Symantec's New View: Security + Availability = Information Integrity

Information Security	+	Information Availability	=	Information Integrity
Information that is secure, but not available to your people is worthless.		Information your people can get to, but that is insecure, is suspect. And so is everything they do with it.		Information that has integrity – security plus availability – is more trustworthy. And trustworthy information is worth more.

Hong Kong - 18 November 2004 - Symantec Corp. (Nasdaq: SYMC), the global leader in information security, today in Hong Kong unveiled a fundamentally new way for enterprise customers to view and manage the risks around protecting, securing, and using their most valuable asset, their information. Backed by partners and customers, the concept that Symantec calls "Information Integrity" addresses the need to keep businesses up, running and growing, even in the event of Internet threats or other disruptive events.

"Digital information has become an influential phenomenon," said Rob Clyde, Vice President & Chief Technology Officer, Symantec Corporation. "In fact, many believe a substantial part of the world's economy revolves around the use, storage and movement of digital information. It is a powerful enabler, but only if it is both secure and available." Balancing security risks with business opportunities is key for any organisation, as they need to ensure they are able to analyse risk and plan for growth while protecting their assets and brand," he continued.

Symantec's approach provides customers with an end-to-end business process for balancing security with availability beginning with the need for organisations to assess the risk of vulnerabilities, exposures and threats. Once a valid risk assessment has been performed, organisations must act to shield information from attack, mitigate threats, prioritise preventative actions based on real-time threat alerts and design in the recovery capability to deal with accidents and disasters when they happen.

"The unification of security and systems management is inevitable. Starting with patch management and moving towards full-fledged configuration management, security issues are increasingly associated with business continuity," according to Chris Christiansen, Vice President of IDC's Security Products & Services.

Symantec understands that organisations are challenged with many business issues including regulatory pressures. Failure to comply can result in lost business and customer confidence, in addition to financial and legal liability. Symantec takes a proactive approach to helping customers understand IT compliance risk and build and enforce a policy to protect the integrity of their information.

By building and maintaining a resilient infrastructure, security and IT operations can leverage each other's expertise to prevent attacks and preserve business continuity. To build this resilient infrastructure, companies must understand their information environment, act to successfully address both vulnerabilities and opportunities, and control IT resources to proactively manage risk and keep their business up and running, no matter what happens.

"Symantec and BMC, with its Business Service Management strategy, share the same goal of helping customers manage the complexity of their IT environment and maximising the business value of their IT infrastructure," said Robert E. Beauchamp, President and CEO of BMC Software. "In June of this year, our companies released the integration of BMC Software's Remedy Action Request System and Remedy Help Desk with Symantec DeepSight Alert Services and Symantec Incident Manager. Through this we can now offer our mutual customers unparalleled coordination in the remediation of security incidents."

In support of the information integrity initiative, Symantec announced new products and services including:

Symantec Enterprise Security Manager 6.1 - The newest version of Symantec's industry-leading policy compliance solution, Symantec Enterprise Security Manager (ESM), offers powerful compliance reporting features and pre-configured assessment templates for Sarbanes-Oxley and Gramm-Leach-Bliley. By identifying threats and measuring compliance to security practices and regulations, ESM is a key element in achieving information integrity by helping organisations better manage their information environment.

Symantec Gateway Security 400 - The Symantec Gateway Security Appliance 400 Series provides a comprehensive solution including firewall, intrusion prevention, intrusion detection, antivirus policy enforcement, content filtering, virtual private networking (VPN) and gateway networking functionality in a single, easy-to-use appliance designed for remote and branch office sites. The Symantec Gateway Security 400 Series also can function as a standards-based, secure wireless LAN (WLAN) access point. Symantec Gateway Security 400 Series appliances are a key component in achieving information integrity by helping organisations better secure their networks at remote and branch office sites.

Symantec LiveState Recovery Products - Symantec LiveState Recovery family of products provide fast, reliable and cost-effective system and data recovery. The Symantec LiveState Recovery products capture a point-in-time operating state of an entire server or desktop, which includes the operating system, applications, data, and settings into one easy-to-manage file. These point-in-time snapshots are created without interrupting user productivity or application usage. Users can perform a full system restoration, a complete bare metal recovery or retrieve individual files or folders in minutes to ensure information availability. Three editions of Symantec LiveState Recovery are available: Symantec LiveState Recovery Advanced Server 3.0, Symantec LiveState Recovery Standard Server 3.0, and Symantec LiveState Recovery Desktop 3.0.

For additional information on Symantec's revolutionary new approach to information integrity and the products and services offered today by Symantec to help enterprise customers balance security with information availability, go to http://www.information-integrity.com/.

About Symantec
Symantec is the global leader in information security providing a broad range of software, appliances and services designed to help individuals, small and mid-sized businesses, and large enterprises secure and manage their IT infrastructure. Symantec's Norton brand of products is the worldwide leader in consumer security and problem-solving solutions. Headquartered in Cupertino, California, Symantec has operations in more than 35 countries. More information is available at http://www.symantec.com.

NOTE TO EDITORS:
If you would like additional information on Symantec Corporation and its products, please view the Symantec Press Center at http://www.symantec.com/PressCenter/ on Symantec's Web site.

Symantec and the Symantec logo are trademarks or registered trademarks, in the United States and certain other countries, of Symantec Corporation. Additional company and product names may be trademarks or registered trademarks of the individual companies and are respectfully acknowledged.