Publicly Traded Firm Deploys SecureSphere to Monitor Microsoft Dynamics (formerly Great Plains Software) and SQL Server Financial Application
FOSTER CITY, Calif., Nov. 30, 2006 – Imperva® the global leader in data security and compliance solutions for the data center, today announced that Caribou Coffee (NASDAQ: CBOU), the second-largest U.S. specialty coffee company, has deployed the SecureSphere® Database Monitoring Gateway (DMG) to meet compliance requirements imposed by the Sarbanes-Oxley (Sarbox) legislation. Caribou Coffee chose the SecureSphere DMG for its unique ability to monitor and report on actions taken by each user that accesses the company’s Microsoft SQL Server database directly or via the Microsoft Dynamics (formerly Great Plains Software) financial application.
Caribou Coffee became a publicly traded company in October 2005, and as such is required to comply with the Sarbox legislation. The company lacked the ability to track and document who was accessing the SQL Server database and what changes they were making. Since direct access to the database is not audited by the Microsoft Dynamics financial application and pooled log-in accounts prevent tracing activity to responsible users, Caribou Coffee could not document Sarbox compliance.
The company selected SecureSphere for its ability to monitor all database activity and link every transaction in the SQL Server database with the individual user who carried it out via the Microsoft Dynamics financial application. Moreover, SecureSphere accomplishes this with zero changes to both the database and the financial application. Unlike cryptic log entries associated with built-in database auditing tools, SecureSphere generates human readable reports that simplify the process of meeting auditor requirements.
“Without the ability to audit all users who access and modify our financial database, we could not prove that we were in compliance with Sarbanes-Oxley,” said Scott Ficek, senior director of information systems for Caribou Coffee. “SecureSphere allows us to track all database users, including database administrators and developers, and trace their actions without impacting the performance or stability of our Microsoft SQL Server database. Even though it provides more functionality than the competing products we tested, it’s easier to install and operate – we had it working before lunch.”
“For public companies like Caribou Coffee, demonstrating compliance with Sarbanes-Oxley can be extremely costly and resource intensive,” said Shlomo Kramer, founder and CEO of Imperva. “SecureSphere’s ability to track and document all database activity regardless of how a user accesses the data is a huge time and money saver, while at the same time preventing rogue users from evading detection.”
About SecureSphere
The award-winning Imperva SecureSphere® products deliver practical solutions to protect sensitive data in the databases, Web applications, and Web services that support business critical systems. SecureSphere assesses, monitors, and audits all access to an organization’s databases, and tracks and controls user activity through Web applications and Web services. With SecureSphere, organizations have an automated, proven means to achieve and document regulatory compliance. SecureSphere uniquely saves time and IT resources by operating transparently with no changes to existing infrastructure and dynamically, requiring no manual tuning.
About Imperva
Imperva is the leader in application data security and compliance. Leading enterprise and government organizations worldwide rely on Imperva to prevent data theft and abuse, and ensure data integrity. The company’s SecureSphere products provide data governance and protection solutions that monitor, audit and secure business applications and databases. For more information, visit www.imperva.com
# # #
Imperva and SecureSphere are trademarks of Imperva, Inc. All other brand or product names are trademarks or registered trademarks of their respective holders.
Editorial Contact
Marc Gendron
(781) 237-0341
marc@mqpr.net
