1 / 27

Best Practices Revealed: Blueprint for Modern Enterprise Security Program

Discover the best practices for building a modern enterprise security program. Learn how to overcome challenges, implement an intelligence-driven approach, and proactively manage cyber risk.

jmclendon
Download Presentation

Best Practices Revealed: Blueprint for Modern Enterprise Security Program

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Best Practices Revealed: A Blueprint for a Modern Enterprise Security Program Dr. Torsten George Vice President of Products and Global Marketing, RiskSense, Inc.

  2. Total IT Security Spend $116 billion +26.1% $92 billion +19.6% $76.9 billion +8.2% $71.1 billion +7.9% $65.9 billion 2019 2013 2014 2015 2016 Source: Gartner, Gartner Says Worldwide Information Security Spending Will Grow Almost…, August 2014; Gartner Summit, June 2016 2

  3. Cyber Reality Check Source: http://www.informationisbeautiful.net/visualizations/worlds-biggest-data-breaches-hacks/; as of April 25, 2017 3

  4. A Growing Attack Surface Partner, Contractor Access- Environmental Controls, POS, CRM Bluetooth Web Properties Email and Web Traffic Mobile Phone Smart Watch Remote Offices Tablet Public Internet Mobile Workers Google TV Apple TV Netflix Appliances Mobile Connectivity Lights Security Systems VPN Cloud Deployments- Amazon Web Services, Google, MS Azure Vendor Supply Chain Munich Branch Office Gaming Systems Computer 4 Paris Branch Office Entertainment Third-Party Datacenter Applications Headquarters Wi-Fi Engine computer GPS

  5. Today’s Cyber Security Challenges + + + + Manual Data Aggregation and Analysis ReactiveMitigation A Growing Attack Surface Lack of Context Silo-Based Security Tools 5

  6. Today’s Cyber Security Approach 6

  7. Cyber Security Limitations |One Dimensional Network layer is primary defense perimeter 7

  8. Fact Check: Cyber Risk is Everywhere Source: Verizon 2016 Data Breach Report 8

  9. Cyber Security Limitations |NVD-Focus Source: RiskSense Research Center 9

  10. Fact Check: Time-to-Remediation Matters Source: Verizon 2016 Data Breach Report 10

  11. Today’s Cyber Security Limitations |CVE-Focus 10 9 Scanner Reported CVVS 8 Threat-Contextualized Severity Score 7 6 5 Severity 4 3 POODLE Vulnerability 2 1 0 250,000 300,000 0 50,000 100,000 150,000 200,000 Vulnerability Count 11

  12. Emerging Market Requirements • The ongoing skills and expertise shortage, and increasing escalation in the threat activity, will hasten the move to full and semi-automationof operational activities. • To enable a truly adaptive and risk-basedresponse to advanced threats, the core of a next-generation security protection process will be continuous, pervasive monitoring, and visibility that are constantly analyzed for indications of compromise. • Enterprise monitoring should be pervasive and encompass as many layers of the IT stack as possible, including network activity, endpoints, system interactions, application transactions and user activity monitoring. Source: Gartner, Designing an Adaptive Security Architecture for Protection from Advanced Attacks, January 2016 Gartner, Innovation Tech Insight for Security Operations, Analytics and Reporting, November 2015 12

  13. Action vs. Reaction LEADING LAGGING Cyber Risk Management Vulnerability • Configuration • Network • Policy • Proactive Reactive Attack 13

  14. Cyber Risk vs. Threat and Vulnerability Management 14

  15. An Intelligence-Driven Approach 15

  16. Identify and Prioritize Risk-based prioritization Contextualized with external threat data (e.g., malware) 16

  17. Analyze | Asset and Organizational Level Security Score Methodology (RS3) • CVE • CWE • OWASP • Database Vulnerabilities • Exploit • Malware • CVVS • Default Passwords • Proof of Concept • IP Reputation • IP-Based Accessibility • Firewall Rules • User-Specific Business Criticality • Business Criticality from Asset Management System 17

  18. Visualize 18

  19. Cover Network, Applications, and Databases Cyber risk score for a system, consisting of applications, databases, and network components.

  20. Analyze | Application Layer Visualization of application attack path analysis 20

  21. Orchestrate Assign tickets and trigger pre-defined workflows 21

  22. Pro-Active Cyber Risk Management | Benefits ShortensTime-to-Remediation StrengthensSecurityPrograms IncreasesOperationalEfficiency MinimizesCyberRisks ImprovesCyberHygiene 22

  23. Success Stories One of the nation’s largest universities was able to Testimonials: “RiskSense lets us cut the data and take a different view and helps us prioritize what we should be working on. That’s where we really found a lot of value.” –CISO, Fortune 200 Telecom Company 23

  24. Questions and Answers Session 24

  25. RiskSense |Who We Are • Pioneer in a $2.5 billion market • Privately held with investments from Paladin Capital, Sun Mountain Capital, EPIC Venture, Jump Capital, and CenturyLink • Growing 50+% year-over-year since 2013 • Software-as-a-Service and Managed Services business model • 150+ customers • Close to 100 employees • Offices in Albuquerque, NM and in Sunnyvale, CA • Research, innovation-driven 25

  26. The Solution |The RiskSense Platform 26

  27. DON’T REACT TO ATTACKS. BE PRO-ACTIVE! Contact RiskSense at+1 505.217.9422 • info@risksense.com 27

More Related