Reuters beefs up web security

Reuters is investing millions of pounds to strengthen the security infrastructure which supports the worldwide expansion of its internet-based business.

The news agency and data provider has signed a deal with Symantec for a number of products and services, including software to cover security management, firewalls, intrusion detection and vulnerability assessment.

Tim Voss, global IT security risk director at Reuters, said that tangible returns on security investment were minimal, but were outweighed by the potential damage of any breach.

"We are maintaining the level of security we've always had and extending it into the new products and services Reuters is offering over the internet," he said.

Reuters has also standardised its web network protocols. The move means it can cut costs by using more off-the-shelf security products and less bespoke software, according to Voss.

"The ability to use standard platforms means we can also use more products that work on them," he explained. "We still have some bespoke stuff that we use for the higher risk areas, but for the majority of risks that are faced on the internet you can use commercial stuff."

The deal with Symantec will be up for renewal in four years. Voss said that the bulk of the work will be completed - and new online products and services offered - over the next six to nine months.

The extra security will protect Reuters' online foreign exchange share dealing services, as well as the information newswire offering.

Voss said that a key part of the deal is the Enterprise Security Manager software that will simplify the IT department's task of monitoring a complex security environment.

"It will inform us when PCs have been reconfigured without authority, and gives us greater control over the security of our servers and systems," he said.