How does AFLAC define it?
Ray: A lot of people relate endpoint security to one particular technology component, one solution to solve all your issues. The approach we’ve taken is a multilayered one. Endpoint security is not defined as antivirus, or a desktop firewall or patching. It’s a combination of all of those, plus the policies and procedures in place in an organization. A lot of people lose sight of that. I have a government background, so I believe that having policies and a framework is key. We define a role-based access strategy first, then look at what technology is used to protect a system. At that point, we start looking at what are the different risks, what kind of information we’re protecting, what applications are running and who gets access to them. So it’s about more than integrity checks on workstations and devices? Ray: That’s a very proactive step. For a lot of incidents, companies have to worry about them after the fact, and it sucks up a lot of resources to clean up a virus attack, for exa
