Welcome!

Cloud Security Authors: Elizabeth White, Zakia Bouachraoui, Pat Romanski, Yeshim Deniz, Liz McMillan

Related Topics: Cloud Security

News Feed Item

Verizon Business Launches New Security Program to Help Enterprises Protect Key Software Applications

New Risk-Based Approach Helps Establish Criticality of Each Application

BASKING RIDGE, N.J., July 9 /PRNewswire/ -- Hacker attacks on business applications, such as databases and software, are a rapidly growing threat to enterprises. To help them meet this challenge, Verizon Business on Thursday (July 9) introduced a comprehensive, new Application Security Program that takes a risk-based approach to protecting the critical data contained within each application.

Immediately available in the U.S. and in a number of countries around the world, the program helps large-business customers better understand and identify the potential security threats to their applications, and take steps to protect them. Customers also have the option to pursue a Verizon Cybertrust Application Certification, which verifies that their information-security controls, policies and procedures meet a stringent set of standards.

"Businesses are often stuck in a Catch-22 situation when it comes to applications," said Kerry Bailey, Verizon Business senior vice president of global services. "While enterprises must adopt new applications to conduct their day-to-day operations and remain competitive, the focus tends to be on functionality and efficiency, not security. If you deploy an application without proactively evaluating the security ramifications, there could be a steep price to pay."

As shown by Verizon Business' "2009 Data Breach Investigations Report," hackers often sneak into and compromise a company's sensitive data and business systems via insecure applications. Of the 285 million compromised records from the 90 confirmed breaches in 2008 that were examined by the report, 79 percent were compromised via Web applications.

In addition to the sheer volume and success of attacks, they are becoming increasingly sophisticated. Compounding this growing trend is that the traditional software-development cycle often does not address security, which makes enterprises even more vulnerable to security breaches. Moreover, fixing vulnerable applications can be challenging, costly and time-consuming.

Adds Bailey: "Verizon offers one-stop shopping to address an enterprise's complete application-security needs. Using each customer's unique risk profile, we can help the business identify high-priority applications -- and the vulnerable, critical data contained within them -- before intruders have the opportunity to exploit the applications and harm the business."

Three-Tiered Approach

The Verizon Application Security Program comprises three tiers: Baseline, Assess and Certify. Customers enter the program at the first tier, and can continue through the second and third tiers, based on customers' unique business requirements. To mitigate security risk, new applications can be vetted before they are deployed.

"Verizon's Application Security Program addresses an important area that is often overlooked by enterprises -- securing the applications that are critical to business operations," said Amy DeCarlo, principal analyst -- managed IT services at Current Analysis. "This program allows for a more thorough look at enterprise applications to ensure they are not only available but secure. With more attacks targeted at the application layer, this kind of attention to application security is essential."

In the first tier of the program, Verizon security experts conduct an initial application-risk assessment, which consists of baseline scanning and reviewing the software development lifecycle of the applications. Verizon determines the types of data consumed by specific applications, which is critical to establishing each application's risk level, and also determines which applications present the highest risk for the business.

The second tier focuses on high-risk applications. Verizon conducts a full-scale review to assess the criticality and severity of impact to the business if these assets were to be exploited. Typical assessment activities include application vulnerability assessments, penetration testing and security source code reviews.

The third tier offers customers the option of pursing the prestigious Verizon Cybertrust Application Certification, which verifies that an organization's information-security controls, policies and procedures have been examined, measured and validated against a stringent set of Verizon security standards. The certification is rigorous, and renewal requires annual recertification. Certified customers can display and share the Verizon Cybertrust seal with customers, partners and prospects to demonstrate that information security is a top priority for them.

Customers can choose to remediate on their own any vulnerabilities identified by the Application Security Program, or to outsource the remediation to Verizon Business. Verizon Business offers a wide range of remediation services to prevent, detect and respond to vulnerabilities, including secure application development training, identity and access management, and disaster recovery.

Verizon Cybertrust Security

The Verizon Application Security Program joins Verizon Business' robust portfolio of security solutions, aimed at helping enterprises and government agencies manage security risk and protect critical company assets. The portfolio includes governance risk and compliance solutions, data loss and prevention solutions, identity management solutions, and managed security services. The company's more than 1,100 security professionals around the globe deliver these offerings through a range of managed services, professional services and technologies, based on what best suits the customer. More information is available by visiting http://www.verizonbusiness.com/us/products/security.

About Verizon Business

Verizon Business, a unit of Verizon Communications (NYSE: VZ), is a global leader in communications and IT solutions. We combine professional expertise with the world's most connected IP network to deliver award-winning communications, IT, information security and network solutions. We securely connect today's extended enterprises of widespread and mobile customers, partners, suppliers and employees -- enabling them to increase productivity and efficiency and help preserve the environment. Many of the world's largest businesses and governments -- including 96 percent of the Fortune 1000 and thousands of government agencies and educational institutions -- rely on our professional and managed services and network technologies to accelerate their business. Find out more at www.verizonbusiness.com.

VERIZON'S ONLINE NEWS CENTER: Verizon news releases, executive speeches and biographies, media contacts, high-quality video and images, and other information are available at Verizon's News Center on the World Wide Web at www.verizon.com/news. To receive news releases by e-mail, visit the News Center and register for customized automatic delivery of Verizon news releases.

SOURCE Verizon Business

More Stories By PR Newswire

Copyright © 2007 PR Newswire. All rights reserved. Republication or redistribution of PRNewswire content is expressly prohibited without the prior written consent of PRNewswire. PRNewswire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

IoT & Smart Cities Stories
Dion Hinchcliffe is an internationally recognized digital expert, bestselling book author, frequent keynote speaker, analyst, futurist, and transformation expert based in Washington, DC. He is currently Chief Strategy Officer at the industry-leading digital strategy and online community solutions firm, 7Summits.
Digital Transformation is much more than a buzzword. The radical shift to digital mechanisms for almost every process is evident across all industries and verticals. This is often especially true in financial services, where the legacy environment is many times unable to keep up with the rapidly shifting demands of the consumer. The constant pressure to provide complete, omnichannel delivery of customer-facing solutions to meet both regulatory and customer demands is putting enormous pressure on...
IoT is rapidly becoming mainstream as more and more investments are made into the platforms and technology. As this movement continues to expand and gain momentum it creates a massive wall of noise that can be difficult to sift through. Unfortunately, this inevitably makes IoT less approachable for people to get started with and can hamper efforts to integrate this key technology into your own portfolio. There are so many connected products already in place today with many hundreds more on the h...
The standardization of container runtimes and images has sparked the creation of an almost overwhelming number of new open source projects that build on and otherwise work with these specifications. Of course, there's Kubernetes, which orchestrates and manages collections of containers. It was one of the first and best-known examples of projects that make containers truly useful for production use. However, more recently, the container ecosystem has truly exploded. A service mesh like Istio addr...
Digital Transformation: Preparing Cloud & IoT Security for the Age of Artificial Intelligence. As automation and artificial intelligence (AI) power solution development and delivery, many businesses need to build backend cloud capabilities. Well-poised organizations, marketing smart devices with AI and BlockChain capabilities prepare to refine compliance and regulatory capabilities in 2018. Volumes of health, financial, technical and privacy data, along with tightening compliance requirements by...
Charles Araujo is an industry analyst, internationally recognized authority on the Digital Enterprise and author of The Quantum Age of IT: Why Everything You Know About IT is About to Change. As Principal Analyst with Intellyx, he writes, speaks and advises organizations on how to navigate through this time of disruption. He is also the founder of The Institute for Digital Transformation and a sought after keynote speaker. He has been a regular contributor to both InformationWeek and CIO Insight...
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a mul...
To Really Work for Enterprises, MultiCloud Adoption Requires Far Better and Inclusive Cloud Monitoring and Cost Management … But How? Overwhelmingly, even as enterprises have adopted cloud computing and are expanding to multi-cloud computing, IT leaders remain concerned about how to monitor, manage and control costs across hybrid and multi-cloud deployments. It’s clear that traditional IT monitoring and management approaches, designed after all for on-premises data centers, are falling short in ...
In his general session at 19th Cloud Expo, Manish Dixit, VP of Product and Engineering at Dice, discussed how Dice leverages data insights and tools to help both tech professionals and recruiters better understand how skills relate to each other and which skills are in high demand using interactive visualizations and salary indicator tools to maximize earning potential. Manish Dixit is VP of Product and Engineering at Dice. As the leader of the Product, Engineering and Data Sciences team at D...
Dynatrace is an application performance management software company with products for the information technology departments and digital business owners of medium and large businesses. Building the Future of Monitoring with Artificial Intelligence. Today we can collect lots and lots of performance data. We build beautiful dashboards and even have fancy query languages to access and transform the data. Still performance data is a secret language only a couple of people understand. The more busine...