tango/04 we were able

to resolve that particular problem. "

The project

Industrial Bank implemented a security monitoring

project for its Windows and Linux servers.

Simultaneously, the bank's critical applications,

transactions and sensitive data were also monitored.

Some of these applications are:

?SWIFT: National and International transactions

?MEP: Electronic Transactions Application

?SOI: Central Bank daily checks

?Central Data: Consolidation of data which is

forwarded to the Central Bank

?Contabi: In-house accounting tool (based on SQL)

?Credit SAC: pension management

?Titles: Administration and transaction of public

and private titles

?PRS: Linux application developed internally to

operate account interfaces (savings and checking

accounts, loans, etc.)

What VISUAL Security Suite does for Industrial

Bank's critical applications is to monitor the log files

and any possible anomalous IT occurrence. Cejudo

elaborates, “we have an email alert system that

notifies us of suspicious activities in our security

infrastructure, like critical user logs, deletion of

users or modifications of important files.”

These alarms are sent in real time to the whole

security team using email alerts.

"Fortunately we chose Tango/04,

especially because the new regulation

is even more demanding than the

previous ones.”

"Tango/04 helps us

pass audits much more quickly.”

Page 13: T04 monitor2-en

12

regulations and audits. Apart from the regular

Central Bank Audits, Industrial Bank holds internal

and external audits. The external audits are done by

Deloitte & Co on a yearly basis. This auditor reports

to Industrial Bank's management as well as to

Argentina's Central Bank. The internal audit deals

with certain preset audit areas and evaluates

whether previously taken decisions have been

implemented correctly.

Cejudo on how much Tango/04 has improved the

process: “the audit did not find any flaws, and

previous observations were also considered

resolved. I can affirm that Tango/04 has helped pass

audits much more quickly.”

The day after

Cejudo remembers that "after the training from

Tango/04 had finished, we were completely self-

sufficient". Industrial Bank now operates Tango/04

independently and has customized and added many

different reports. “For instance, the last time the

Central Bank people came here they gave us a new

directive to follow, to add a command to the group

of 'sensitive' commands that you need to watch

closely. All we had to do is add a filter to Tango/04's

VISUAL Security Suite, we did not even call the

Tango/04 support department. We are really very

satisfied with Tango/04.”

Industrial Bank is already planning the next steps of

their monitoring project. “We are planning to use

Tango/04 to audit communications and some new

applications we are implementing at the moment.”

That is how Industrial Bank is planning to continue

growing and maintaining real-time control, passing

audits easier every time and maintaining

the high level of compliance

they have now, thanks to

Tango/04.

One of Argentina's main private banks needed to monitor its systems to

tightly control security and critical applications to be in compliance with the

Central Bank's regulations

Industrial Bank

Benefits: increased control, performance and reliability

Among the many benefits that Tango/04 gave

Industrial Bank are the huge amount of time saved

and the increase of performance that was evident

after implementation. “Before, we could not fully

control our IT security and had to invest many man

hours obtaining some sort of overview. Windows

produces 200 pages of log files on a daily basis that

have to be checked, but nobody can sit down and sift

through 200 pages. So we had to rely on sampling,

which was not 100% error free.”

But once VISUAL Security Suite was implemented

things changed. “Nowadays reports are made and

100% checked in less than a morning.” A proof of

this increase in productivity is that those people

who had to check the security logs on a daily basis

can now focus on other tasks. “Above all we have

increased reliability.”

Logged control: the reports

Industrial Bank also uses Tango/04 to obtain the

necessary compliance reports. Once printed, they

can be scanned quickly as they only reflect truly

important events. And afterwards they are filed for

future auditing needs. Cejudo says: “we now have

folders containing reports of 3 or 4 months, whereas

before barely one month's worth of reports would fit

in these folders. The difference is huge and we can

control much more now. It is very handy to have

everything in one console. Every time I need

something, I directly go to the console and look for it

there. I don't have to sift through files or papers

anymore.”

The Audits

Like any banking institution, Industrial

Bank has to comply with rigorous

12

Industrial Bank is a private equity bank with a track

record spanning 80 years of financing growth. With

a network of 28 branches in the main cities of the

country, it offers its clients specialized services like

private, corporate and investment banking.

The need for a monitoring solution

The IT security department of Industrial Bank was

facing a problem that was affecting the performance

of its IT systems and thereby jeopardizing a complete

and timely compliance with Central Bank

regulations. Gustavo Cejudo, one of the members of

the team responsible for IT security at the bank,

explains how “difficult it was to check all the logs of

all our applications.” Industrial Bank mainly works

with two platforms: Windows and Linux and has

implemented many applications, making centralized

and integral monitoring difficult.

When choosing a monitoring solution, Industrial

Bank followed the corporate policy of inviting three

providers to bid for the project. “We chose Tango/04

for economic reasons, implementation times and

the quality of the solution, which set Tango/04 apart

from the other competitors.”

The number of logs that the IT department had to

examine on a daily basis was one of the main

problems they had. They had someone especially

assigned to the task of manually revising all logs.

Nevertheless, “we did not have 100% control as the

only viable alternative was taking samples. Not

having a proper tool to do the job forced us to invest

many man hours in order to be in full compliance with

Argentina's Central Bank”, Cejudo remembers,

continuing “fortunately we chose Tango/04,

especially because the new regulation is even more

demanding than the previous ones.”

Industrial Bank's IT team was complying, but only

barely because the sampling method did not give a

real overview of what was happening in the IT

systems. One of the observations Industrial Bank

made prior to the implementation of Tango/04 was

that, until then, there were no reports on the use of

sensitive commands. "With Tango/04 we were able

to resolve that particular problem. "

The project

Industrial Bank implemented a security monitoring

project for its Windows and Linux servers.

Simultaneously, the bank's critical applications,

transactions and sensitive data were also monitored.

Some of these applications are:

?SWIFT: National and International transactions

?MEP: Electronic Transactions Application

?SOI: Central Bank daily checks

?Central Data: Consolidation of data which is

forwarded to the Central Bank

?Contabi: In-house accounting tool (based on SQL)

?Credit SAC: pension management

?Titles: Administration and transaction of public

and private titles

?PRS: Linux application developed internally to

operate account interfaces (savings and checking

accounts, loans, etc.)

What VISUAL Security Suite does for Industrial

Bank's critical applications is to monitor the log files

and any possible anomalous IT occurrence. Cejudo

elaborates, “we have an email alert system that

notifies us of suspicious activities in our security

infrastructure, like critical user logs, deletion of

users or modifications of important files.”

These alarms are sent in real time to the whole

security team using email alerts.

"Fortunately we chose Tango/04,

especially because the new regulation

is even more demanding than the

previous ones.”

"Tango/04 helps us

pass audits much more quickly.”

Page 14: T04 monitor2-en

We invite you to discover Tango/04 eChannel, our

new online training and communication service,

which will keep you up-to-date with the latest in IT

and introduce you to the latest technologies created

by our R&D department in Barcelona.

Through our Web seminars learn the views of experts

and high profile people in the industry and let our

team of professionals answer all your questions.

All events are free and available in English. Visit our

Web site www.tango04.com/events to find out

more about upcoming events and our Learn How

section.

channel

On our Web site, www.tango04.com, you will find

all the information you need about our solutions,

including brochures, case studies, white papers,

business meetings, press releases and a lot more.

close to you

Email & Phone

You can easily get in touch with Tango/04, to solve

any doubt or query, by email ing us at

[email protected] or calling 800-304-6872 (USA &

Canada) or +34 932 740 051 (EMEA).

We are more than happy to assist you.

Tango/04 offers you different communications channels so that you

are always up-to-date with the latest trends in monitoring and IT

security.

Discover our newsletters and our eChannel offering free training

and Web seminars. Regularly visit our Web site and always have our

details at hand.

www.tango04.com

1-2-3: A Unique, Fast Route to Value from the European Monitoring Leader

Why are we different? We are the only agile, easy-to-use, real-

time multiplatform solution that gives you a Rapid Path to Value

on Infrastructure & Operations, Security and Compliance, and

Business Service Management (BSM) and Service Level

Management (SLM). And, for once, BSM and SLM were not

added as an afterthought.

Most monitoring products promise you the moon. Sadly, after a considerable investment of your time and money, they don’t deliver.

The new trend in

monitoring strategies

Obtain ITIL-prescribed value within days, instead of years. See our outstanding rate of success, and what our customers are saying.

15

Tango/04 Computing Group is one of the leading developers of

systems management and automation software. Tango/04 software

helps companies maintain the operating health of all their business

processes, improve service levels, increase productivity, and reduce

costs through intelligent management of their IT infrastructure.

Founded in 1991 in Barcelona, Spain, Tango/04 is an IBM Business

Partner and a key member of IBM’s Autonomic Computing initiative.

Tango/04 has more than a thousand customers who are served by

over 35 authorized Business Partners around the world.

Alliances"Partnerships IBM Business Partner

"IBM Autonomic Computing Business Partner

"IBM PartnerWorld for Developers Advanced Membership

"IBM ISV Advantage Agreement

"IBM Early Code Release

"IBM Direct Technical Liaison

"Microsoft Developer Network

"Microsoft Early Code Release

"Red Hat Ready

Awards"Best Monitoring product (USA, APEX Awards)

"Product of the Year (USA, Search400.com)

"IBM All Star Award, 1997 to date

"Best Performance Product (USA, Midrange Computing Showcase Product Excellence)

"IBM iSeries Magazine Honor Roll

"IBM Server Certification

About

100% Satisfaction

It´s not common place to find a

satisfaction rate in monitoring

solutions as high as Tango/04´s.

Whilst our competitors

accumulate failures, this is what

our clients have got to say:

“To optimize our most critical business processes, to minimize

downtime, and to help us improve our Service Levels. This is why we

chose Tango/04.”

Mauro Fonzo,Head of Systems Management

Italian Stock Exchange

“Configuring the Tango/04 software was very easy.”

Rob Freeling, ConsultantCapgemini

“Tango/04’s VISUAL Security Suite has allowed us to rapidly implement SOX controls.”

Don Keating, IT ManagerHenry Schein

“Enhanced response times and

accomplishment of Service Level Agreements were visible right

from the start.”

Jimmy van Kerkvoorde, IT ManagerFortis Bank

“Tango/04 has an excellent technical and

professional team.”

Ruben Hector Villaverde, SystemsCoca-Cola FEMSA

“I completelymonitoring solution!”

recommend this

Francisco Rastelli,IT Manager, Bayer

USA & Canada: 800-304-6872 EMEA: +34 932 740 051

Page 15: T04 monitor2-en

We invite you to discover Tango/04 eChannel, our

new online training and communication service,

which will keep you up-to-date with the latest in IT

and introduce you to the latest technologies created

by our R&D department in Barcelona.

Through our Web seminars learn the views of experts

and high profile people in the industry and let our

team of professionals answer all your questions.

All events are free and available in English. Visit our

Web site www.tango04.com/events to find out

more about upcoming events and our Learn How

section.

channel

On our Web site, www.tango04.com, you will find

all the information you need about our solutions,

including brochures, case studies, white papers,

business meetings, press releases and a lot more.

close to you

Email & Phone

You can easily get in touch with Tango/04, to solve

any doubt or query, by email ing us at

[email protected] or calling 800-304-6872 (USA &

Canada) or +34 932 740 051 (EMEA).

We are more than happy to assist you.

Tango/04 offers you different communications channels so that you

are always up-to-date with the latest trends in monitoring and IT

security.

Discover our newsletters and our eChannel offering free training

and Web seminars. Regularly visit our Web site and always have our

details at hand.

www.tango04.com

1-2-3: A Unique, Fast Route to Value from the European Monitoring Leader

Why are we different? We are the only agile, easy-to-use, real-

time multiplatform solution that gives you a Rapid Path to Value

on Infrastructure & Operations, Security and Compliance, and

Business Service Management (BSM) and Service Level

Management (SLM). And, for once, BSM and SLM were not

added as an afterthought.

Most monitoring products promise you the moon. Sadly, after a considerable investment of your time and money, they don’t deliver.

The new trend in

monitoring strategies

Obtain ITIL-prescribed value within days, instead of years. See our outstanding rate of success, and what our customers are saying.

15

Tango/04 Computing Group is one of the leading developers of

systems management and automation software. Tango/04 software

helps companies maintain the operating health of all their business

processes, improve service levels, increase productivity, and reduce

costs through intelligent management of their IT infrastructure.

Founded in 1991 in Barcelona, Spain, Tango/04 is an IBM Business

Partner and a key member of IBM’s Autonomic Computing initiative.

Tango/04 has more than a thousand customers who are served by

over 35 authorized Business Partners around the world.

Alliances"Partnerships IBM Business Partner

"IBM Autonomic Computing Business Partner

"IBM PartnerWorld for Developers Advanced Membership

"IBM ISV Advantage Agreement

"IBM Early Code Release

"IBM Direct Technical Liaison

"Microsoft Developer Network

"Microsoft Early Code Release

"Red Hat Ready

Awards"Best Monitoring product (USA, APEX Awards)

"Product of the Year (USA, Search400.com)

"IBM All Star Award, 1997 to date

"Best Performance Product (USA, Midrange Computing Showcase Product Excellence)

"IBM iSeries Magazine Honor Roll

"IBM Server Certification

About

100% Satisfaction

It´s not common place to find a

satisfaction rate in monitoring

solutions as high as Tango/04´s.

Whilst our competitors

accumulate failures, this is what

our clients have got to say:

“To optimize our most critical business processes, to minimize

downtime, and to help us improve our Service Levels. This is why we

chose Tango/04.”

Mauro Fonzo,Head of Systems Management

Italian Stock Exchange

“Configuring the Tango/04 software was very easy.”

Rob Freeling, ConsultantCapgemini

“Tango/04’s VISUAL Security Suite has allowed us to rapidly implement SOX controls.”

Don Keating, IT ManagerHenry Schein

“Enhanced response times and

accomplishment of Service Level Agreements were visible right

from the start.”

Jimmy van Kerkvoorde, IT ManagerFortis Bank

“Tango/04 has an excellent technical and

professional team.”

Ruben Hector Villaverde, SystemsCoca-Cola FEMSA

“I completelymonitoring solution!”

recommend this

Francisco Rastelli,IT Manager, Bayer

USA & Canada: 800-304-6872 EMEA: +34 932 740 051

Page 16: T04 monitor2-en

Banki

ng

Insu

rance

Fin

anci

al

Logi

stic

sM

anufa

cturing

Pharm

ace

utica

l

Thousands of daily shipments, monitored by Tango/04

SEUR is the Spanish market leader for national and international shipments. Their main office, SEUR Geopost Madrid, uses Tango/04 to monitor its complex multiplatform IT infrastructure.

The efficiency of their business processes and of the thousands of shipments they manage each day depend on the health of the IT infrastructure supporting them.

Any error or downtime could jeopardize the reputation of SEUR Geopost Madrid and lead to financial losses.

“Tango/04 is vital to us

because it allows to link IT

events to the business

services they support”

Ricardo Martín

IT Systems and Security Manager

SEUR Geopost Madrid

Want to know more?

Download our Seur Geopost Case study

and our BSM White paper

www.tango04.com/seur

Dis

trib

ution

[email protected]

www.tango04.com

SEUR Geopost MadridHeadquarters

Unloading Trameo

Trameo

Areas Distribution Start

SEMA70 NOTES INTERNET

Departure Unloading and Invoicing

Distribution End

Fleet Management

Call Center

GPS Fleet Tracking

Tango/04 helps the IT

department to monitor all its

systems, Web servers,

applications, infrastructure,

and the connections involved,

from back end to front end,

ensuring the highest availability

for the company's critical

business processes and a high

return on investments (ROI)