Spector 360 Recon

The increase in Insider Threats like IP theft, fraud and hacktivism requires increased focus on the activity of the insiders themselves. Traditional security solutions are focused on perimeter defense and cannot address situations where authorised access is used in an unauthorised way. Organisations looking for a better way to combat insider threats also want to maintain employee privacy whenever possible.

A new approach is requiredone that enables companies to balance privacy and security - Spector 360 Recon.

Benefits

• Black boxed employee computer activity records: A comprehensive record of all employee computer activity is created and stored for 30 days, encrypted and obfuscated, on the local machine where the activity occurs.
• Advanced detection and warning: Spector 360 Recon scans the activity as it is recorded for indicators of insider threat and other unacceptable workplace behaviors, and on detection, sends alerts to designated recipients. Only alert level data is communicated - the detailed employee activity data remains locked on the local machine.
• Lock or unlock: If the alerts received are considered serious enough to warrant further investigation, the company can convert from Recon to Detail. Converting pulls the 30 days of employee activity history off of the local machine into a secure SQL database for review - allowing the company to see everything that occurred before, during and after the alert was triggered.
• In context education: Spector 360 Recon provides the option of presenting a screen pop on the local machine where the activity has occurred, so that the employee is made aware of potentially problematic activity and can self-correct going forward.
• Multiple approval options: Striking a balance requires options, and Spector 360 Recon has them. Companies can place the ability to convert a Recon licence into a Detail licence into the hands of as many, or as few, people as they wish.
• A great additional benefit: Because Spector 360 Recon records and stores data locally, no dedicated hardware or storage is required, and only minimal amounts of information (alert level data) are transmitted over the network - minimising the impacts on your IT infrastructure and team.