Heartland Payment Systems Selects ArcSight and Vigilant For Threat And Risk Management Capabilities

PRESS RELEASE

CUPERTINO, Calif. & NEW YORK, Sep 07, 2010 (BUSINESS WIRE) -- ArcSight, Inc.(ARST 37.34, -0.50, -1.32%), a leading global provider of cybersecurity and compliance solutions, and Vigilant, LLC, a provider of business-aware managed security monitoring services, announced today their collaboration to further significant IT security monitoring initiatives at Heartland Payment Systems(R).

Heartland is the fifth largest payments processor in the United States and a vocal advocate for better security in the payments industry. The company is committed to changing how data is protected and has enhanced its systems to better flag anomalies in real time. By leveraging solutions like those from ArcSight and Vigilant, Heartland is establishing best practices that extend beyond existing industry requirements to protect payment card data.

"Companies must focus on protecting sensitive data through all points in their networks and improving real-time threat detection, not just worrying about the next audit," said Kris Herrin, Chief Technology Officer at Heartland. "Data theft doesn't happen in a single act. There is typically a sequence of conditions and events that must be staged before someone can successfully execute a heist. The ArcSight solution will give us a more comprehensive threat and risk management platform that optimally enables enterprise-wide visibility to identify this type of illegal activity in progress and take prompt, preemptive action. Currently engaged in the first phase of the project, we are excited about the work Vigilant is doing to further improve our security analysts' ability to detect in real time unauthorized system access and system changes."

To drive these ongoing efforts, Heartland selected the ArcSight Enterprise Threat and Risk Management (ETRM) solution for enterprise visibility into potential threats and risks across its IT infrastructure and engaged Vigilant as its services partner to implement real-time threat detection capabilities. During the first phase of the ETRM deployment, Vigilant has leveraged the extensive out-of-the-box functionality from ArcSight to build customized use cases and role-based reporting focused on enterprise-wide user activity monitoring and malware detection.

"Preventing cybercrime is more complex than simply monitoring violations of security policy. It requires contextual intelligence with the ability to correlate many diverse points of data over time -- and in real time, to identify incidents that need immediate attention," said Hugh Njemanze, Chief Technology Officer and Executive Vice President of Research and Development for ArcSight. "As a leader in ETRM solutions, ArcSight provides customers with the analytics and technology to support this type of advanced threat detection in order to protect high value digital assets from cyber-theft, cyber-fraud, cyber-warfare and cyber-espionage."

Through its Fusion for SIEM(TM) managed service, Vigilant will manage the ArcSight solution at Heartland and continuously refine the implementation to continually evolve and advance the company's IT risk management program. "Heartland recognizes that security monitoring needs to be agile because the threat landscape is continually evolving," said Joseph Magee, CTO of Vigilant. "Our Fusion for SIEM service provides not only the technical expertise for this implementation, but the process guidance to allow Heartland to fully leverage the protection offered by the ArcSight platform to mitigate risk and protect valuable assets. We are honored to help Heartland maximize its security investments and advance best practices in the payment card industry."

About ArcSight

ArcSight (ARST 37.34, -0.50, -1.32%) is a leading global provider of cybersecurity and compliance solutions that protect organizations from enterprise threats and risks. Based on the market-leading SIEM offering, the ArcSight Enterprise Threat and Risk Management (ETRM) platform enables businesses and government agencies to proactively safeguard digital assets, comply with corporate and regulatory policy and control the internal and external risks associated with cybertheft, cyberfraud, cyberwarfare and cyberespionage. For more information, visit www.arcsight.com.

About Vigilant

Vigilant LLC provides on-site and managed services that help IT security teams better defend and enable today's dynamic business by refining and extending the security information and event management infrastructure. The company's pragmatic approach solves today's urgent security problems, while enabling rapid progress toward longer-term security program objectives. Vigilant empowers customers to more efficiently respond to shifting threats, achieve regulatory compliance, prioritize protection of services that drive revenue and competitive advantage, and measure progress of the overall IT risk management program. Founded in 2003, Vigilant is headquartered in New York and serves a wide range of global and regional organizations whose mission requires them to secure highly sensitive and regulated services.