RSA rolls out 900 virtual desktops to Australia

By on
RSA rolls out 900 virtual desktops to Australia

Re-architects in-house security.

RSA has begun a virtual desktop rollout in its Australian offices in a bid to secure internal systems following a major compromise of its SecurID two-factor authentication tokens in March.

The company hoped to revise its internal security architecture and adopt an "assume you are breached" mentality among employees.

It was partway through the rollout, using vitualisation software from parent company EMC, to more than 900 Australian staff for use on desktops and personal devices.

The virtualisation deployment was expected for completion by January 2013.

The company also hoped to implement "sophisticated analytics and forensics" technology which would continually monitor potentially advanced persistent threats like those blamed for the March compromise.

Security information would be fed back to the company's Boston-based Critical Incident Response Centre.

The EMC subsidiary had continued to deal with the fallout after its SecurID token system, popular among large enterprises, was breached in March. The tokens had been used later in an attack on defence contractor Lockheed Martin

Since the breach, 10 percent of the company's global customer base had replaced its SecurID tokens.

RSA Australia director Andy Solterbeck confirmed that Australia had suffered higher customer churn since March but would not reveal exact figures.

Major organisations including ANZ, Westpac and the Australian Taxation Office were among those announcing replacement of the tokens following the breach, although they remained customers of RSA.

The other two major banks, NAB and Commonwealth Bank had yet to replace the tokens.

Customer churn and panic was tied to media speculation and lack of direct information from the company, an issue Solterbeck said had tied RSA's hands, as it was simultaneously under investigation by the federal US Government.

RSA has since attempted to convince customers that SecurID should be implemented as part of a multi-layered defence and not be thought of as a security silver bullet in itself.

"We did as good a job as we could," Solterbeck said. "They [customers] were satisfied."

The former Telstra security boss pointed to a recent record quarter for SecurID as a measure of continuing trust in the brand.

Additional reporting by James Hutchinson.

Copyright © SC Magazine, Australia

Tags:

Most Read Articles

You must be a registered member of iTnews to post a comment.
| Register

Poll

How should the costs of Australia's piracy scheme be split?
Rights holders should foot the whole bill
50/50
ISPs should foot the whole bill
Government should chip in a bit
Other
Flash is heading towards its grave, and that's...
Great! Good riddance
Sad! Flash had some good qualities
Irrelevant. I don't care
What's Flash?
View poll archive

Whitepapers from our sponsors

What will the stadium of the future look like?
What will the stadium of the future look like?
New technology adoption is pushing enterprise networks to breaking point
New technology adoption is pushing enterprise networks to breaking point
Gartner names IBM a 'Leader' for Disaster Recovery as a Service
Gartner names IBM a 'Leader' for Disaster Recovery as a Service
The next era of business continuity: Are you ready for an always-on world?
The next era of business continuity: Are you ready for an always-on world?

Log In

Username:
Password:
|  Forgot your password?