From reactive to automated reducing costs through mature security processes info security europe 2011
•Descargar como PPTX, PDF•
0 recomendaciones•755 vistas
This document discusses how organizations can move from reactive security processes to more automated security processes to reduce costs. It highlights how IT process automation can help bridge silos between business and IT by centralizing tools on a single platform. This allows organizations to address key issues like insider threats, compliance requirements, and business exception management through automated workflows. The document provides examples of how automated workflows for incident management and compliance exception management can help improve security, reduce manual work, and ensure processes are consistently followed.
Recomendados
Recomendados
Más contenido relacionado
La actualidad más candente
La actualidad más candente (20)
Similar a From reactive to automated reducing costs through mature security processes info security europe 2011
Similar a From reactive to automated reducing costs through mature security processes info security europe 2011 (20)
Más de NetIQ
Más de NetIQ (20)
Último
Último (20)
From reactive to automated reducing costs through mature security processes info security europe 2011
- 1. From Reactive To Automated:Reducing Costs Through Mature Security Processes Jörn Dierks ChiefSecurityStrategist EMEA joern.dierks@netiq.com
- 2. Solving Cross-Discipline Problems 2 Process People Technology Infrastructure & Applications Provisioning HR Compliance Helpdesk NetIQ NOC Incident Security Change Business Owners Other Mgmt Vendors Business Processes
- 3. Process People Technology Infrastructure & Applications Provisioning HR Cross-Product Integration Compliance Helpdesk NetIQ NOC Incident Security Change Business Owners Other Mgmt Vendors Business Processes Solving Cross-Discipline Problems 3
- 4. The Role of IT Process Automation –Bridging Silos Between Business and IT Tools Tools Business Configuration & Identity Auditing Service / Help Desk Security Info & Event Management Event Correlation & Analysis IT GRCM SLM IT Process Automation Vulnerability Assessment Systems & App Monitoring Perimeter & Network Security Network Monitoring Content Monitoring / DLP Response Time Monitoring Operations Security Policy Awareness Configuration & Patch Management CMDB AV / Malware Protection Identity Management Responsibilities Shared between Security & Operations Continuity Management Capacity & Availability Management Release Management Incident & Problem Management Configuration & Change Management
- 6. Track privileged user activity
- 7. Protect the integrity of key systems and files
- 8. Monitor access to sensitive information
- 10. IT Service validation and end-user performance monitoring
- 11. Dynamic provisioning of large-scale monitoring with exceptions
- 12. Functional and hierarchical Incident escalation
- 13. Deliver & manage differentiated service levels
- 14. User Provisioning Lifecycle Management
- 15. Centralize Unix account management through Active Directory
- 16. Reduce number of privileged users
- 19. Security Breachesinvolving Sensitive Business Data
- 20. Another Challenge toConsider… Source: “Data Loss RisksDuring Downsizing“, Ponemon Institute LLC, 23 Feb 2009
- 21. Policies, procedures and standards Clear guidelines Policies as a key for your organization Standardize assets Identity & access control Data Classification Access control Manage islands of identity (Privileged) User monitoring Audits Not a one-time effort Regular audits Thorough audits Regulations Difficult to do manually Reporting needed Three Important Subjects 9 Photo by: Giorgio Monteforti: http://www.flickr.com/photos/11139043@N00/1439804758/
- 23. Unix & Linux Systems
- 24. Mac OS Systems
- 25. Security & Network Devices
- 26. Applications
- 27. Users
- 28. Groups
- 29. etc.Active Directory Policy Management& User Awareness Configuration &Compliance Management Privileged User Monitoring, SIEM
- 30. Security Process Automation FORRESTER® Required Optional * Determined using the Aegis ROI calculator developed by Forrester Consulting based on a representative customer with 1,000 servers.
- 31. Use Case #1 Insider ThreatIncident Automation withPrivileged User Monitoring
- 35. Lowers impact on administratorsRemediation
- 36. Use Case #2 Business Exception Management Automation in Compliance Management
- 38. Security Processes are followed through
- 39. Compliance Issues are tracked consistently
- 41. Where do I start? – Process Automation Lifecycle
- 43. Unix & Linux Systems
- 44. Mac OS Systems
- 45. Security & Network Devices
- 46. Applications
- 47. Users
- 48. Groups
- 49. etc.Active Directory Policy Management& User Awareness Configuration &Compliance Management Privileged User Monitoring, SIEM