News

Cost-Cutting Through Green IT Security: Real or Myth?

Some say the concept of green IT security is a stretch, but others see a real opportunity to cut costs as well as carbon emissions. (Part two in a series: How to Manage Security in a Recession)

By Bill Brenner, Senior Editor

June 25, 2008

About this series:
Smaller staff. Deflated security budgets. In-store thievery. When economic times are tough, these are the things security pros must contend with. In this ongoing series, CSOonline looks at ways to ensure the best security possible during a recession.

John Petrie likes the idea of low-cost security as much as the next guy. But while some see green technology as a way to achieve that goal while also helping the environment, Petrie has his doubts.

"You can gain some cost savings with an over-arching green strategy and then take advantage of investments that can achieve green security. But by itself, green security would fail," says Petrie, CISO of San Antonio-based Harland Clarke, a financial services firm with more than 5,000 employees and multiple locations. The problem, he says, is that companies with centralized security programs already make the efficient use of existing people, processes and technology.

Richard Stiennon, CEO of managed security services firm Seccom Global, says one can argue that unified threat management (UTM) appliances are green because they reduce the need for multiple power-consuming boxes, but that doesn't mean the technology is the best security fit for everyone. "While power and heat saving may be something enterprises start to push vendors on, the primary requirement for security devices - blocking threats - will always take precedence," he says.

Nevertheless, a growing number of security pros are looking into the cost-saving benefits of green security in this time of economic uncertainty. Helping the environment is just a bonus, and those who have explored the idea of green security have found they can maintain their defenses just as well with a smaller carbon footprint.

"Going green is no longer optional from a business vantage point," says Joseph Guarino, CEO and senior consultant for Boston-based Evolutionary IT, which specializes in security tools and management. "If you embrace that idea in your future plans, you will reduce your costs while saving the planet."

Cut air travel, cut emissions

Security professionals say green security is about more than shrinking the number of boxes that suck up power and expand a company's carbon footprint.

For Richard Bejtlich, director of incident response at General Electric, the biggest green security challenge is in how the company moves people around. Incident response investigations often require people to fly to offices spread across the country. But travel can be expensive and the environment certainly doesn't benefit from the jet fuel that's burned in the process.

Bejtlich's solution is to find more remote ways for employees to conduct incident response.

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Data Center Directions Virtual Conference

Data Center VCAttend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.

» Learn more and register here

WHITE PAPER
Maximizing Site Visitor Trust Using Extended Validation SSL

VeriSignNow with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in the free VeriSign white paper.

» Read the Paper

Featured Sponsors
Sponsored Links

Manage your IT more effectively

Secure your virtual and physical environments with the same software

Simplify your data center with Juniper Networks. View the webcast

E-LOAN Maintains Reputation as a Privacy Leader with Symantec

Data Loss Prevention: Keeping Sensitive Data Out of the Wrong Hands

Prudential Financial Protects its Brand with Symantec

Envision Identity-Based Access Control for the Datacenter

Digital Identity Protection and Data Security Get Personal

Welcome to the age of Service-Oriented Security (SOS)

When Customer Relationship is Everything, Businesses Bank on SSL Solutions

Everything Today's CISO Needs to Know About Using SSO to Succeed in the Web 2.0 Era

The Case for Business Software Assurance ~ Securing Your Applications

Maximizing Site Visitor Trust Using Extended Validation SSL

Solving Online Credit Fraud Using Device Reputation

Understanding Data Location is Imperative for Data Loss Prevention

5 Steps to Secure Outsourced Application Development

CA's IT Security centralizes your identity management to turn security into a proactive, business-building tool

Efficient - Flexible - Compliant

Any company can promise identity protection. Only Debix can prove it

7 Requirements of Data Loss Prevention

Information Security: Data Drains and How to Prevent Loss

How Are Open Source Development Communities Embracing Security Best Practices?

IDC Defines an Identity and Access Management Submarket

Using Likewise to Comply with PCI Data Security Standard

IDC Defines an Identity and Access Management Submarket for Managing Privileged User Accounts and Meeting GRC Requirements

Enabling Compliance with Converged Mainframe Security and Storage

Managing SSL Security in Multi-Server Environments

The Latest Advancements in SSL Technology

How to Offer the Strongest SSL Encryption

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

Get in Compliance With Government Data Regulations

Taking the Botnet Threat Seriously