Resolve Real Security Threats Fast - ServiceNow · 2020. 7. 27. · Resolve Real Security Threats...

MYKE LYONSHead of Security Strategy, Security Business Unit

ServiceNow

Resolve Real Security Threats Fast

DEVON WINKWORTHAdvisory Solution Consultant

ServiceNow

Agenda

• The Power of Security Operations

• Trusted Security Circles

• Vendor Risk Management

The Power of Security Operations

Organisations Have Invested in a LOT of Security Products

PROTECT: DETECT: RESPOND:

[NOT SO MUCH]

Organisations Are Struggling to Find and Stop Breaches

Source: Ponemon Institute 2017

On average, it took respondents 191 days to spot a breach caused by a malicious attacker, and 66 days to contain it.

And the Vulnerability Backlog is Piling Up

• 61% of vulnerabilities are patched within a month

• Leftovers are likely NEVER to be patched

source: Verizon Data Breach Investigations Report 2017

Top 10 Vulnerabilities Exploited in 2015 Were Over a Year OldAnd 48% were five or more years old

source: HPE Cyber Security Report, 2016

The Need: Enterprise Security Response

Security Incident

Response

Vulnerability

ResponseWorkflow

Automation &

Orchestration

Deep IT

Integration

Threat

Intelligence

ENTERPRISE SECURITY RESPONSE

Trusted Security Circles

Threat Intelligence Sharing Improves Orchestration Accuracy

Complete Current Relevant

Make People More Effective

Shared intelligence fills in the skill gaps

Share Intelligence with ServiceNow Trusted Security Circles

• Anonymous sharing

• Automatic sightings searches

• Circles based on commonality

• Sharing stays with your company

• Supports industry standards – STIX, TAXII

• Early warning of potential attacks

Vendor Risk Management

Your Enterprise Doesn’t Exist In Isolation

IT softwarevendors

Outsourcers

Consultants Affiliates

Distributors

Resellers

Today’s Vendor Risk Management Processes & Tools Can’t Keep Up

Manual Processes

Manual and time consuming processes make it difficult to provide adequate coverage for all critical vendors; leaving the enterprise open to loss events and unnecessary risk.

PoorVisibility

The inability to see what needs to get done, by when, and who is working on it means we can’t get visibility into program activities and overall risk posture; so we don’t get the type, depth, or timely information we want.

Siloed & Rudimentary

Siloed and antiquated risk management tools make it difficult to operate effectively within the extended enterprise; making it hard to prioritize and remediate issues.

Introducing ServiceNow Vendor Risk Management

Policy & Compliance Management Risk Management Audit Management Vendor Risk Management

SingleDatabase

ContextualCollaboration

ServiceCatalog

ServicePortal

Subscription & Notification

KnowledgeBase

OrchestrationDeveloperTools

Reports & Dashboards

Workflow

Intelligent Automation Engine

Predictive Modeling

Anomaly Detection

PeerBenchmarks

PerformanceForecasting

Nonstop Cloud

Transform Inefficient Processes into a Unified Vendor Risk Program

AutomateGain

VisibilityUnify and Prioritize

Gain visibility & transparency for you and your vendor into the status of assessments, issues, and tasks; and track changes across your vendor ecosystem.

Easily prioritize risks andeffortlessly drive them to closure when you integrate disparate siloes of information and technology with a user friendly experience across the extended enterprise.

Replace unstructured work patterns with intelligent workflows. Assessments, issues, notifications, and other work items can be automatically generated, assigned, and easily actioned.

Summary

Security Operations can help you build

an Enterprise Security Response

Program

Trusted Security Circles can invert the

threat intelligence model, allowing you to proactively stop

threats

Vendor Risk Management

monitors, prioritizes and automates

response to third-party risk

Resolve Real Security Threats Fast - ServiceNow · 2020. 7. 27. · Resolve Real Security Threats...

Documents

DaVinci Resolve Interface to CalMAN Software - SpectraCal Resolve... · CalMAN Setup Guide: DaVinci Resolve 2 Introduction DaVinci Resolve color correction software interfaces directly

Resolve Overview

RESOLVE - pm.go.gov.br

How to Detect and Resolve Today's High-Profile Threats

Winkworth Country Houses Collection

RESOLVE - defensoria.go.gov.br

1 Copyright © Resolve 2004 Resolve Group HUMAN RESOURCES BENCHMARKING IN THE BANKING SECTOR Lindsay Falkov Executive Director: Resolve Group

Internet Safety Threats and Strategies. What are the threats? Most perceived threats are: Most perceived threats are: Predators Predators Inappropriate

resolve - MIA

Classic Access Control Techniques - SecAppDev. Threat modeling.pdf · • Determine threats – Identify threats – Analyze threats. ... • Determine threats: elicit and categorize

AN EMERGING THREATS ESSAY Invisible Threats

Winkworth Great Estates

Resolve Complete

RESOLVE - Capanema

BH Resolve

NetPro-ITI Ethernet LANs. Common Threats to Physical Installations Hardware threats Environmental threats Electrical threats Maintenance threats

RESOLVE - uespi.br

Enterprise on the Go - Devon Winkworth, Snr. Principal Consultant, Layer 7 @ The Mobile Show Asia

DAVINCI RESOLVE GUIDE

Winkworth west london winter 2015 web