If your perception of site security involves security guards lounging in a chair behind a desk, gazing blankly at CCTV monitors while juggling the daily tabloid, cigarette breaks and the visitor book, then allow SunGard Availability Services to offer your staff and customers a different experience when they visit or work at a SunGard facility.

Benefits at a glance Protects your customers’ interests

Ensures your business is better placed to maintain and win business

Compliance with ISO and British Standards, as well as relevant legislation

Significant defence against litigation for any data loss

Ability to specify enhanced security controls for assets located at SunGard sites

Streamlined administration with security mirrored across the SunGard (UK) estate.

Maximise your resources – minimise disruption

SunGard’s security has always been highly effective but we are never complacent. We have been enhancing our security capability still further, going well beyond traditionally accepted norms. Our security model has been redesigned to meet the needs of leading financial institutions, central government and big business, which means our smaller customers benefit from the highest standards of security too.

The same high standards wherever you are

Aligning SunGard’s security to ISO Standards, while at the same time standardising our security estate, will bring real benefits for customers.

Our systems are standardised across the UK and integrated via a single technical security system, enabling security at each recovery centre to be easily managed, changed and administered. As a customer you can easily tailor your requirements with SunGard and be assured that they will always be met, irrespective of your recovery site.

Every SunGard recovery centre will be linked into an enterprise server system, which as you would expect from SunGard, will operate with at least three levels of resilience. Being centrally controlled and modular in design, this will enable us to effectively extend your security capability to cover your assets within our workplace recovery site and data centres. Using secure IP technology it will allow increased functionality of remote security monitoring.

AVAILABILITY SERVICES WORKPLACE & DATA CENTRE SECURITY

Security measuresthat add value to your business operation

United Kingdom & European Head Office, 12-13 Bracknell Beeches, Old Bracknell Lane West, Bracknell, Berkshire RG12 7BW 0800 143 413 infoavail@sungard.com www.sungard.co.uk

© 2010 SunGard Availability ServicesSunGard and the SunGard logo are trademarks or registered trademarks of SunGard Data Systems Inc. or its subsidiaries in the US and other countries. All other trade names are trademarks or registered trademarks of their respective holders.

Security that’s tailored to suit your needs

While offering a standard baseline security service level, SunGard customers can request optional upgrades for bespoke security solutions such as biometric retinal scanning, PIN-based access control, enhanced perimeter detection and CCTV within Computer Equipment Rooms (CERs).

Physical security

Our security guards provide a front line alarm and security response for the building’s utilities and its integrity, helping to ensure its availability. The security guards are both fire warden and first aid trained and therefore bring significant added value to the management of the site.

Every member of security staff has been specially selected and trained on the basis of their interpersonal skills to work at prestigious, high value sites. They are skilled in counter surveillance and conflict management techniques and are supported by the intelligence feeds from central government agencies, alerting the guards and SunGard management to potential risks and incidents impacting upon the security of SunGard facilities.

Technical security

SunGard utilises a single access control and CCTV system, which externally provides:

Complete perimeter CCTV coverage

Access control to prevent opportunistic intrusion

Smart, automated cameras that detect intrusions and alert staff.

Internally, the system:

Controls and protects your Workplace suites and Computer Equipment Rooms

Uses CCTV at key points but not in shared suites containing sensitive equipment

CCTV cameras installed to meet the exacting level of detail required by casinos. These are capable of zooming in to give keyboard and monitor views to ensure that seemingly insignificant events can be monitored and investigated

Access control audit logs (kept for 180 days)

CCTV recording to Home Office PSDB1 evidentiary standard

Remote access monitoring of CCTVs to provide cover when security guards are away from their desks.

Logical security Logical security controls deployed

in accordance with ISO 27001:2005, ISO/IEC 27002:2005 and BS 7799-3:2006 in order to meet your data recovery and managed services requirements.

Secure customer networks and environments

All customer equipment is retained in locked and access controlled environments. It is connected to and monitored by the integrated security system where feasible. All customer and internal networks are physically separated in a secure environment. Where compliance is required to Information Governance Statement of Compliance (IGSoC) and Payment Card Industry Data Security Standards (PCI DSS), SunGard can ensure this is

achieved for an additional cost. SunGard has considerable experience in this area and is well placed to offer consultancy advice to help you achieve compliance.

Data protection compliance

All SunGard business functions comply with the Data Protection Act 1998 and European Union directive 95/46/EC. In order to ensure that we meet all necessary data protection regulations, SunGard also maintains registration with the US Department of Commerce Safe Harbor scheme.

Proven resilience

In line with good practice, we test our systems and processes by submitting them to stress during large-scale invocations. We also invite a number of customers to participate in voluntary exercises to put our processes and systems under pressure at randomly selected sites.

Our LTC, TC2 and TC4 data centres are externally audited annually to SAS-70 Type II Controls, whilst our TC3 facility meets the scope of the SAS-70 Type I Controls. The audit reports are available to customers upon signature of a Non-Disclosure Agreement to evidence the tight security controls deployed at SunGard data centres.

We regularly test our network, employing a firm of independent penetration testing experts to conduct logical security testing to ensure Information Availability.

SunGard is currently the only service provider to conduct such wide-ranging and in-depth tests on a regular basis.

1 Home Office PSDB (Police Scientific Development Branch).

WORKPLACE & DATA CENTRE SECURITYSecurity measures that add value to your business operation

V1:09/10