8/7/2019 Managed Securty Monitoring
1/18
0DQDJHG6HFXULW\0RQLWRULQJ1HWZRUN6HFXULW\IRUWKHVW&HQWXU\
%UXFH6FKQHLHU
&RS\ULJKWE\&RXQWHUSDQH,QWHUQHW6HFXULW\,QF$OOULJKWVUHVHUYHG
8/7/2019 Managed Securty Monitoring
2/18
0DQDJHG6HFXULW\0RQLWRULQJ 3DJH
,QWURGXFWLRQ
7KH,QWHUQHWLVFULWLFDOWREXVLQHVV&RPSDQLHVKDYHQRFKRLFHEXWWRFRQQHFWWKHLULQWHUQDOQHWZRUNVWRWKHUHVWRIWKHZRUOGWROLQNZLWKFXVWRPHUVVXSSOLHUVSDUWQHUVDQGWKHLURZQHPSOR\HHV%XWZLWKWKDWFRQQHFWLRQFRPHVQHZWKUHDWVPDOLFLRXVKDFNHUVFULPLQDOVLQGXVWULDOVSLHV7KHVHQHWZRUNSUHGDWRUVUHJXODUO\VWHDOFRUSRUDWHDVVHWVDQGLQWHOOHFWXDOSURSHUW\FDXVHVHUYLFHEUHDNVDQGV\VWHPIDLOXUHVVXOO\FRUSRUDWHEUDQGVDQGIULJKWHQFXVWRPHUV8QOHVVFRPSDQLHVFDQVXFFHVVIXOO\QDYLJDWHDURXQGWKHPWKH\ZLOOQRWEHDEOHWRXQORFNWKHIXOOEXVLQHVVSRWHQWLDORIWKH,QWHUQHW
7UDGLWLRQDODSSURDFKHVWRFRPSXWHUVHFXULW\GRQWZRUN'HVSLWHGHFDGHVRIUHVHDUFKDQGKXQGUHGVRIDYDLODEOHVHFXULW\SURGXFWVWKH,QWHUQHWKDVVWHDGLO\EHFRPHPRUHGDQJHURXV7KHLQFUHDVHGFRPSOH[LW\RIWKH,QWHUQHWDQGLWVDSSOLFDWLRQVWKHUXVKWRSXWPRUHVHUYLFHVDQGSHRSOHRQWKH,QWHUQHWDQGWKHGHVLUHWRLQWHUFRQQHFWHYHU\WKLQJDOOFRQWULEXWHWRWKHLQFUHDVHGLQVHFXULW\RIWKHGLJLWDOZRUOG
6HFXULW\EDVHGRQSURGXFWVLVLQKHUHQWO\IUDJLOH1HZO\
GLVFRYHUHGDWWDFNVWKHSUROLIHUDWLRQRIDWWDFNWRROVDQGIODZVLQWKHSURGXFWVWKHPVHOYHVDOOUHVXOWLQDQHWZRUNEHFRPLQJYXOQHUDEOHDWUDQGRPDQGLQFUHDVLQJO\IUHTXHQWLQWHUYDOV
5HDOVHFXULW\LVDERXWSHRSOH2QWKHGD\\RXUHDWWDFNHGLWGRHVQWPDWWHUKRZ\RXUQHWZRUNLVFRQILJXUHGZKDWNLQGRIER[HV\RXKDYHRUKRZPDQ\VHFXULW\GHYLFHV\RXYHLQVWDOOHG:KDWPDWWHUVLVZKRLVGHIHQGLQJ\RX7KHRQO\ZD\WRVWD\DKHDGRIQHZ
YXOQHUDELOLWLHVDQGDWWDFNVLVWKURXJKGHWHFWLRQDQGUHVSRQVH,QWKHUHDOZRUOGWKLVWUDQVODWHVWRDODUPV\VWHPVDQGJXDUGV2QWKH,QWHUQHWWKLVPHDQVDFWLYHQHWZRUNPRQLWRULQJ
8/7/2019 Managed Securty Monitoring
3/18
3DJH %UXFH6FKQHLHU
NQRZOHGJHLVXQPDWFKHG2XUWHFKQRORJ\DQGPDQDJHPHQWWHDPVUHSUHVHQWDYLUWXDO:KRV:KRRIWKHLQIRUPDWLRQVHFXULW\LQGXVWU\$QGRXUVHFXULW\DQD
O\VWVDUHSHRSOHZKRVHGHPHDQRUDQGGLVFLSOLQHPDNHWKHPXQLTXHO\VXLWHGWRDMREZKHUHWKHUHLVQRVODFN7KH\DUHKLJKO\WUDLQHGFRQVWDQWO\GULOOHGDQGXQLTXHO\TXDOLILHG7KH\XQGHUVWDQGWKHQHHGWRSURWHFWEXVLQHVVDVVHWVDQGDUHUHOHQWOHVVLQWKHLUSXUVXLWRIVHFXULW\
&RXQWHUSDQHVDQDO\VWVZRUNRXWRIRXU6HFXUH2SHUDWLRQV&HQWHUV62&VSK\VLFDOO\DQGYLUWXDOO\KDUGHQHGFRPSXWLQJIDFLOLWLHV7KHVHQHUYHFHQWHUVDUHVWDIIHG
[DQGKRXVHWKHWHFKQRORJ\DQGSHRSOHWKDWPDNH&RXQWHUSDQHV060VXFFHVVIXO2XU6RFUDWHVLQIRUPDWLRQV\VWHPSURYLGHVRXUDQDO\VWVZLWKWKHLQIRUPDWLRQWKH\QHHGWRPDNHHIIHFWLYHVHFXULW\GLDJQRVHVDQGWDNHFRUUHFWLYHDFWLRQIDVW2XU1HWZRUN,QWHOOLJHQFHRUJDQL]DWLRQFRQWLQXDOO\XSGDWHVRXUV\VWHPZLWKLQIRUPDWLRQRQWKHODWHVWWKUHDWVYXOQHUDELOLWLHVDQGKDFNHUWRROV:HKDYHQRSURGXFWYHQGRURUSROLWLFDOELDV1RRWKHUVHUYLFHFDQPDWFK&RXQWHUSDQHVEUHDGWKRIFRYHUDJHGHSWKRIH[SHUWLVHDQGFRPPLWPHQWWRLQWHJULW\
6HFXULW\PRQLWRULQJLVDNH\FRPSRQHQWPLVVLQJLQPRVWQHWZRUNV0RQLWRULQJSURYLGHVLPPHGLDWHIHHGEDFNUHJDUGLQJWKHHIILFDF\RIDQHWZRUNVVHFXULW\LQUHDOWLPHDVLWFKDQJHVLQWKHIDFHRIQHZDWWDFNVQHZWKUHDWVVRIWZDUHXSGDWHVDQGUHFRQILJXUDWLRQV0RQLWRULQJLVWKHZLQGRZLQWRDQHWZRUNVVHFXULW\ZLWKRXWLWDVHFXULW\DGPLQLVWUDWRULVIO\LQJEOLQG:KHUHYHUDQHWZRUNLVLQWKHSURFHVVRIEXLOGLQJVHFXULW\PRQLWRULQJLVFULWLFDO,WVWKHILUVWWKLQJ\RXQHHGWRGR
7KH,PSRUWDQFHRI6HFXULW\
:KHQ,EHJDQZRUNLQJLQFRPSXWHUVHFXULW\WKHRQO\LQWHUHVWZDVIURPWKHPLOLWDU\DQGDIHZVFDWWHUHGSULYDF\DGYRFDWHV7KH,QWHUQHWKDVFKDQJHGDOOWKDW7KHSURPLVHRIWKH,QWHUQHWLVWREHDPLUURURIVRFLHW\(YHU\WKLQJZHGRLQWKHUHDOZRUOGZHZDQWWRGRRQWKH,QWHUQHWFRQGXFWSULYDWHFRQYHUVDWLRQVNHHSSHUVRQDOSDSHUVVLJQOHWWHUVDQGFRQWUDFWVVSHDNDQRQ\PRXVO\
UHO\RQWKHLQWHJULW\RILQIRUPDWLRQJDPEOHYRWHSXEOLVKGLJLWDOGRFXPHQWV$OORIWKHVHWKLQJVUHTXLUHVHFXULW\&RPSXWHUVHFXULW\LVDIXQGDPHQWDOHQDEOLQJ
0LOLWDU\+LVWRU\
DQG1HWZRUN
6HFXULW\0LOLWDU\VWUDWHJLVWVFDOOLWpWKHSRVLWLRQRIWKHLQWHULRUq7KHGHIHQGHUKDVWRGHIHQGDJDLQVWHYHU\SRVVLEOHDWWDFN7KHDWWDFNHURQWKHRWKHUKDQGRQO\KDVWRFKRRVHRQHDWWDFNDQGKHFDQFRQFHQWUDWHKLVIRUFHVRQWKDWRQHDWWDFN7KLVSXWV
WKHDWWDFNHUDWDQDWXUDODGYDQWDJH
'HVSLWHWKLVLQDOPRVWHYHU\DJHRIZDUIDUHWKHDWWDFNHULVDWDGLVDGYDQWDJH0RUHSHRSOHDUHQHHGHGWRDWWDFNDFLW\RUFDVWOHRUKRXVHRUIR[KROHWKDQWRGHIHQGLW7KHUDWLRVFKDQJHRYHU
KLVWRU\tWKHGHIHQVHoVHQRUPRXVDGYDQWDJHLQ::,WUHQFKZDUIDUHOHVVHQHGZLWKWKHDGYHQWRIWKHWDQNIRUH[DPSOHtEXWWKHEDVLFWUXWKUHPDLQVDOORWKHUWKLQJVEHLQJHTXDOWKHPLOLWDU\GHIHQGHUKDVDFRQVLGHUDEOHDGYDQWDJHRYHUWKHDWWDFNHU
7KLVKDVQHYHUEHHQWUXHRQWKH,QWHUQHW7KHUHWKHDWWDFNHUKDVDQDGYDQWDJH+HFDQFKRRVHZKHQDQGKRZWRDWWDFN+HNQRZVZKDWSDUWLFXODUSURGXFWVWKHGHIHQGHULVXVLQJRUHYHQLIKHGRHVQoWLWLVXVXDOO\RQHRIDVPDOOKDQGIXORISRVVLELOLWLHV7KHGHIHQGHULVIRUFHGWRFRQVWDQWO\XSJUDGHKLVV\VWHPWRHOLPL
8/7/2019 Managed Securty Monitoring
4/18
0DQDJHG6HFXULW\0RQLWRULQJ 3DJH
WHFKQRORJ\RIWKH,QWHUQHWLWVZKDWWUDQVIRUPVWKH,QWHUQHWIURPDQDFDGHPLFFXULRVLW\LQWRDVHULRXVEXVLQHVVWRRO7KHOLPLWVRIVHFXULW\DUHWKHOLPLWVRIWKH
,QWHUQHW$QGQREXVLQHVVRUSHUVRQLVZLWKRXWWKHVHVHFXULW\QHHGV
7KHULVNVDUHUHDO(YHU\RQHWDONVDERXWWKHGLUHFWULVNVWKHIWRIWUDGHVHFUHWVFXVWRPHULQIRUPDWLRQPRQH\3HRSOHDOVRWDONDERXWWKHSURGXFWLYLW\ORVVHVGXHWRFRPSXWHUVHFXULW\SUREOHPV:KDWVWKHORVVWRDFRPSDQ\LILWVHPDLOJRHVGRZQIRUWZRGD\V"2ULIWHQSHRSOHKDYHWRVFUDPEOHWRFOHDQXSDIWHUDSDUWLFXODUO\QDVW\LQWUXVLRQ",YHVHHQILJXUHVDVKLJKDVELOOLRQ
TXRWHGIRUZRUOGZLGHORVVHVGXHWRWKH,/29(
8/7/2019 Managed Securty Monitoring
5/18
8/7/2019 Managed Securty Monitoring
6/18
0DQDJHG6HFXULW\0RQLWRULQJ 3DJH
RJ\WKDWZLOODYRLGWKHWKUHDWVDQGHPEUDFHSURFHVVHVWKDWZLOOKHOSXVPDQDJHWKHULVNV
6HFXULW\DQG5LVN0DQDJHPHQW
$VNDQ\QHWZRUNDGPLQLVWUDWRUZKDWKHQHHGVVHFXULW\IRUDQGKHFDQGHVFULEHWKHWKUHDWV:HEVLWHGHIDFHPHQWVFRUUXSWLRQDQGORVVRIGDWDGXHWRQHWZRUNSHQHWUDWLRQVGHQLDORIVHUYLFHDWWDFNVYLUXVHVDQG7URMDQV7KHOLVWVHHPVHQGOHVVDQGDQHQGOHVVVHULHVRIQHZVVWRULHVSURYHVWKDWWKHWKUHDWVDUHUHDO
$VNWKDWVDPHQHWZRUNDGPLQLVWUDWRUKRZVHFXULW\
WHFKQRORJLHVKHOSDQGKHOOGLVFXVVDYRLGLQJWKHWKUHDWV7KLVLVWKHWUDGLWLRQDOSDUDGLJPRIFRPSXWHUVHFXULW\ERUQRXWRIDFRPSXWHUVFLHQFHPHQWDOLW\ILJXUHRXWZKDWWKHWKUHDWVDUHDQGEXLOGWHFKQRORJLHVWRDYRLGWKHP7KHFRQFHLWLVWKDWWHFKQRORJLHVFDQVRPHKRZVROYHFRPSXWHUVHFXULW\DQGWKHHQGUHVXOWLVDVHFXULW\SURJUDPWKDWEHFRPHVDQH[SHQVHDQGDEDUULHUWREXVLQHVV+RZPDQ\WLPHVKDVDVHFXULW\RIILFHUVDLG
8/7/2019 Managed Securty Monitoring
7/18
3DJH %UXFH6FKQHLHU
QRWDOORZHGWRKDQGOHDQ\WKLQJXQDWWHQGHGHWF$QGWKDWVDPHMHZHOU\VWRUHZLOOFDUU\WKHIWLQVXUDQFHDQRWKHUULVNPDQDJHPHQWWRRO
0RUHVHFXULW\LVQWDOZD\VEHWWHU
8/7/2019 Managed Securty Monitoring
8/18
0DQDJHG6HFXULW\0RQLWRULQJ 3DJH
YHQWLRQPHFKDQLVPLVSHUIHFW7KLVLVHVSHFLDOO\WUXHIRUFRPSXWHUQHWZRUNV$OOVRIWZDUHSURGXFWVKDYHVHFXULW\EXJVPRVWQHWZRUNGHYLFHVDUHPLVFRQILJXUHG
DQGXVHUVPDNHDOOVRUWVRIPLVWDNHV:LWKRXWGHWHFWLRQDQGUHVSRQVHWKHSUHYHQWLRQPHFKDQLVPVRQO\KDYHOLPLWHGYDOXH7KH\UHIUDJLOH$QGGHWHFWLRQDQGUHVSRQVHDUHQRWRQO\PRUHFRVWHIIHFWLYHEXWDOVRPRUHHIIHFWLYHWKDQSLOLQJRQPRUHSUHYHQWLRQ
2QWKH,QWHUQHWWKLVWUDQVODWHVWRPRQLWRULQJ,Q2FWREHU0LFURVRIWGLVFRYHUHGWKDWDQDWWDFNHUKDGSHQHWUDWHGLWVFRUSRUDWHQHWZRUNZHHNVEHIRUHDQGPLJKWKDYHYLHZHGRUHYHQDOWHUHGWKHVRXUFHFRGHIRU
VRPHRIWKHLUSURGXFWV$GPLQLVWUDWRUVGLVFRYHUHGWKLVEUHDFKZKHQWKH\QRWLFHGWZHQW\QHZDFFRXQWVEHLQJFUHDWHGRQDVHUYHU7KHQWKH\ZHQWEDFNWKURXJKWKHLUQHWZRUNVDXGLWORJVDQGSLHFHGWRJHWKHUKRZWKHDWWDFNHUJRWLQDQGZKDWKHGLG,IVRPHRQHKDGEHHQPRQLWRULQJWKRVHDXGLWORJVDXWRPDWLFDOO\JHQHUDWHGE\WKHILUHZDOOVVHUYHUVURXWHUVHWFLQUHDOWLPHWKHDWWDFNHUFRXOGKDYHEHHQGHWHFWHGDQGUHSHOOHGDWWKHSRLQWRIHQWU\
7KDWVUHDOVHFXULW\,WGRHVQWPDWWHUKRZWKHDWWDFNHUJHWVLQRUZKDWKHLVGRLQJ,IWKHUHDUHHQRXJKPRWLRQVHQVRUVHOHFWULFH\HVDQGSUHVVXUHSODWHVLQ\RXUKRXVH\RXOOFDWFKWKHEXUJODUUHJDUGOHVVRIKRZKHJRWLQ,I\RXDUHPRQLWRULQJ\RXUQHWZRUNFDUHIXOO\HQRXJK\RXOOFDWFKDKDFNHUUHJDUGOHVVRIZKDWYXOQHUDELOLW\KHH[SORLWHGWRJDLQDFFHVV$QGLI\RXFDQUHVSRQGTXLFNO\DQGHIIHFWLYHO\\RXFDQUHSHOWKHDWWDFNHUEHIRUHKHGRHVDQ\GDPDJH*RRGGHWHFWLRQDQGUHVSRQVHFDQPDNHXSIRULPSHUIHFWSUHYHQWLRQ
$QGSUHYHQWLRQV\VWHPVDUHQHYHUSHUIHFW1REDQNHYHUVD\V2XUVDIHLVVRJRRGZHGRQWQHHGDQDODUPV\VWHP1RPXVHXPHYHUVD\V2XUGRRUDQGZLQGRZORFNVDUHVRJRRGZHGRQWQHHGQLJKWZDWFKPHQ'HWHFWLRQDQGUHVSRQVHDUHKRZZHJHWVHFXULW\LQWKHUHDOZRUOGDQGWKH\UHWKHRQO\ZD\ZHFDQSRVVLEO\JHWVHFXULW\RQWKH,QWHUQHW&,2VPXVWLQYHVWLQQHWZRUNPRQLWRULQJVHUYLFHVLIWKH\DUHWRSURSHUO\PDQDJHWKHULVNVDVVRFLDWHGZLWKWKHLUQHWZRUNLQIUDVWUXFWXUH
0RQLWRULQJDQG
5HVLOLHQW6HFXULW\
'XULQJWKHFRXUVHRIWKH\HDUVHYHUDOJURXSVRI(DVWHUQ(XURSHDQKDFNHUVEURNHLQWRDWOHDVWFRPSDQLHVo:HEVLWHVVWROHFUHGLWFDUGQXPEHUVDQGLQVRPHFDVHVWULHGWRH[WRUWPRQH\IURPWKHLUYLFWLPV7KHQHWZRUNYXOQHUDELOLWLHVH[SORLWHGE\WKHVH
FULPLQDOVZHUHNQRZQDQGSDWFKHVWKDWFORVHGWKHPZHUHDYDLODEOHtEXWQRQHRIWKHFRPSDQLHVKDGLQVWDOOHGWKHP,Q-DQXDU\WKH5DPHQZRUPWDUJHWHGNQRZQYXOQHUDELOLWLHVLQVHYHUDOYHUVLRQVRI5HG+DW/LQX[1RQHRIWKHWKRXVDQGVRILQIHFWHGV\VWHPVKDG
WKHLUSDWFKHVXSWRGDWH,Q2FWREHU0LFURVRIWZDVPROHVWHGE\XQNQRZQKDFNHUVZKRZDQGHUHGXQFKDOOHQJHGWKURXJKWKHLUQHWZRUNDFFHVVLQJLQWHOOHFWXDOSURSHUW\IRUZHHNVRUPRQWKV$FFRUGLQJWRUHSRUWVWKHDWWDFNHUVZRXOGQRWKDYHEHHQDEOH
WREUHDNLQLI0LFURVRIWoVSDWFKHVKDGEHHQXSWRGDWH7KHVHULHVRIKLJKSURILOHFUHGLWFDUGWKHIWVLQ-DQXDU\LQFOXGLQJWKH&'8QLYHUVHLQFLGHQWZHUHDOVRWKHUHVXOWRIXQLQVWDOOHGSDWFKHV$SDWFKLVVXHGHLJKWHHQPRQWKVSUHYLRXVO\ZRXOGKDYHSURWHFWHGWKHVH
FRPSDQLHV
8/7/2019 Managed Securty Monitoring
9/18
3DJH %UXFH6FKQHLHU
0RQLWRULQJ1HWZRUN6HFXULW\
0RQLWRULQJWKHVHFXULW\RIDEXLOGLQJLPSOLHVVHYHUDOWKLQJV,WLPSOLHVDVHULHVRIVHQVRUVLQDQGDURXQGWKHEXLOGLQJ,WLPSOLHVDFHQWUDODODUPWKDWULQJVLIWKHVHQVRUVDUHWULSSHG$QGLWLPSOLHVVRPHNLQGRIUHVSRQVHWRWKHDODUP,IWKHUHVQRUHVSRQVHWKHDODUPLVXVHOHVV7KLQNRIDFDUDODUPJRLQJRIILQWKHLQQHUFLW\LIQRRQHQRWLFHVRUFDUHVLWKDVQRYDOXH
1HWZRUNPRQLWRULQJLPSOLHVVHYHUDOVLPLODUWKLQJV,WLPSOLHVDVHULHVRIVHQVRUVLQDQGDURXQGWKHQHWZRUN/XFNLO\WKHVHDUHDOUHDG\LQSODFH(YHU\ILUHZDOOSURGXFHVDFRQWLQXRXVVWUHDPRIDXGLWPHVVDJHV6RGRHV
HYHU\URXWHUDQGVHUYHU,'6VVHQGPHVVDJHVZKHQWKH\QRWLFHVRPHWKLQJ(YHU\RWKHUVHFXULW\SURGXFWJHQHUDWHVDODUPVLQVRPHZD\
%XWWKHVHVHQVRUVE\WKHPVHOYHVGRQRWRIIHUVHFXULW\
8/7/2019 Managed Securty Monitoring
10/18
0DQDJHG6HFXULW\0RQLWRULQJ 3DJH
VWHSRIJRRGQHWZRUNPRQLWRULQJ(YHU\DWWDFNKDVDUHVSRQVH,WFRXOGEHDVVLPSOHDVVKXWWLQJRIIDSDUWLFXODU,3DGGUHVVWRUHSHODQDWWDFNHU,WFRXOGEHDV
GUDVWLFDVWDNLQJDFRUSRUDWHQHWZRUNRIIWKH,QWHUQHW$JDLQSHRSOHDUHWKHNH\6RIWZDUHFDQRQO\SURYLGHJHQHULFLQIRUPDWLRQUHDOXQGHUVWDQGLQJUHTXLUHVH[SHUWV
$QGILQDOO\WKHUHVSRQVHPXVWEHLQWHJUDWHGZLWKWKHEXVLQHVVQHHGVRIWKHRUJDQL]DWLRQ6HFXULW\HQJLQHHUVRQO\VHHKDOIWKHLQIRUPDWLRQ7KH\XQGHUVWDQGDWWDFNVDQGWKHLUVHFXULW\VLJQLILFDQFHEXWWKH\GRQWXQGHUVWDQGWKHEXVLQHVVUDPLILFDWLRQV$ODUJHHEXVLQHVV
PLJKWNHHSLWV:HEVLWHXSDQGUXQQLQJHYHQLILWLVEHLQJDWWDFNHGSUHYHQWLQJWKHORVVRIUHYHQXHPD\EHPRUHLPSRUWDQWWKDQWKHVLWHVLPPHGLDWHVHFXULW\2QWKHRWKHUKDQGDODZILUPPD\KDYHWKHH[DFWRSSRVLWHUHVSRQVHWKHVDQFWLW\RILWVFXVWRPHUVGDWDPLJKWEHPRUHLPSRUWDQWWKDQKDYLQJLWV:HEVLWHDYDLODEOH
7KLVLVGHWHFWLRQDQGUHVSRQVHDVDSSOLHGWRFRPSXWHUQHWZRUNV1HWZRUNGHYLFHVSURGXFHPHJDE\WHVRIDXGLWLQIRUPDWLRQGDLO\$XWRPDWLFVHDUFKWRROVVLIWWKURXJK
WKRVHPHJDE\WHVORRNLQJIRUWHOOWDOHVLJQVRIDWWDFNV([SHUWDQDO\VWVH[DPLQHWKRVHWHOOWDOHVXQGHUVWDQGLQJZKDWWKH\PHDQDQGGHWHUPLQLQJKRZWRUHVSRQG$QGWKHRZQHURIWKHQHWZRUNWKHRUJDQL]DWLRQPDNHVVHFXULW\GHFLVLRQVEDVHGRQRQJRLQJEXVLQHVVFRQFHUQV
7RPDNHQHWZRUNPRQLWRULQJZRUNSHRSOHDUHQHHGHGHYHU\VWHSRIWKHZD\6RIWZDUHLVMXVWWRRHDV\WRIRRO6RIWZDUHGRHVQWWKLQNGRHVQWTXHVWLRQGRHVQWDGDSW:LWKRXWSHRSOHFRPSXWHUVHFXULW\VRIWZDUHLVMXVWD
VWDWLFGHIHQVH0DUU\VRIWZDUHZLWKH[SHUWVDQG\RXKDYHDZKROHGLIIHUHQWOHYHORIVHFXULW\
2XWVRXUFLQJ0RQLWRULQJ
7KHNH\WRDVXFFHVVIXOGHWHFWLRQDQGUHVSRQVHV\VWHPLVYLJLODQFHDWWDFNVFDQKDSSHQDWDQ\WLPHRIWKHGD\DQGDQ\GD\RIWKH\HDU:KLOHLWLVSRVVLEOHIRUFRPSDQLHVWREXLOGGHWHFWLRQDQGUHVSRQVHVHUYLFHVIRUWKHLURZQQHWZRUNVLWVUDUHO\FRVWHIIHFWLYH6WDIILQJIRUVH
FXULW\H[SHUWLVHKRXUVDGD\DQGGD\VD\HDUUHTXLUHVILYHIXOOWLPHHPSOR\HHVPRUHLI\RXLQFOXGHVXSHUYLVRUVDQGEDFNXSSHUVRQQHOZLWKPRUHVSHFLDO
7KRVHZKRPDQDJHFRPSXWHUQHWZRUNVDUHSHRSOHWRRDQGSHRSOHGRQoW
DOZD\VGRWKHVPDUWHVWWKLQJ7KH\NQRZWKH\oUHVXSSRVHGWRLQVWDOODOOSDWFKHV%XWVRPHWLPHVWKH\FDQoWWDNHFULWLFDOV\VWHPVRIIOLQH6RPHWLPHVWKH\GRQoWKDYHWKHVWDIILQJDYDLODEOHWRSDWFKHYHU\V\VWHPRQWKHLUQHWZRUN6RPHWLPHVDSSO\LQJDSDWFKEUHDNV
VRPHWKLQJHOVHRQWKHLUQHWZRUN,WKLQNLWoVWLPHWKHLQGXVWU\UHDOL]HGWKDWH[SHFWLQJWKHSDWFKSURFHVVWRLPSURYHQHWZRUNVHFXULW\MXVWGRHVQoWZRUN
6HFXULW\EDVHGRQSDWFKHVLVLQKHUHQWO\IUDJLOH$Q\ODUJHQHWZRUNLVJRLQJWRKDYHKXQGUHGV
RIYXOQHUDELOLWLHV,IWKHUHoVDYXOQHUDELOLW\LQ\RXUV\VWHP\RXFDQEHDWWDFNHGVXFFHVVIXOO\DQGWKHUHoVQRWKLQJ\RXFDQGRDERXWLW(YHQLI\RXPDQDJHWRLQVWDOOHYHU\SDWFK\RXNQRZDERXWZKDWDERXWWKHYXOQHUDELOLWLHVWKDWKDYHQoWEHHQSDWFKHG\HW"7KDWVDPH
DOHUWVHUYLFHOLVWHGQHZYXOQHUDELOLWLHVIRUZKLFKWKHUHDUHQRSDWFKHV2UWKHYXOQHUDELOLWLHVGLVFRYHUHGEXWQRWUHSRUWHG\HW"2UWKHRQHVVWLOOXQGLVFRYHUHG"
*RRGVHFXULW\LVUHVLOLHQW,WoVUHVLOLHQWWRXVHUHUURUV,WoVUHVLOLHQWWRQHW
ZRUNFKDQJHV$QGLWoVUHVLOLHQWWRDGPLQLVWUD
8/7/2019 Managed Securty Monitoring
11/18
3DJH %UXFH6FKQHLHU
L]HGVNLOOV(YHQLIDQRUJDQL]DWLRQFRXOGILQGWKHEXGJHWIRUDOORIWKHVHSHRSOHLWZRXOGEHYHU\GLIILFXOWWRKLUHWKHPLQWRGD\VMREPDUNHW
5HWDLQLQJWKHPZRXOGEHHYHQKDUGHU6HFXULW\PRQLWRULQJLVLQKHUHQWO\EXUVW\VL[ZHHNVRIERUHGRPIROORZHGE\HLJKWKRXUVRISDQLFWKHQVHYHQZHHNVRIERUHGRPIROORZHGE\VL[KRXUVRISDQLF$WWDFNVDJDLQVWDVLQJOHRUJDQL]DWLRQGRQWKDSSHQRIWHQHQRXJKWRNHHSDWHDPRIWKLVFDOLEHUHQJDJHGDQGLQWHUHVWHG
,QWKHUHDOZRUOGWKLVNLQGRIH[SHUWLVHLVDOZD\VRXWVRXUFHG,WVWKHRQO\FRVWHIIHFWLYHZD\WRVDWLVI\WKH
UHTXLUHPHQWV,PD\RQO\QHHGDGRFWRUWZLFHLQWKHFRPLQJ\HDUEXWZKHQ,QHHGRQH,PD\QHHGKLPLPPHGLDWHO\,PD\QHHGVSHFLDOLVWV2XWRIDKXQGUHGSRVVLEOHVSHFLDOWLHV,PD\QHHGWZRRIWKHPDQG,KDYHQRLGHDEHIRUHKDQGZKLFKRQHV,ZRXOGQHYHUFRQVLGHUKLULQJDWHDPRIGRFWRUVWRZDLWDURXQGXQWLO,KDSSHQWRJHWVLFN,RXWVRXUFHP\PHGLFDOQHHGVWRP\FOLQLFP\HPHUJHQF\URRPP\KRVSLWDO6LPLODUO\DQHWZRUNQHHGVWRRXWVRXUFHLWVVHFXULW\PRQLWRULQJWRDQ060VHUYLFH
$VLGHIURPWKHDJJUHJDWLRQRIH[SHUWLVHDQ060VHUYLFHKDVRWKHUHFRQRPLHVRIVFDOH,WFDQPRUHHDVLO\KLUHDQGWUDLQLWVSHUVRQQHOVLPSO\EHFDXVHLWQHHGVPRUHRIWKHP$QGLWFDQEXLOGDQLQIUDVWUXFWXUHWRVXSSRUWWKHP9LJLODQWPRQLWRULQJPHDQVNHHSLQJXSWRGDWHRQQHZYXOQHUDELOLWLHVQHZKDFNHUWRROVQHZVHFXULW\SURGXFWVDQGQHZVRIWZDUHUHOHDVHV$Q060VHUYLFHFDQVSUHDGWKHVHFRVWVDPRQJDOORILWVFXVWRPHUV
$Q060SURYLGHUDOVRKDVDPXFKEURDGHUYLHZRIWKH,QWHUQHW,WFDQOHDUQIURPDWWDFNVDJDLQVWRQHFXVWRPHUDQGXVHWKDWNQRZOHGJHWRSURWHFWDOORILWVFXVWRPHUV$QGIURPLWVSRLQWRIYLHZDWWDFNVDUHIUHTXHQW7KHUHVDUHDVRQ\RXGRQWKDYH\RXURZQILUHGHSDUWPHQWHYHQLI\RXFDQDIIRUGRQH:KHQWKHILUHGHSDUWPHQWFRPHVWR\RXUKRXVH\RXZDQWLWWRKDYHSUDFWLFHGRQWKHUHVWRIWKHQHLJKERUKRRG7RDQ060FRPSDQ\QHWZRUNDWWDFNVDUHHYHU\GD\RFFXUUHQFHVLWVH[SHUWVNQRZH[DFWO\KRZWRUHVSRQGWRDQ\JLYHQDW
WDFNEHFDXVHLQDOOOLNHOLKRRGWKH\KDYHDOUHDG\VHHQWKHVDPHDWWDFNPDQ\WLPHVEHIRUH
WRUVQRWLQVWDOOLQJHYHU\SDWFK0DQDJHG6HFXULW\0RQLWRULQJLVDQLPSRU
WDQWSDUWRIWKDWUHVLOLHQFH0RQLWRULQJPDNHVDQHWZRUNOHVVGHSHQGHQWRQNHHSLQJSDWFKHVXSWRGDWHLWoVDSURFHVVWKDWSURYLGHVVHFXULW\HYHQLQWKHIDFHRIHYHUSUHVHQWYXOQHUDELOLWLHVXQLQVWDOOHGSDWFKHVDQGLPSHUIHFWSURGXFWV
,QDSHUIHFWZRUOGV\VWHPVZRXOGUDUHO\QHHGVHFXULW\SDWFKHV7KHIHZSDWFKHVWKH\GLGQHHGZRXOGDXWRPDWLFDOO\GRZQORDGEHHDV\WRLQVWDOODQGDOZD\VZRUN%XWZHGRQoWOLYHLQDSHUIHFWZRUOG1HWZRUNDGPLQLVWUDWRUVDUHEXV\SHRSOHDQGQHWZRUNVDUHFRQVWDQWO\FKDQJLQJ
9LJLODQWPRQLWRULQJLVE\QRPHDQVDSDQDFHDEXWLWLVDPXFKPRUHUHDOLVWLFZD\RISURYLGLQJUHVLOLHQWVHFXULW\
8/7/2019 Managed Securty Monitoring
12/18
8/7/2019 Managed Securty Monitoring
13/18
3DJH %UXFH6FKQHLHU
ZRUNFKDQJHVHYHU\GD\QHZDSSOLFDWLRQVQHZVHUYHUVQHZYXOQHUDELOLWLHV$&,2FDQJRWRVOHHSRQHQLJKWFRQILGHQWWKDWKLVQHWZRUNLVVHFXUHDQGZDNHXSWKH
IROORZLQJPRUQLQJWRUHDGDERXWDPDMRUYXOQHUDELOLW\LQWKHQHZVSDSHU6XGGHQO\KLVQHWZRUNLVZLGHRSHQHYHQWKRXJKQRWKLQJFKDQJHG$&,2FDQUHFRQILJXUHKLVQHWZRUNWRLQFUHDVHSURGXFWLYLW\RUDGGDQHZQHWZRUNVHUYLFHRUVLPSO\XSJUDGHDVRIWZDUHSDFNDJHDQGVXGGHQO\WKHVHFXULW\RIKLVHQYLURQPHQWLVFRPSOHWHO\GLIIHUHQW1HWZRUNVDUHH[WUHPHO\FRPSOH[QRQOLQHDUDQGWLJKWO\FRXSOHGDQGLWVLPSRVVLEOHWRSUHGLFWKRZGLIIHUHQWVXEV\VWHPVLQWHUDFW+RZGRHVKHNQRZWKHVHFXULW\UDPLILFDWLRQVRIZKDWKHGRHV"7KH
RQO\ZD\LVWRPRQLWRUVHFXULW\
,WVVSHFLRXVORJLFIRUD&,2WRGHFLGHWRZDLWXQWLOKLVQHWZRUNLVVWDEOHKHXQGHUVWDQGVKLVVHFXULW\DQGDOOKLVSDWFKHVDUHXSWRGDWH,WOOQHYHUKDSSHQ0RQLWRULQJVEHVWYDOXHLVZKHQDQHWZRUNLVLQIOX[DVDOOODUJHQHWZRUNVDOZD\VDUHGXHWRLQWHUQDODQGH[WHUQDOIDFWRUV0RQLWRULQJSURYLGHVLPPHGLDWHVHFXULW\LQDZD\WKDWMXVWGRLQJDYXOQHUDELOLW\DVVHVVPHQWRUGURSSLQJDILUHZDOOLQWRDQHWZRUNFDQQHYHUSURYLGH0RQL
WRULQJSURYLGHVG\QDPLFVHFXULW\LQDZD\WKDW\HWDQRWKHUVHFXULW\SURGXFWFDQQHYHUSURYLGH$QGDVVHFXULW\SURGXFWVDUHDGGHGLQWRDQHWZRUNILUHZDOOV,'6VVSHFLDOL]HGVHFXULW\GHYLFHVPRQLWRULQJRQO\JHWVEHWWHU
,QHQJLQHHULQJFRQWUROWKHRU\LVEDVHGRQWKHFRQFHSWRIPRQLWRULQJ$QHQJLQHHUPLJKWZDQWWREHDEOHWRWXQHKLVIDFWRU\+RZFDQ,FRQWUROWKLVSODVWLFILOPH[WUXGHUWRHQVXUHDXQLIRUPWKLFNQHVVRISODVWLF"7KLV
LVDUHDOTXHVWLRQDQGDFRPSOLFDWHGRQH7KHSODVWLFVH[WUXGHUPLJKWKDYHDGR]HQGLIIHUHQWGLDOVFRQWUROOLQJWKLQJVOLNHWHPSHUDWXUHSUHVVXUHDQGVSHHG
8/7/2019 Managed Securty Monitoring
14/18
8/7/2019 Managed Securty Monitoring
15/18
3DJH %UXFH6FKQHLHU
DVVLVWDQFHLQVWRSSLQJWKHDWWDFNDQGFORVLQJWKHYXOQHUDELOLW\7RXVWKHQHWZRUNDUFKLWHFWXUHDQGVHFXULW\SURGXFWVDUHMXVWWKHWHUUDLQZHILJKWRQ
&RXQWHUSDQHVYDOXHUHVLGHVSULPDULO\LQRXUDQDO\VWV7KH\DUHH[SHUWVLQQHWZRUNVHFXULW\H[SHULHQFHGIURPGHIHQGLQJDJDLQVWFRXQWOHVVDWWDFNVRQFXVWRPHUQHWZRUNVDQGUHLQIRUFHGE\DIDVWHVFDODWLRQSURFHGXUHWKDWFDQFDOOLQWKHZRUOGVEHVWH[SHUWVZKHQUHTXLUHG7KH\DUHYLJLODQWFRQVWDQWO\ZDWFKLQJFXVWRPHUQHWZRUNVIRUVLJQVRIDWWDFN7KH\DUHDGDSWLYHDEOHWRVHHQHZDWWDFNVWKDWDXWRPDWLFSURGXFWVPLVVDQGUHVSRQGWRWKHP$QGWKH\DUHUHOHQWOHVVLQWKHLUSXUVXLWRIVH
FXULW\
&RXQWHUSDQHVDQDO\VWVDUHDLGHGE\VHYHUDOSURFHVVHV)LUVWWKHUHLVWKHSURFHVVWKDWFROOHFWVLQIRUPDWLRQIURPWKHFOLHQWVQHWZRUNVDQGSUHVHQWVLWLQDIRUPWKDWWKHDQDO\VWVFDQHIILFLHQWO\XQGHUVWDQGDQGDQDO\]HWKLVLVRXU6HQWU\6HFRQGWKHUHLVWKHSURFHVVE\ZKLFKWKHQHWZRUNLQIRUPDWLRQLVPDWFKHGZLWKDGLDJQRVLVRUVHULHVRIGLDJQRVHVWKLVLVWKH6RFUDWHVV\VWHP7KLUGWKHUHLVWKHSURFHVVZLWKLQ6RFUDWHVE\ZKLFKWKH
QHWZRUNLQIRUPDWLRQDQGGLDJQRVLVDUHPDWFKHGZLWKFOLHQWVSHFLILFLQIRUPDWLRQDERXWWKHVHULRXVQHVVRIGLIIHUHQWVRUWVRIQHWZRUNHYHQWV$QGIRXUWKWKHUHLVWKHSURFHVVE\ZKLFKERWKWKH6HQWU\DQG6RFUDWHVDUHXSGDWHGZLWKQHZLQIRUPDWLRQDERXWDWWDFNVYXOQHUDELOLWLHVSURGXFWVHWF7KLVLVRXU1HWZRUN,QWHOOLJHQFHIXQFWLRQ:HFRQVWDQWO\VFRXUVHFXULW\GDWDEDVHVDQGUHVHDUFKLQVWLWXWLRQVDQGHYHQWKHKDFNHUXQGHUJURXQGORRNLQJIRUQHZDWWDFNVQHZYXOQHUDELOLWLHVDQGQHZKDFNHUWRROVPRGLI\LQJ6RFUDWHVWRWDNHWKLV
LQIRUPDWLRQLQWRDFFRXQW
,WVQRWMXVWVPDUWSHRSOHDQGVPDUWSURFHVVHVWKDWPDNH&RXQWHUSDQHV060ZRUNLWVWKHZD\ZHGHYHORSRXUDQDO\VWV:HKDYHH[DFWLQJKLULQJUHTXLUHPHQWV:HUXQEDFNJURXQGFKHFNVDQGSHUIRUPULJRURXVSHUVRQDOVFUHHQLQJ2XUWUDLQLQJSURJUDPUHVHPEOHVERRWFDPSLWVDUGXRXVLWVGHPDQGLQJDQGQRWHYHU\RQHPDNHVLW([SHULHQFHGDQDO\VWVPHQWRUQHZDQDO\VWV,QWKHHQGWKHUHLVDQHVSULWGHFRUSVWKDW
ZLOOGRHYHU\WKLQJSRVVLEOHWRGHIHQGWKHFXVWRPHU$QGLQWKHHQG&RXQWHUSDQHLVKLUHGEHFDXVHFRPSDQLHVZDQWWKDWHVSULWGHFRUSVGHIHQGLQJWKHP
,QWUXVLRQ
'HWHFWLRQ6\VWHPV
DQG0RQLWRULQJ5HFHQWO\,oYHEHHQVHHLQJVHYHUDODUWLFOHVIRUHWHOOLQJWKHGHDWKRI,QWUXVLRQ'HWHFWLRQ6\VWHPV,'66XSSRVHGO\FKDQJHVLQWKHZD\QHWZRUNVZRUNZLOOPDNHWKHPDQREVROHWHUHOLFRIVLPSOHUWLPHV:KLOH,DJUHHWKDWWKHFKDOOHQJHV,'6VIDFHDUH
VHULRXVDQGWKDWWKH\ZLOODOZD\VKDYHOLPLWDWLRQV,DPPRUHRSWLPLVWLFDERXWWKHLUIXWXUH
,'6VDUHWKHQHWZRUNHTXLYDOHQWRIYLUXVVFDQQHUV,'6VORRNDWQHWZRUNWUDIILFRUSURFHVVHVUXQQLQJRQKRVWVIRUVLJQVRIDWWDFN
,IWKH\VHHRQHWKH\VRXQGDQDODUP,Q6HFUHWVDQG/LHV,VSHQWVHYHUDOSDJHVRQ,'6VSSsKRZWKH\ZRUNKRZWKH\IDLOWKHSUREOHPVRIIDOVHDODUPV6XIILFHLWWRVD\WKDWWKHWZRSUREOHPV,'6VKDYHDUHIDLOLQJWRGHWHFWUHDODWWDFNVDQGIDLOLQJ
WRLJQRUHIDOVHDODUPV6PDUWDGPLQLVWUDWRUVUHJXODUO\LJQRUHpFKDWW\q,'6V\VWHPVEHFDXVHWKH\DUHJHWWLQJVRPDQ\IDOVHSRVLWLYHPHVVDJHV$QGKDFNHUWRROVVSHFLILFDOO\GHVLJQHGWRE\SDVV,'6VDUHFRPPRQ
7KHVHWZRSUREOHPVDUHQRWKLQJQHZEXWVHYHUDOUHFHQWGHYHORSPHQWV
8/7/2019 Managed Securty Monitoring
16/18
0DQDJHG6HFXULW\0RQLWRULQJ 3DJH
&RXQWHUSDQHVDQDO\VWVZRUNLQRXU62&V:HFXUUHQWO\KDYHWZR62&VDSULPDU\IDFLOLW\LQ&KDQWLOO\9$DQGDVHFRQGDU\IDFLOLW\LQ0RXQWDLQ9LHZ&$
+DYLQJPXOWLSOH62&VLVNH\WRJXDUDQWHHLQJXQLQWHUUXSWHGVHUYLFH7KHVHDUHERWKSK\VLFDOO\KDUGHQHGIDFLOLWLHVHQWUDQFHUHTXLUHVDSDVVZRUGDELRPHWULFDQGDSK\VLFDODFFHVVWRNHQ7KH62&VDUHXQGHUFRQVWDQWVXUYHLOODQFHDXGLRYLGHRDQGFOLFNVWUHDPWRSURYLGHDQXQDPELJXRXVDXGLWWUDLO,QIDFWWKHWZR62&VPRQLWRUHDFKRWKHUDQGFDQIRUFHDVZLWFKRYHULIWKHUHLVDSUREOHP7KHLQWHUQDOQHWZRUNLVSK\VLFDOO\LVRODWHGIURPWKHJHQHUDO,QWHUQHWEXWGLVWULEXWHGDPRQJWKH62&V1RQHRIWKHZRUNVWDWLRQVFDQFUHDWHRUUHDG
UHPRYDEOHPHGLD7KLVOHYHORIVHFXULW\PD\VHHPH[FHVVLYHEXWWRXVLWLVYLWDOWRHQVXUHWKHVHFXULW\RIRXUFXVWRPHUVQHWZRUNV
7KHH\HVDQGHDUVRI&RXQWHUSDQHV060VHUYLFHDUHWKHVHQVRUVRQDQHWZRUN6RPHVHQVRUVDUHDOUHDG\LQSODFHDQGFDQLPPHGLDWHO\SURYLGHLQIRUPDWLRQWR&RXQWHUSDQH7KHVHDUHURXWHUVVHUYHUVILUHZDOOVDQGRWKHUQHWZRUNGHYLFHV2WKHUVHQVRUVDUHVHFXULW\VSHFLILFDQGPXVWEHVSHFLDOO\LQVWDOOHGRQDQHWZRUN
,'6VKRQH\SRWVDQGRWKHU,QWHUQHWEXUJODUDODUPVFRQWHQWSURWHFWLRQV\VWHPVDQGDSSOLFDWLRQVHFXULW\GHYLFHV
&RXQWHUSDQHVXQLTXHVHFXULW\YDOXHFRPHVIURPFRUUHODWLQJLQIRUPDWLRQIURPGLIIHUHQWVHQVRUV2IWHQDWWDFNVDUHQRWREYLRXVIURPDVLQJOHORJHQWU\EXWRQO\IURPDSDWWHUQRIDFWLYLW\%HFDXVH&RXQWHUSDQHPRQLWRUVDOOVHQVRUVRQDFRPSDQ\VQHWZRUNLWFDQVHHWKLQJVWKDWQRVLQJOHVHQVRUFDQ7KLVLVDFULWLFDOGLI
IHUHQFHEHWZHHQ&RXQWHUSDQHDQGRWKHUPRQLWRULQJFRPSDQLHVZHGRQWMXVWZDWFKDILUHZDOODQGDQ,'6ZHGRQWMXVWZDWFKDOLPLWHGPHQXRIVHFXULW\SURGXFWVZHZDWFKHYHU\WKLQJRQDFXVWRPHUVQHWZRUN7KLVJLYHV&RXQWHUSDQHVHFXULW\DUHVLOLHQFHXQPDWFKHGLQWKHLQGXVWU\
$FRPSDQ\FRXOGLQWKHRU\DWWHPSWWRUHSOLFDWH&RXQWHUSDQHVPRQLWRULQJLQWKHLURZQQHWZRUN7KLVZRXOGUHTXLUHDWOHDVWILYHSHRSOHWRVWDIIDVLQJOHPRQLWRULQJ
VWDWLRQ[,WZRXOGUHTXLUHDGGLWLRQDOH[SHUWVIRUVSHFLILFSURGXFWVDQGSUREOHPVDWHDPWRPRQLWRUWKHVHFXULW\QHZVJURXSVDQGKDFNHUXQGHUJURXQGPRUH
WKUHDWHQWRXQGHUPLQH,'6VFRPSOHWHO\
)LUVWLVWKHULVHRI,3VHF,3VHFLVDVHFXULW\SURWRFROWKDWHQFU\SWV,3WUDIILF$Q,'6FDQoWGHWHFWZKDWLWFDQoWXQGHUVWDQGDQGLVXVHOHVVDJDLQVWHQFU\SWHGQHWZRUNWUDIILF$VHQFU\SWLRQEHFRPHVPRUHZLGHVSUHDGRQDQHWZRUNDQ,'6EHFRPHVOHVVXVHIXO
6HFRQGLVWKHHPHUJHQFHRI8QLFRGH,QWKH-XO\&U\SWR*UDP,WDONHGDERXWVHFXULW\SUREOHPVDVVRFLDWHGZLWK8QLFRGH2QHSUREOHPLVWKHDELOLW\WRGLVJXLVHFKDUDFWHUVWULQJVLQYDULRXVZD\V6LQFHPRVW,'6VORRNIRUFKDUDFWHUVWULQJVLQSDFNHWVLQGL
FDWLQJFHUWDLQQHWZRUNDWWDFNV8QLFRGHWKUHDWHQVWRPDNHWKLVMREXQIHDVLEOH
7KLUGLVWKHLQFUHDVHGGLVWULEXWLRQRIQHWZRUNV7RGD\oVWUDIILFLVQoWMXVWFRPLQJWKURXJKRQHILUHZDOOEXWDOVRWKURXJKKXQGUHGVRIGLIIHUHQWGLUHFWH[WHUQDOOLQNVWRFXVWRPHUVVXSSOLHUVMRLQWYHQWXUHSDUWQHUVRXWVRXUFLQJFRPSDQLHV,3VHFJDWHZD\VIRUWHOHFRPPXWHUVDQGURDGZDUULRUVHWF7KLVPDNHVLWYHU\KDUGWRPRQLWRUWKHWUDIILF
$QGIRXUWKLVWKHVKHHUVSHHGRIQHWZRUNV)RUDQ
,'6WREHHIIHFWLYHLWKDVWRH[DPLQHHYHU\SDFNHW
8/7/2019 Managed Securty Monitoring
17/18
3DJH %UXFH6FKQHLHU
SHRSOHWRFRQVWDQWO\WUDLQDQGGULOOWKHWHDPDQGDVHFXUHIDFLOLW\WRKRXVHDOORIWKLV$QGHYHQWKHQWKHLQKRXVHJURXSZRXOGQRWEHDVTXDOLILHGDV&RXQWHUSDQH
7KH\ZRXOGQRWKDYHWKHH[SHULHQFHRIPRQLWRULQJKXQGUHGVRIGLIIHUHQWFXVWRPHUVQHWZRUNV7KH\ZRXOGQRWKDYH&RXQWHUSDQHVWUDLQLQJ7KH\ZRXOGQRWKDYHDFFHVVWR&RXQWHUSDQHV1HWZRUN,QWHOOLJHQFHRULWV6RFUDWHVV\VWHP7KH\ZRXOGQRWKDYHDFFHVVWR&RXQWHUSDQHVH[SHUWV:KHQDFRPSDQ\LVDWWDFNHGLWQHHGVWKHEHVWSRVVLEOHSHRSOHZRUNLQJWRGHIHQGLW&RXQWHUSDQHV060VHUYLFHFDQSURWHFWDQHWZRUNEHWWHUWKDQGRLQJLW\RXUVHOIDQGDWDIUDFWLRQRIWKHFRVW
&RQFOXVLRQ
1HWZRUNVHFXULW\ULVNVZLOODOZD\VEHZLWKXV7KHGRZQVLGHRIEHLQJLQDKLJKO\FRQQHFWHGQHWZRUNLVWKDWZHDUHDOOFRQQHFWHGZLWKWKHEHVWDQGZRUVWRIVRFLHW\6HFXULW\SURGXFWVZLOOQRWVROYHWKHSUREOHPVRI,QWHUQHWVHFXULW\DQ\PRUHWKDQWKH\VROYHWKHVHFXULW\SUREOHPVLQWKHUHDOZRUOG7KHEHVWZHFDQGRLVWRPDQDJHWKHULVNVHPSOR\WHFKQRORJLFDODQGSURFHGXUDOPLWLJDWLRQZKLOHDWWKHVDPHWLPHDOORZLQJEXVLQHVVHVWRWKULYH
&RPSXWHUVHFXULW\HTXDOVYLJLODQFHDGD\WRGD\SURFHVV,WVEHHQWKRXVDQGVRI\HDUVDQGWKHZRUOGVWLOOLVQWDVDIHSODFH$QGQRPDWWHUKRZIDVWWHFKQRORJ\DGYDQFHVDODUPVDQGVHFXULW\VHUYLFHVDUHVWLOOVWDWHRIWKHDUW
7KHNH\WRHIIHFWLYHVHFXULW\LVKXPDQLQWHUYHQWLRQ$XWRPDWLFVHFXULW\LVQHFHVVDULO\IODZHG6PDUWDWWDFN
HUVE\SDVVWKHVHFXULW\DQGQHZDWWDFNVIRROSURGXFWV3HRSOHDUHQHHGHGWRUHFRJQL]HDQGUHVSRQGWRQHZDWWDFNVDQGQHZWKUHDWV,WVDVLPSOHPDWWHURIUHJDLQLQJDEDODQFHRISRZHUKXPDQPLQGVDUHWKHDWWDFNHUVVRKXPDQPLQGVQHHGWREHWKHGHIHQGHUVDVZHOO
2QWKHGD\\RXUHDWWDFNHG\RXZDQWWKHEHVWSRVVLEOHGHIHQVH,WVQRWHQRXJKWRJLYHWKHMREWR\RXURYHUZRUNHGV\VWHPDGPLQLVWUDWRUVRULQKRXVHVHFXULW\VWDII
8/7/2019 Managed Securty Monitoring
18/18
0DQDJHG6HFXULW\0RQLWRULQJ 3DJH
060FRPELQHVSHRSOHSURFHVVHVDQGSURGXFWVWRFUHDWHDVHFXULW\HQYLURQPHQWIRUWKHFKDRVRIPRGHUQEXVLQHVVQHWZRUNV7KHUHDOLW\RIWRGD\V,QWHUQHW
PDNHV060WKHPRVWFRVWHIIHFWLYHZD\WRSURYLGHUHVLOLHQWVHFXULW\DQG&RXQWHUSDQH,QWHUQHW6HFXULW\,QFLVWKH060LQGXVWU\OHDGHU
2XUSHRSOHDUHQHWZRUNVHFXULW\H[SHUWVRXUVHFXULW\DQDO\VWVDUHXQLTXHO\TXDOLILHGE\WKHLUWRROVWUDLQLQJDQGH[SHULHQFHWRZDWFKDOORI\RXUQHWZRUNQRWMXVWDIHZVHFXULW\GHYLFHV$QGWKH\UHEDFNHGXSE\WKHEHVWVHFXULW\H[SHUWVLQWKHZRUOG7KH\UHYLJLODQWZDWFKLQJ\RXUFRPSOHWHQHWZRUN[7KH\UHUHOHQWOHVVLQSUR
WHFWLQJ\RXUDVVHWV$QGWKH\UHDGDSWLYHDOZD\VRQHVWHSDKHDGRIWKHQHZHVWKDFNHUJURXSSURGXFWYXOQHUDELOLW\RUDWWDFNWRRO
&RXQWHUSDQHV060LPSURYHVDQHWZRUNVVHFXULW\LPPHGLDWHO\WRGD\,WWHOOV\RXZKHWKHU\RXUVHFXULW\LVZRUNLQJDQGVDYHV\RXZKHQLWLVQW%HWWHUWKDQDYXOQHUDELOLW\DVVHVVPHQWEHWWHUWKDQDQDXGLWEHWWHUWKDQLQVWDOOLQJPRUHVHFXULW\SURGXFWV&RXQWHUSDQHV060JLYHV\RXWKHVHFXULW\\RXQHHGWRNHHS\RXU
EXVLQHVVPRYLQJDKHDG,WVWKHILUVWWKLQJ\RXQHHGWRGR
$Q\RQHFDQLQVWDOODVHFXULW\SURGXFWFDUU\DSDJHUDQGSUHWHQGWRPRQLWRUDQHWZRUN&RXQWHUSDQHPDUULHVWKHEHVWSHRSOHDQGWKHEHVWSURFHVVHVWRSURYLGHFRPSOHWHVHFXULW\UHVLOLHQWVHFXULW\DOHYHORIVHFXULW\XQPDWFKHGDQ\ZKHUH
RQHKDVWRZDWFKWKHVHVHQVRUV[6RPHRQHKDVWRFRUUHODWHLQIRU
PDWLRQIURPDYDULHW\RIVHQVRUVDQGILJXUHRXWZKDWoVDIDOVHDODUPDQGZKDWoVUHDO6RPHRQHKDVWRNQRZKRZWRUHVSRQGDQGWRFRDFKWKHQHWZRUNDGPLQLVWUDWRUWKURXJKWKHSURFHVV,WKLQN060ZLOOILQDOO\PDNH,'6VORRNJRRG