Press Release: May 15, 2007
Topics:

HP Unveils Security Solution to Help Energy Companies Meet Regulatory Requirements, Reduce Risk

PALO ALTO, Calif. May 15, 2007

Related Links
»Security
»Software

HP today introduced anintegrated security appliance for energy customers that provides anadditional line of defense against cyber-security threats and helpsautomate compliance tasks.

The HP Trusted ComplianceSolution for Energy (TCS-e) helps power and energy companiesmitigate security risk by providing robust protection againstthreats from computer hackers. The automation technology in HPTCS-e also helps energy companies reduce the business risks andcosts associated with noncompliance, such as regulatory audits,sanctions and hefty fines.

The solution combines HPcompliance automation software and storage technology with eventdata management security analysis software from SenSage, Inc. Italso includes the HP Atalla (FIPS) 140-2 Level 4-certifiedhardware-based security subsystem, which provides cryptographicoperations – privacy, integrity, authentication and non-repudiation– and hosts the security-sensitive portions of the TCS-eapplications.

HP TCS-e was designedspecifically to meet the cyber-security, compliance and auditrequirements of the North American Electric Reliability CorporationCritical Information Protection (NERC-CIP) 002-009 reliabilitystandards mandate.(1) Approved nearly a year ago, themandate calls for energy operators to implement and demonstrateappropriate controls, which require compliance documentation,security event monitoring, incident alerting, forensic analysis andevent data retention.

To help energy customersmeet these compliance requirements, HP TCS-e automates the NERC-CIPcompliance management processes and transforms an energy operator’sintent to comply with new regulatory standards into actual plans,controls, records and processes.

"According to our research,HP platforms run the systems that control 65 percent of the world’selectric power transmission,” said Chuck Newton, president ofMaryland-based Newton-Evans Research. “With these new securityappliance products, HP is addressing many of the required NERC-CIPcyber-security and compliance tasks by transforming a company’scompliance processes from manual to automated and sustained. TheTCS-e security solution undoubtedly will raise the bar forcyber-security, reliability and compliance solutions in ourindustry.”

The TCS-e solution’sability to monitor user, system and network activity enablesorganizations to effectively respond to risks, demonstratecompliance and conduct thorough investigations in the event of acyber-security threat. The solution provides for a purpose-builtdata store that optimally compresses collected data and reducesaccess time for data retrieval. This enables users to analyzeterabytes of information in much less time compared to systems thatstore data using relational databases.

“As the provider of the ITbackbone for a large part of the energy industry, HP works to keepoperators’ services up and running while helping them face thechanging regulatory environment,” said Martin Fink, senior vicepresident and general manager, Business Critical Systems, HP. “TheTCS-e solution demonstrates HP’s ability to design integrated HPIntegrity-based solutions that help address customers’ mostcritical business issues.”

Jim Pflaging, president andchief executive officer, SenSage, said, “Collecting, analyzing andstoring log event data can be daunting due to the sheer volume ofdata involved, and the process becomes more complicated andcritical for organizations that must adhere to specific industryregulatory requirements. The HP solution, integrated with SenSage’srobust data management software, helps utility customers protecttheir vital information and improve their auditresponsiveness.”

HP provides a full range ofsolutions that deliver comprehensive security to help customersmeet industry-specific regulatory standards and compliancemeasures. Security is also a key enabler of HP’s AdaptiveInfrastructure initiative, which builds next-generation datacenters to enable 24x7 lights-out computing.

The HP Trusted ComplianceSolution for Energy is available now. More information is availableat www.hp.com/go/TCS-energy.

AboutHP

HP focuses on simplifyingtechnology experiences for all of its customers – from individualconsumers to the largest businesses. With a portfolio that spansprinting, personal computing, software, services and ITinfrastructure, HP is among the world’s largest IT companies, withrevenue totaling $94.1 billion for the four fiscal quarters endedJan. 31, 2007. More information about HP (NYSE: HPQ) is availableat http://www.hp.com.


(1) The NERCCIP-002-1 thru NERC CIP-009-1 standards and NERC CIP FAQ arecopyright protected by the North American Electric ReliabilityCorporation. HP’s use of these terms does not represent anendorsement or recommendation of this product by NERC or any of itsofficers. The NERC CIP-002-1 thru NERC CIP-009-1 specifications andNERC CIP FAQ can also be found on the NERC website. A complete setof NERC’s current standards is available at www.nerc.com/~filez/standards/Reliability_Standards.html.


This news releasecontains forward-looking statements that involve risks,uncertainties and assumptions. If such risks or uncertaintiesmaterialize or such assumptions prove incorrect, the results of HPand its consolidated subsidiaries could differ materially fromthose expressed or implied by such forward-looking statements andassumptions. All statements other than statements of historicalfact are statements that could be deemed forward-lookingstatements, including but not limited to statements of the plans,strategies and objectives of management for future operations; anystatements concerning expected development, performance or marketshare relating to products and services; anticipated operationaland financial results; any statements of expectation or belief; andany statements of assumptions underlying any of the foregoing.Risks, uncertainties and assumptions include the achievement ofexpected results and other risks that are described from time totime in HP’s Securities and Exchange Commission reports, includingbut not limited to the risks described in HP’s Quarterly Report onForm 10-Q for the fiscal quarter ended Jan. 31, 2007. HP assumes noobligation and does not intend to update these forward-lookingstatements.

© 2007Hewlett-Packard Development Company, L.P. The information containedherein is subject to change without notice. The only warranties forHP products and services are set forth in the express warrantystatements accompanying such products and services. Nothing hereinshould be construed as constituting an additional warranty. HPshall not be liable for technical or editorial errors or omissionscontained herein.

About HP

HP Inc. creates technology that makes life better for everyone, everywhere. Through our portfolio of printers, PCs, mobile devices, solutions, and services, we engineer experiences that amaze. More information about HP Inc. is available at http://www.hp.com.