Trend Micro and Wipro Enable PCI Compliance for Fortune 100 Retailer

Wipro delivers Trend Micro Deep Securitya next-generation host intrusion defense systemas a managed security service.
Deep Security sits on the network layer and captures more information than the retailers previous solution. The customer is better protected, and can resolve issues quickly.
EXECUTIVE SUMMARY Customer: Fortune 100 Retailer Location: North America and Europe Number of Stores: 2,500+ Number of Servers and Endpoints: 50,000+ CHALLENGE: Help large retailer achieve and maintain PCI compliance Cost-effectively support thousands of stores, worldwide Provide a single, comprehensive view of security across the enterprise Tightly integrate existing technologies and processes Minimize impact on the customers business processes SOLUTION: Trend Micro Deep Security as the platform for a complete managed service Integration with service management, SIEM, and other systems One-stop view of enterprise-wide security Information on detected threats integrated into customers Security Incidence Team processes and workflow BUSINESS RESULTS: Customer certified PCI compliant Simplified, integrated security posture Reduced numbers of threats and security incidents with improved, proactive detection Auto configuration capabilities save time for Wipro, and minimize false positives to streamline security management Maximized value provided to customer, as part of managed service CUSTOMER ENVIRONMENT Approximately 2500 stores in North America, Europe (increasing each year) 50,000+ endpoints (desktops, laptops, and servers) Trend Micro Deep Security

Challenge One of the worlds largest retailers, with a rapidly expanding global footprint and thousands of stores, needed an MSSP that could provide better expertise, and deliver cost-savings, while relying on more effective security and compliance solutions. In addition, the retailer wanted a single, comprehensive view of security across the enterprise, was unhappy with its current host-based intrusion defense solution, and needed to meet Payment Card Industry (PCI) compliance requirements. Wipro, a Trend Micro global alliance partner that operates one of the largest IT security practices in the world, was challenged to identify the gaps in the existing system, recommend ways to improve protection and visibility into their security posture across the business. As well, they were tasked with helping the retailer successfully pass a PCI certification audit and maintain compliance. Solution Wipro carried out a thorough evaluation of the previously purchased behavior-based, host intrusion defense solution, which operated at the application layer. It quickly determined that the existing solution would not easily scale across all of the retailers endpoints. Each of the retailers servers exhibited different behaviors, which posed a problem for the solution they had tried to deploy. After careful analysis of the alternatives, Trend Micro Deep Security was chosen as the solution to address the challenge. It includes host-based detection and prevention of threats that enter through the network layer and the solution scales across thousands of servers and endpoints. The retailer already had Trend Micro Enterprise Security for Endpoints, and adding Deep Security at the network layer provided the additional intrusion defense functionality that the customer needed for PCI compliance. Solution highlights: Deep Security simplified the integration of the new security layer with the existing endpoint security, allowing Wipro to streamline overall security management and monitoring. Deep Security, delivered as a managed service, was integrated with the Wipro Security Operations Center, and allowed the customer to achieve tighter integration with their technologies and processes including threat remediation. It also provided the customer with a single view of their security posture and status. The Trend Micro solution also offered a broad feature set and allowed Wipro the flexibility to deploy the product based on the customers specific requirements. It was very important to the customer that the solution would introduce intrusion detection without forcing intrusion prevention functionality on them, plus they required the ability to precisely control security behaviors. Deep Security met these requirements.

IT SERVICES I CASE STUDY

Page 1 of 2

TREND MICRO I WIPRO LIMITED

Deep Security goes well beyond typical intrusion defense solutions. It gives Wipros retail customer a combination of capabilities in a single form-factor universal agent basic integrity monitoring; firewall for endpoints; log inspection and management; and web application protection and application control. Wipros responsibility to the retailer is to monitor and detect threats, qualify them, and then escalate to the customers Security Incidence Response team. Deep Security helped address all the business issues and goals, and gives the client excellent security value. Deep Securitys integrity monitoring and deep packet inspection capabilities now form the basis for the security service provided by Wipro to the retailer. In addition, the firewall feature is used to block access to servers that host credit card information. These and other servers that host critical systems are also monitored using the log management capabilities of the solution. Results Trend Micro Deep Security has helped Wipro deliver constant protection for the retailers endpoints. And although it essentially includes several security products combined into one solution, Deep Security is priced competitively, enabling Wipro to provide an affordable managed service to the customer. With Deep Security deployed, the retailer was able to pass the thorough inspection required for PCI compliance certification and today the company operates with confidence that customer credit card information is protected. The Trend Micro solution feeds event information into this centralized service framework, and helps Wipro more rapidly analyze and correlate security information required for compliance. Besides these accomplishments, the Wipro-Trend Micro alliance and solution have given the retailer other benefits: Improved protection. Deep Security sits on the network layer and captures more information than the retailers previous solution. The customer is better protected, and can resolve issues more quickly. Detailed reports. The solution provides the information needed to take action against any person attempting to break into systems, including prosecuting offenders in courts of law. Avoided capital expenditures. The managed service avoids the needs for an intrusion defense system in each store. By avoiding the purchase and deployment of capital equipment, particularly during a down-turned economy, the solution has been a big hit with management at the retail company. Auto-configuration. Deep Security monitors and analyzes traffic patterns; and configurationsetting recommendations help Wipro adjust scans to reduce false positives over time.

Partner: Wipro Limited Industry: IT Services Location: Bangalore, India Web Site: www.wipro.com Number of Employees: 110,000 Partner Profile Wipro Limited, the #1 provider of integrated business, technology, and process solutions on a global delivery platform, is the first CMMI Level 5 certified software services company and the first outside the U.S. to receive the IEEE Software Process Award. Wipros Enterprise Security Solutions (ESS) practice is a leading provider of end-to-end security solutions that streamline security technologies and management processes to help mitigate the security risks associated with enterprises. Wipro ESS provides consulting & design, development & deployment as well as management services across the value chain of the enterprise security lifecycle. Wipro ESS has been successfully executing projects for Global 1000 companies and solving their complex security problems across Americas, Europe and Asia-Pacific. Additional Resources Wipro Enterprise Security Solutions http://www.wipro.com/security Trend Micro Enterprise Security http://us.trendmicro.com/us/home/enterprise/ Trend Micro Deep Security http://us.trendmicro.com/us/solutions/enterprise/ security-solutions/virtualization/deep-security/ index.html Trend Micro Enterprise Security for Endpoints http://us.trendmicro.com/us/products/enterprise/ security-for-endpoints/index.html

The Trend Micro solution feeds event information into Wipros centralized Global Security Operations Center, and helps security administrators more rapidly analyze and correlate security information required for compliance.

2010 Trend Micro Incorporated. All rights reserved. All Trend Micro company, product and service names and slogans are trademarks or registered trademarks of Trend Micro Incorporated. Other names and marks are the property of their respective owners. SS11WIPDSTMES100507IN

www.trendmicro.com

IT SERVICES I CASE STUDY

Page 2 of 2