As network safekeeping gets harder, Cisco Partners Masters Security Specialization offers help

September 12, 2006

By Terry Timm Moos, News@Cisco

Ask any IT or business professional about the security landscape, and they'll tell you it is changing. Fast.

Threats continue to rise, from annoying viruses, worms, and spyware, to more direct assaults, such as security breaches, compromised data, identity theft, and other cyber crimes. Where firewalls once kept data protected, organizations have opened up communications to more users and across a myriad of devices. New legal compliance issues, with reporting and auditing requirements, add even more pressure for IT to manage and protect valuable information, while assuring system availability.

More sophisticated networks require better defenses, because the dangers are real.

Many organizations are turning to a strategy to defend their networks on multiple levels as they develop new programs. A good example is Driscoll Children's Hospital in south Texas, where the hospital is taking steps to ensure that all transports are secure as they add new technology. "When we implement new programs, security is at the top of the list of considerations," said James Ballou, IS Security Officer for Driscoll.

"Our IT mission at Driscoll Children's Hospital is to utilize technology to ensure patient privacy and to increase the quality of the healthcare we provide. Understanding compliance and adding HIPAA guidelines are big issues, and critical for us is the concern for patient security," he said. "We need a strategy to address these concerns and to keep confidentiality intact."

Ballou, like other executives, is encountering a growing number of challenges to keep up with security demands, as more complex threats emerge and the networks are called on to accommodate more applications and devices. Today there are many more users, more devices, and more ways to lose control of valuable data.

Cisco's Master Security Specialization centers on security expertise

Increasingly, organizations are seeking the help of network security specialists who can provide expertise and guidance for increasing security demands. To address customers' most sophisticated security needs, Cisco Systems has added a new level of specialization to its Channel Partner Program. The Cisco Master Security Specialization, an extension of the Cisco Advanced Security Specialization, allows channel partners to further develop and enhance their business models to meet the highest level of security needs of customers.

Edison Peres, Cisco Systems' Vice President, Worldwide Channels, is enthusiastic about the Master Security Specialization. "This is the first time Cisco has offered a master level in security. The master brand demonstrates an ability to integrate multiple sophisticated security systems, and Cisco validates these specialists," explained Peres. "With today's threats, it is tough for IT professionals and business executives to get their arms around how the network can be compromised."

Susan Don, Cisco Systems' Security Leader, Worldwide Channels, agreed. "Things are now more complex in the IT environment, yet there are no new resources to help. So IT departments look to partners with high levels of security expertise to come in and create security-in-depth in the environment."

Security is another component of network expertise that integration partners can develop to serve customers. Technology solution providers, such as Troubadour Ltd. and VL Systems, are among the channel partners specializing in the most advanced network security integration.

Zeus Kerravala, Vice President and security analyst with Yankee Group, acknowledged that security used to be fairly simple, but the need for security specialization is real. "You'd set up a firewall and everything behind it was private and everything in front of it was public," he said. "But the breadth of the enterprise has changed, so that not everything is behind the firewall. Now, there are remote workers, telecommuters, people working in hot spots, and on intranets," continued Kerravala. "Anyone can download a tool and become a hacker."

Cisco Systems Master Security Specialization distinguishes those channel partners who can integrate multiple security solutions and offer a full range of life cycle services. "Cisco security specialization is a great approach. It allows any channel partner, big or small, to specialize in the area of security if they are focused," Kerravala said. "Security is a function of the network, and if you look at advanced technologies such as security, wireless, or IP communications, they sit on top of the network. Specializations are developed to create a skill set that is better layered on top of the network."

Securing the network from point edge to edge

Security has become such a critical issue over time that VLSystems has evolved from a classic VAR (Value Added Reseller) for software and application development to a security solution provider. VLSystems is a Cisco Systems Premier Certified Partner with VPN/Security and Wireless LAN specializations. Lee Green, Vice President of Marketing at VLSystems explained the shift to security. "Four years ago, security threats were mostly from the outside, but now we are seeing more internal threats. Information is powerful -and it is more readily available to lower-level employees, there is corporate espionage, and other serious threats."

Christian Rolland, Chief Technology Officer for VL Systems agrees. "With the increase in laptop use, PDAs, and smart phones at the edge of network, data needs to be protected," he said. "Security is no longer just about one black box - it's about building an intelligent infrastructure, from switching to applications, having security applied to multiple layers." According to Rolland, businesses need an adaptive and comprehensive, advanced solution. "Cisco is the only company in the market who can provide fully-integrated security solutions."

Cisco's Master Security Specialization ensures that companies investing in security technology get key support from vendors after implementation that is vital. Part of VLSystems' job is providing a full range of life cycle services. "From a technology perspective, the master security specialization is huge," added Rolland. "This designation will help customers identify "trusted advisor" partners that are validated by Cisco to deliver a complete security solution," explained Rolland.

"You have to protect your business, from edge to edge, and all points in between to make sure your most value assets - your data - are secure. And as a Master Security Specialized partner, we can definitely help the customer accomplish this," Rolland continued. "Looking at compliance issues, such as Sarbanes-Oxley, CISP (Cardholder Information Security Program) or the Gramm-Leach-Bliley Act, customers know that a master understands the implications of these regulations and how to architect a security solution that fulfills these needs" added Rolland.

Green believes the master specialization will differentiate VLSystems from channel partners. "Cisco is vouching for its partners, making sure we have the right type of engineers, tested processes, and verified customer implementations," he said. Cisco also does a detailed on-site audit, and makes sure industry standards are upheld, with security at multiple layers. "Nothing approaches the kind of scrutiny that Cisco applies in certifying their master level partners," added Green.

As Green said, "Security is a must have - not a 'nice to do.' The goal is to look at protecting the whole organization, and form a plan. It is about a strategic positioning of technology to meet requirements, not just fixing one pain point. This is complete business technology."

Partnering to secure the hospital network

Driscoll Children's Hospital teamed with Cisco Channel Partner Troubadour Ltd. to provide a deeply secured network. The key has been in planning - from day one - how to integrate and manage all the necessary technologies, so that the entire network is secure.

"At Driscoll, we put together a wireless network for IV pumps, which gives us real-time visibility into patient monitoring and infusion behavior to assist in the reduction of medication errors at the bedside," said Ballou. "We are also leveraging our wireless access point (WAP) technology to streamline case management by allowing our case managers to be mobile. As such, we can manage bed availability and admissions more effectively. This also helps with patient care, providing real-time notifications on patients being admitted to the different floors."

The hospital's young patients often require long stays. Driscoll provides guest Internet access for parents and family members who need to be near these long-term patients - yet must also keep in touch with their work. "Opening up access is a concern for security, but we have developed processes, with security logs and real-time analysis, so that we can allow guest access, yet still protect our network security," Ballou explained.

Jay Kirby, Chief Sales Officer for Troubadour Ltd., said it is challenging for companies to change how and when clients get to data. "Availability is key - we have a process of testing and learning, and then we put in a protection mode. We have to build confidence in the security, the network, and the applications," he noted. These processes have enabled Driscoll Children's Hospital to go forward without compromising the network.

Emphasis on security…and good integration

Kirby believes customers are becoming more proactive and are ready to adopt new technologies to tackle security issues. He also believes customers are ready to partner with security specialists, because of the need to fully integrate security solutions within the network. "IT organizations want layered security platforms, and a single dashboard is a must. That kind of complexity requires specialized expertise."

The Cisco Partner program offers an advantage for customers. "Partners with a Master Security Specialization know the products, processes, and life cycle services from design to support," explained Kirby.

"Security is a business issue," Kirby said. "At Troubadour, when we work with customers, we touch on technical solutions, operating efficiency, and regulatory issues," said Kirby. "We know businesses need to be up and running, efficient, and cost-conscious. I tell customers that I will be there making things NOT happen, rather than fixing problems after the fact."

Kirby believes customers need a partner dedicated to security every day. "At Troubadour, we have chosen to invest in being ahead of the curve in security, and the investment we make to obtain the master security certification from Cisco is critical for our success - and our customers' success," he explained.

"Security is always going to be changing," added Kirby. "An integrator has to have the knowledge to fix a breach, make data secure and available for clients. Cisco is driving us to focus on security, customer satisfaction, and superior integration."

Terry Timm Moos is a freelance journalist located in Seattle, WA.