Jump to content
United States-English
HP Enterprise Services
» Contact HP

Information Security Management Technical Summary

Content starts here

HP Offers Technical Expertise To Protect Your Enterprise

HP uses the best technologies, processes and tools to protect the data entrusted to us by our clients and by their employees, customers and other constituents. This approach encompasses every aspect of our work – people, systems, networks, applications and business processes – helping our clients harness the potential of security components as business enablement components, not as road blocks to productivity and efficiency.

Our proprietary security control standards and implementation procedures maximize your IT investment, helping you achieve more.

Technical Elements of HP Information Security Management

Encryption Rates

  • Encryption rate approximately 10 GB/hour
    • Only one to three percent system performance degradation after disk encryption (invisible to end user)
    • Configurable algorithm – AES 256 is LDE standard
  • Throttled background encryption service
  • Fault tolerant
  • Highly scalable, easy to deploy and manage and is enforceable
    • User may not uninstall without administrator approval
    • Low total cost of ownership (configure and forget)

Mobile Security

The scope of the Mobile Security offering includes the design, integration, configuration and management of the Mobile Security solution sold by HP.

The Mobile Security capability under the Mobile Workplace Services offering can be purchased as a stand-alone feature or packaged with our Mobile Messaging offering.

The Mobile Security offering includes the following features:

  • The ability to detect mobile device usage and enforce security on the device, should it be absent
  • The ability to enforce over the air security policies
  • Support for multiple encryption algorithms (AES 128 and 256 and Triple DES) and have FIPS 140-2 and CESG government accreditation
  • Mobile user authentication and integration into the existing enterprise directory service
  • Support for Windows Mobile 2003 and Windows Mobile 5.0 devices only in alignment with HP's mobile strategy

The Mobile Security solution is a client dedicated solution. It is against HP's security standards to host security information from multiple clients on a single instance. The Mobile Security solution will not leverage the service delivery network (SDN) environment unless the solution is deployed in a service management centre where SDN has been deployed. In this case the solution will sit in a dedicated client compartment within the SDN.

The Mobile Security solution requires many external capabilities and components to produce a well designed and managed mobile security infrastructure.

HP Security Certifications

  • FIPS 140-1 & FIPS 140-2 (Federal Information Processing Standards)
    • Certification for entire PC product received 22 Mar 2002
    • NIST Listing – Certification #208
    • NIST Listing – AES Certification #17
    • NIST Listing – Certification #237
  • CSE Prequalifies Pointsec for PC 4.1 Under ITS
  • Common Criteria EAL4 (Certification Awarded February 2004)
    • Executively sponsored by the DEA
  • BITS Tested & Compliance
  • UK CSIA Claims Tested (CCT) Mark
  • Export – Mass Market Status Under CCATS – ECCN All Products
  • DCSSI Certification (French Authority) – Approved To Furnish & Import
  • Cryptographic Products
    • n 43589. PS PC v4.2 and higher
  • Australian Government Department of Defense
  • Pointsec Device Protector Certifications
    • Common Criteria EAL2 (certification awarded April 2005)
    • Novell “Yes” Certification
    • Certified at the FIPS 197 level
    • Submission of crypto libraries for FIPS 140-2
    • Microsoft NAP partnership
    • CSIA Claims Tested (CCT) Mark for UK Government

For more information about what HP Enterprise Services can do for you, submit a business inquiry.