Don't Let Hybrid IT be a Haven for Hackers: The Case for Next Generation Managed Security Services

© 2015 IBM Corporation
The Case for Next-Generation Managed Security Services
Speakers:
Leslie Kittredge – IBM Security
Mike Montecillo – IBM Security
Don’t Let Hybrid IT Be a Haven for Hackers:

2© 2015 IBM Corporation
Today’s panelists
Leslie Kittredge
Portfolio Marketing Manager
IBM Security Services
Linked In: https://www.linkedin.com/in/lkittredge
Mike Montecillo
Director of Security Intelligence, North America
IBM Security Services
Twitter: @Montejam

Agenda  Security Challenges of the New Hybrid IT Environment
 Optimizing Hybrid IT Operations Means Rethinking IT
Security
 IBM Defines Next-Generation Managed Security
Services

Security Challenges of the New Hybrid IT
Environment

Organizations turn to outside
resources to fill in the gaps
 Integrators
 Managed Service Providers
 Contractors
 Consultants
Hybrid IT operations mean greater
flexibility and innovation
But what about security?
Increasingly, enterprise IT complexity demands a hybrid
approach

Security is a compound challenge
Attacks are increasing1….
More than 81,000,000security events
More than 1,000,000,000records leaked
…as the security skills shortage
is becoming more acute2

Conventional practices and processes have reached their limit
Traditional single-threaded response is reactive
—and is becoming over-taxed in a real-time, high-
volume threat environment
Security administration is a growing burden
Hybrid IT also means hybrid security—with “point”
solutions from dozens of vendors
 Different expertise required for each vendor
 Conflicting policies that create security gaps
 Monitoring it all is a challenge
 More complicated audit process

The urgent need for rapid response and better intelligence
Security attacks are a certainty
 Attacks are increasing in frequency and
sophistication
 No longer a matter of if or when—but how often
and how severe?
 How to respond faster and more effectively to
protect sensitive data and systems?
 How to better anticipate—and avert—attacks?

The upward creep of IT security budgets continues
Security budgets increase by double-
digits—even as IT budgets remain nearly
flat overall
46%of IT leaders said that they
will invest more in 2015 on security
Source: 2014 Deloitte-NASCIO Cybersecurity Study
Hybrid IT operations cannot be fully
optimized unless security spending is
stabilized

Optimizing Hybrid IT Operations Means
Rethinking IT Security

The “have-it-all” security wish list
It must be open, yet secure: technology- and
data-agnostic, and extensible to securely incorporate cloud, the Internet of
Things, and mobile and social platforms
It must be dynamic, yet with industrial
strength: on-demand hybrid security, with the ability to provide
security anywhere, anytime, anyway—and a flexible level of management that
can provide hardened support
It must be global, yet personal: accessing
capabilities and security intelligence at a global level, which can be applied
to optimize a client’s security posture at a personal level

On-premise, managed, and hosted security functions should
perform like they are all part of a single platform
The ideal unified hybrid platform:
 Aggregates, normalizes and presents
data from hundreds of different
platforms
 Unifies the view of all security
functions—presenting them via a
“single pane of glass,”
 Integrates global threat research and
intelligence
 Enables simple and affordable
upgrades to SIEM and other big-
insight and visualizations capabilities,
including Cognos, Hadoop and other
advanced solutions

The answer: a next-gen MSS model with four essential
components
1. Comprehensive Threat Insight
Combine advanced solutions of Big Data, visualization
and analytics to proactively manage and avert threats.
 Access to comprehensive global intelligence on
current and emerging threats
 Research and threat analysis
– Combines human expertise with advanced
research tools
– Correlates intelligence findings with evidence
of malicious activity around the world into an
actionable plan
– Yields dramatically improved risk and threat
prioritization
 Cross-enterprise data capability
• Stores and retrieves structured and
unstructured data sets related to threats
• Provides a platform for advanced data
analytics capabilities
 Real-time hybrid data integration

2. On-demand services/expertise
 Intelligent, Cloud-based Log Management
Capabilities
– Hybrid IT-friendly, on-demand
– Support for hundreds of platforms
 Full spectrum of security services (application
security, endpoint, mobile, etc.)
– Most current technologies
– Incorporating industry best practices
 Depth/breadth of IT security skills for all services
– Analysis
– Integration
– Monitoring
– Response Management
– Incident response planning and remediation
components

components
3. Multiple delivery options
By offering improved flexibility in choosing the “how,
when and who” of security deployment, the new MSS
model can allow enterprises to maximize efficiencies
and control costs.
Options should include:
 Systems Integration
 Software as a Service (SaaS)
 Customer Premise Equipment (CPE)
 Consulting
 Any combination of the above

4. Unified Visibility and Control of the
Security Environment
 The new generation of hybrid IT security must be
viewed and managed as coherent, unified
enterprise system
 Must eliminate administrative complexity
 Should offer consistency, regardless of changes
and upgrades throughout the hybrid security
infrastructure
components

IBM Defines Next-Generation Managed
Security Services

Introducing The
IBM Threat Insight Platform
The next-generation Managed Security Services model

The managed security approach that enables and optimizes hybrid IT operations
 Combines IBM global research, patents, consulting and security analyst expertise
 Uses common standards, a common language and architecture to support 400 platforms and
a large variety of third-party threat intelligence feeds
 Requires less security hardware, licenses, maintenance and expert security resources for
management and monitoring
 Provides a “single pane of glass” to view the entire enterprise security posture
 Provides a gateway to increasingly sophisticated SIEM capabilities, without requiring full
implementation of a SIEM solution
 Enterprises can pay for the level of security they use as an operational expense, eliminating
the need for hardware and other capital expenditures for log management
The IBM Threat Insight Platform

• Security devices
• Servers and mainframes
• Network and virtual activity
• Data and application activity
• Configuration information
• Vulnerabilities and threats
• Users and identities
CloudOn Premise
At the heart – IBM Intelligent Log Management
 A gateway to increasingly sophisticated SIEM
capabilities, without requiring the
implementation of a full SIEM solution.
 Enterprises pay for the level of security they
use as an operational expense—eliminating the
need for hardware and other capital
expenditures for log management.
 Scalable deployment options designed to meet
the needs of dynamic, hybrid IT environments.

Comprehensive, centralized functionality
1. Real-time hybrid data integration – Real-time collection, integration and monitoring across a global data
volume of billions of events per day
2. Global cross-enterprise visibility – Affords massive scale and versatility to store and retrieve structured
and unstructured data sets; provides a platform for advanced data science capabilities
3. Threat research and visualization – Dynamic, visual investigative interface; enables dynamic relationship
building and new insights
4. Intelligence, insight and Analytics –
Combines human expertise with
IBM advanced research tools;
correlates intelligence findings with
evidence of malicious activity
among IBM customers worldwide
5. Customer Security Center –
Acts as the user interface for all
security services, providing
dashboards, analytics, logs,
reporting, security management
and chat functions for both mobile
and desktop users expenditures
for log management

At the heart – IBM Intelligent Log Management
 The ability to quickly identify and remediate events with robust security intelligence and
incident forensics
 An integrated solution that collects, correlates and reports security data from various
siloes
 Reduced cost and more accurate risk predictions
 Offloaded security event monitoring and device management, enabling internal
resources to focus on expanding business capabilities
 Detection of insider fraud with the adoption of next-generation SIEM with identity
correlation
 Automated data collection and configuration audits to more easily address regulatory
The advantages

Making security more automated and predictive
The advantages

The advantages
Measurable returns
Based on data from IBM client engagements

IBM Security is built on the best in global capability and scale
monitored countries (MSS)
service delivery experts
endpoints protected
+
events managed per day
+
IBM Security by the Numbers
+
+

Transformation Programs
Security Strategy, Risk and Compliance
Security Intelligence and Optimization
Cyber Security Assessment and Response
Identity and Access Management
Application and Data Security
Infrastructure and Endpoint Security
• Strategy and Planning
• Security Framework and Risk Assessments
• Automated GRC and IT Risk Management
• Security Operations Consulting
• Security Intelligence Programs
• Managed and Monitored SIEM Services
• Penetration Testing
• Incident Response and Planning
• Advanced Threat Assessments
• Identity & Access Strategy & Design
• Managed and Cloud Identity Services
• Identity Governance and Authorization
• Critical Data Protection
• Data Discovery and Classification
• Data Security Design & Deploy
• 24x7 Security Infrastructure Monitoring
• Security Infrastructure Management
• Vulnerability Management
Consulting
Managed
Services
Cloud
Services
System
Integration
IBM
Security
Solutions
Security Services operates as a globally integrated practice
Providing expertise to help clients from strategy through operate

Transformation Programs
Security Operations
Modernization
Advanced Threat
Protection
End-to-End
Identity Services
Critical Data
Protection
Automated GRC &
IT Risk Management
Security Strategy,
Assessment & Design
Enabling clients to achieve their critical transformation needs
Delivering end-to-end services with global expertise to address complex security challenges

IBM can help chart the course
Learn more! Download the
Optimize Your Security Program white
paper
Contact your IBM sales representative for a consultation on:
 Building a road map to Optimize Your Security Program
Download the infographic
Rethinking IT Security

Learn more about IBM Security
V2015-07-29
133 countries where IBM delivers
managed security services
24 industry analyst reports rank
IBM Security as a LEADER
TOP 2 enterprise security software
vendor in total revenue
12K clients protected including…
22 of the top 29 banks in Japan,
North America, and Europe
Visit our website
IBM Security Website
Watch our videos on YouTube
IBM Security Channel
Read new blog posts
SecurityIntelligence.com
Follow us on Twitter
@ibmsecurity

© Copyright IBM Corporation 2015. All rights reserved. The information contained in these materials is provided for informational purposes only, and is provided AS IS without warranty of any kind, express or implied. IBM shall not be responsible for any
damages arising out of the use of, or otherwise related to, these materials. Nothing contained in these materials is intended to, nor shall have the effect of, creating any warranties or representations from IBM or its suppliers or licensors, or altering the terms and
conditions of the applicable license agreement governing the use of IBM software. References in these materials to IBM products, programs, or services do not imply that they will be available in all countries in which IBM operates. Product release dates and / or
capabilities referenced in these materials may change at any time at IBM’s sole discretion based on market opportunities or other factors, and are not intended to be a commitment to future product or feature availability in any way. IBM, the IBM logo, and other
IBM products and services are trademarks of the International Business Machines Corporation, in the United States, other countries or both. Other company, product, or service names may be trademarks or service marks of others.
Statement of Good Security Practices: IT system security involves protecting systems and information through prevention, detection and response to improper access from within and outside your enterprise. Improper access can result in information being
altered, destroyed, misappropriated or misused or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service or security measure can
be completely effective in preventing improper use or access. IBM systems, products and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other
systems, products or services to be most effective. IBM DOES NOT WARRANT THAT ANY SYSTEMS, PRODUCTS OR SERVICES ARE IMMUNE FROM, OR WILL MAKE YOUR ENTERPRISE IMMUNE FROM, THE MALICIOUS OR ILLEGAL CONDUCT OF
ANY PARTY.
THANK YOU
www.ibm.com/security

Statement of Good Security Practices: IT system security involves protecting systems and information through prevention, detection and response
to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed or misappropriated
or can result in damage to or misuse of your systems, including to attack others. No IT system or product should be considered completely secure
and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to
be part of a comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems,
products or services to be most effective. IBM DOES NOT WARRANT THAT SYSTEMS AND PRODUCTS ARE IMMUNE FROM THE
MALICIOUS OR ILLEGAL CONDUCT OF ANY PARTY.
© IBM Corporation 2015
 IBM, the IBM logo, ibm.com and X-Force are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other
product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at “Copyright
and trademark information” at www.ibm.com/legal/copytrade.shtml
 Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.
 UNIX is a registered trademark of The Open Group in the United States and other countries.
 Not all offerings are available in every country in which IBM operates. This document is current as of the initial date of publication and may be
changed by IBM at any time.
 THE INFORMATION IN THIS DOCUMENT IS PROVIDED “AS IS” WITHOUT ANY WARRANTY, EXPRESS OR IMPLIED, INCLUDING WITHOUT
ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY OR CONDITION OF NON-
INFRINGEMENT. IBM products are warranted according to the terms and conditions of the agreements under which they are provided.
Trademarks and notes
SEP03337-USEN-00

Don't Let Hybrid IT be a Haven for Hackers: The Case for Next Generation Managed Security Services

Recomendados

Recomendados

Más contenido relacionado

Destacado

Destacado (13)

Más de IBM Security

Más de IBM Security (20)

Último

Último (20)

Don't Let Hybrid IT be a Haven for Hackers: The Case for Next Generation Managed Security Services