WE BELIEVE SECURITY IS A BRAND ISSUE It affects top-line revenue.
In every organization. Of every size and industry.
Presenter
Presentation Notes
At ePlus, we believe the security conversation has to change. Today, organizations need to move their focus from one of “threat” to “risk” with a clear understanding of security’s impact on a company’s brand image and top-line revenue. More than ever, security decisions are being made at the board level, and, just like in other areas of IT, security must be addressed as a business issue and not just a technical one. Security is ultimately about trust. If you can’t trust the brand, you won’t do business there.
ePlus. Where Technology Means More.®
And information security challenges are growing on a daily basis…
Advanced Persistent Threats (APT)
Ransomware Insider Threats (Malicious or Benign)
+ +
Presenter
Presentation Notes
Data breaches have become regular headline news. High profile brands have fallen victim to cyberattacks, leading to financial loss, reputational damage and the loss of confidential information. Cybercrime is an established, organized, and extremely well funded industry. At ePlus we like to say, “the bad guys are good, and they are well funded.” All this means that today, piecemeal and reactive approaches to information security no longer work.
ePlus. Where Technology Means More.®
Our customers tell us they are facing: • Increased board demands for
greater security value for the investment
• A shortage of cybersecurity talent
• A myriad of federal, state and local cybersecurity regulations
• An inability to forecast their security needs appropriately
Presenter
Presentation Notes
The sophistication of modern cyber attacks, the persistent nature of advanced threats and the importance of managing business risk on a continual basis requires enterprises to reevaluate their entire security ecosytem. It‘s now critical that security teams, CISO, C-Suite and Boards, have a detailed assessment analysis of information users, systems, potential attacks, context, identity, cloud and other systems. It‘s not enough for the C-Suite to review a spreadsheet of threats. The C-Suite and Board require an understanding and prioritization of the threats and THE risk to the business.
ePlus. Where Technology Means More.®
Point solutions are weighing down enterprise security
＋The explosion of point solutions contributes to network complexity
＋Cloud and mobile workers are stretching the perimeter to the limit
＋IT is challenged with a deficiency of experienced security personnel converging with a highly complex networking and security environment
Presenter
Presentation Notes
Once upon a time, security was simple: you had a corporate network with a defined perimeter. Throw up some firewalls at the endpoints, and you could pretty much weather any cyberattack at the time. Then came mobility and the Cloud, and securing this modern network was no longer simple. To combat these threats, businesses began layering point solution upon point solution to secure new data access paths. What started off as a few supplemental security appliances snowballed into an appliance straightjacket, severely constraining an IT team that was already burdened by a lack of resources. Security teams should be responding to new and emerging threats. But with so many security appliances, they often spend more time trying to manage what they own than think about the threat landscape and how to adapt to it. IT is reaching a breaking point with the perfect storm of a deficiency of experienced security personnel converging with a highly complex networking and security environment that is overwhelmed by point solutions.
ePlus. Where Technology Means More.®
ePlus CyberSecurity Management Program
＋‘Security as a Service’ – offered as a flexible subscription service
＋Continually assess and protect a client’s security posture
＋Offer a proactive catalog of services that accommodates the new realities of cloud and mobility
＋Develop a stronger security management framework to better contain and forecast risk
＋Ensure security is a culture, not a stop/start engagement
Presenter
Presentation Notes
At ePlus, we want to not only change the conversation but the approach. We have develped a new offering called ePlus Integrated Security Services Suite that helps our clients to establish, implement, maintain and continually improve their Information Security processes. Standards such as ISO270001, NIST, UCF, COBIT, PCI, DSS, ISF and HIPAA are used. ePlus brings these standards together into one serviced-based offering that is industry specific and provides continuous security management. By doing so, information security vulnerabilities and threats are identified, priorities are set, and mitigating action can be taken.
ePlus. Where Technology Means More.®
Maintaining a culture of security… and constant vigilance.
Cloud Readiness
½ Day Security Roadmap
Review
Table Top Exercise
Security War Games & Planning
Forensics and Employee Training
Annual Security Review
Security Health Checks
vCISO
Continuous Security Management – Monthly Service Reviews
Monthly service reviews – How do you make business sense of all the threat, vulnerability and risk information? ePlus helps by implementing a risk-based approach of continuous security management. Determine if the threats are likely to exploit vulnerabilities and therefore possibly compromise the confidentiality, integrity, and/or availability of critical assets. Create a culture of prevention.
ePlus. Where Technology Means More.®
Board-ready Reports and Metrics ＋Information Security Policy
＋Statement of Applicability
＋Security Assessment Report
＋Corrective Action Plan
＋Plan of Action and Milestones
Presenter
Presentation Notes
ePlus provides various reports to support internal and external communications to attest to the soundness and effectiveness of our clients security program, such as Statement of Applicability, as defined by ISO270001. Providing comprehensive information security reporting is an integral part of the offering.
ePlus. Where Technology Means More.®
＋ePlus monitors and/or manages servers, routers, firewalls, and more
＋Offerings include log monitoring and management, security device management, vulnerability management, and targeted threat intelligence
＋24x7 threat alerts and management services on a wide array of security technologies
ePlus can provide vulnerability scanners, security and incident and event monitoring and management tools, baseline analyzers, and IT ticketing. For critical IP or as a complete Managed Security Services program
ePlus. Where Technology Means More.®
Why ePlus? ePlus brings unique capabilities and expertise to
address today’s security challenges:
Experience in a wide array of
security solutions
A unified approach to securing data in motion
and at rest
Keen understanding of today’s private, hybrid,
virtualized, and cloud-based technologies
Deep industry, compliance and
regulatory knowledge
Presenter
Presentation Notes
In summary, ePlus brings unique capabilities and expertise to address today’s security challenges.
