Do You Manage Software? Understanding Your Role in Cybersecurity Defense

Do you manage software? Understand your role in cybersecurity defense

Marcelo Pereira, Product Marketing ManagerTim Davis, Senior Product Marketing Manager

The Cyber Threat Facing All Of UsCosts And Consequences Security Incidents and Data Breaches

Extensive downtimeExposure of intellectual property

Damage to brand and reputation

Theft/exposure of confidential data

Reduced productivity levels

Impact of incidents

Source: “Cisco 2017 Annual Cybersecurity Report” http://www.cisco.com/c/en/us/products/security/security-reports.html

To Watch This Webinar On Demand Register Here

Security Incidents versus Data BreachesAnd the cost of resolving incidents

100,000security incidents in

From which

3,141Were confirmed data

breaches

Sources:“2016 Data Breach Investigation Report” Verizon http://www.verizonenterprise.com/verizon-insights-lab/dbir/2016/* “2015 Cost of Cyber Crime Study: Global.” Ponemon Institute. October 2015. http://www.ponemon.org/blog/2015-cost-of-cyber-crime-united-states

$21,000 a day*

Companies Breached In 2016 - Highlights

“The Key Goal:

Reducing Adversaries Operational Space”

- Cisco

Addressing today’s challenges for security

PRINCIPLES OF SECURITY

WATCH THIS WEBINAR ON DEMAND REGISTER HERE

Resilience

DetectRespondRecoverPreventBreaches WILL

happen

Prevention:Reduce the attack

surface for hackers

“A Rapidly Expanding Attack Surface Requires an Interconnected and Integrated

Approach to Security”

- Cisco

SECURITY ROLES

The challenge of hitting a moving target

Role: Information Security

Evangelize security awareness Conduct vendor risk assessmentOversee regulatory compliance Assess security position of infrastructure

Is Security a Priority?

Role: IT Security

Mitigates the risk of security incidents and breachesIdentifies and responds quickly to incidents

Dealing with possible security incidents

OPERATIONS ROLES

The challenge of managing software

Role: Desktop Management

Preform application risk assessmentRestrict use of unauthorized applications Remove unused applicationsControl Self-Service deployment

Global Pharmaceutical Company

89% Reduction in the number of apps from over 3,700 applications to just 400

• Reduced attack surface• Improved governance• Streamlined employee choice• Saved $1,968,000 in labor costs in the first year

Role: Software Asset Management

Discover software and maintain normalized inventoryUnderstand application usage trendsReduce the application footprint

Chicago Public Schools

Making informed decisions to reduce new software purchases and negotiate more favorable vendor contracts

• Identified 29,000 different applications installed• Discovered end of life (EOL) software• Collaborated with the security team to remediate issues

Role: Patch Management

Asses and Prioritize patchingDeploy patches and verify Align with Security policies

Security Patch ManagementChallenges And Misconceptions

• Patch Management = managing deployment of patches• No synergy between security assessment and patch activities• Patching Microsoft applications is good enough• Focus only on the most common non-Microsoft applications• Relying on vendor information and alerts

CONSEQUENCES: • Non prioritized patching process• Waste of resources• Applications staying unpatched for

months or many times, years• Business disruption and breaches

Time To Patch!Patch Availability On The Day of Disclosure

Source: “Flexera Software Vulnerability Review 2017.” http://www.flexerasoftware.com/enterprise/resources/research/vulnerability-review/

How our customer improved their processes

68%69%

1 staff/day

58%25%

Daily and Weekly

2+ staff/day

Conclusion

Operationalize people, processes and technology in an integrated fashion to effectively reduce the attack surface for cybercriminals and hackers.

Maintain and share accurate inventory dataStreamline and rationalize your portfolioConduct risk assessmentPrioritize security patching

Additional Resources

Visit us online: www.flexerasoftware.com/enterprise/resources

White Papers:

Bridging Vulnerability Management Gaps

On Demand Webinar:

SAM and Security Teams Must Join Forces to Enhance Security

Success Story:

Chicago Public Schools

Reports:

Vulnerability Review 2017

WE’RE REIMAGINING THE WAY SOFTWARE IS

w w w . f l e x e r a s o f t w a r e . c o m

SOLD SECUREDMANAGEDBOUGHT

North America: 800-809-5659Europe, Middle East & Africa: +44 (0) 870 873 6300Asia-Pacific: +61 3 9895 2000

Do You Manage Software? Understanding Your Role in Cybersecurity Defense

Technology

Cybersecurity Strategy – Active...

995023 Global Defense Outlook; 8750852 Global Defense ... ·...

Cybersecurity: What Defense Lawyers Need to Know about...

Utilizing the NIST Framework to Improve Cybersecurity...

NIST/NICE Cybersecurity · • NIST Cybersecurity Framework...

Cybersecurity Strategy – Active Defense€¦ ·...

Cybersecurity: Expanding the Front Lines of Defense Dr....

Cybersecurity Maturity Model Certification (CMMC) ·...

Analytical Framework for Cybersecurity Defense Systems (no.....

International Cybersecurity Norms -...

FISMA Cybersecurity Performance Metrics and Scoring...

GAO-17-512, Defense Cybersecurity: DOD's … States...

Shaping Your Board For Cybersecurity · cybersecurity...

GAO-17-512, Accessible Version, Defense Cybersecurity: DOD.....

CYBERSECURITY FORUM...

David Pearson May 25, 2016 - Defense Acquisition …...