“ Information is the world's new currency. It must be guarded to protect against unauthorized disclosure, loss, or theft”



- IDC Study, 2008

Before you can protect it, first you must find it” – the Irish company, 2008

What is Critical Data Auditor? Data protection is now a critical corporate governance issue in the boardroom. Recent high profile data leakage events have damaged reputations while rising legislative and standards requirements create imperatives for action in this area. Data Leakage Prevention (DLP) programs can help to secure critical and sensitive data, but firstly you must locate & identify the information you need to protect. Critical Data Auditor™ by The Irish company is scanning software to rapidly locate critical information and discover risk on company networks. Why Use it?

The Irish company's Critical Data Auditor is used to:

• satisfy legislation-based requirements;

• ensure compliance with policies & standards;

• conduct internal investigations;

• meet critical business or operational needs;

• perform audit & risk assessments.

Typical Applications The Irish company's Critical Data Auditor is used to:

• find & protect Intellectual Property;

• satisfy Freedom of Information requests, Competition Authority investigations, e-discovery orders and HR processes;

• conduct Due Diligence prior to acquisitions;

• check for confidentiality during ‘quiet periods';

• check compliance with Data Retention, Data Protection Acts and other legislation;

• identify requirements for data archiving and data leakage prevention programs

• discover relevant data in criminal or civil investigations;

• Investigate for inappropriate or illegal use of I.T. resources;

• Identify critical data for back-up or encryption. Critical Data Auditor Detection of unsecured, sensitive data Who should use it?

• Companies in regulated industries;

• Government Departments & public sector bodies;

• companies subject to PCI Security Standards Council regulation;

• companies compliant or certified for standards such as ISO 27000;

• Law firms, Auditors and professional services bodies;

• Regulatory authorities.

Discovering Risk, Protecting Reputations “ Information is the world's new currency. It must be guarded to protect against unauthorized disclosure, loss, or theft” - IDC Study, 2008 Before you can protect it, first you must find it” - The Irish company, 2008 The Irish company Critical Data Auditor © The Irish company 2008, V1 May 08 WWW.THE IRISH COMPANY.COM “The average cost for compromised data grew to £101 per record, up 43% since 2005” The Ponemon Institute Critical Data Auditor can aid compliance with standards, such as:

• Sarbanes Oxley Act;

• Basel II;

• EU data retention directive;

• UK Data Protection Act;

• EU Markets in Financial Instruments Directive;

• Payment Card Industry Standard (PCI);

• EU Audit and Privacy Directives;

• ISO 27001 information security standard;

• SB-1386: Security Breach Information Act;

• Gramm-Leach-Bliley Financial Services Modernization Act.

System Requirements No software is required on the systems to be scanned. The Irish company Critical Data Auditor is designed to run from PCs. The minimum hardware and operating system requirements detailed below refer to the auditing computer and are NOT a requirement for target computers whose files systems are being audited.

The Irish company Auditor Hardware Requirements

• Desktop PC;

• 2Gb RAM;

• 10 GB free disk space. Operating System Requirements

• MS Windows® XP Professional;

• MS Windows 2003 Server. The Irish company Critical Data Auditor scans

• Microsoft Windows® operating systems;

• Unix / Linux operating systems;

• Novell Netware;

• Microsoft Exchange, Lotus Notes, Novell GroupWise;

• Citrix Servers.