Name: Why should organizations integrate their SIEM with an IR Platform?
Start: 2018-12-13T11:00:00Z
End: 2018-12-13T11:03:20.000Z
Location: BrightTALK
Rating: 0

Incident response is in IBM Resilient’s DNA. The Resilient Incident Response Platform pioneered the IR software market. Today, with the best minds in cyber security, including Bruce Schneier, IBM Resilient CTO and Special Advisor at IBM Security, IBM Resilient brings more than 100 years of combined security experience to the platform. A platform that’s continuously refined with input from our customers.

Combining an IRP solution with a SIEM makes security operations more mature in order to triage, reduce the time to respond, improve SOC efficiencies, and gain overall a significantly improved accuracy.

IRP and SIEMs: How to beat the volume vs. visibility

Bruce Schneier: Orchestrated Response to IoT Threats

Orchestrated Response to IoT Threats

AI and Orchestration

Organisations today need to be agile, and dynamic in responding to the most advanced cyber threats, and although automation has it's place in improving SOC efficiencies, human intelligence is still one of the most important aspects in effective incident response. 

In this session learn more about the journey to Intelligent orchestration and how leveraging it in an uncertain world can empower your organisation.

The Orchestration Journey in Incident response

Intelligent Orchestration in Incident Response.

What is Intelligent Orchestration?

The Resilient incident response platform (IRP) empowers cyber security teams to orchestrate their incident response processes, and respond to and resolve incidents faster, more effectively, and more intelligently. The Resilient IRP is the leading platform for orchestrating and automating incident response processes. 

This presentation will showcase the Resilient IRP’s ability to enable complete IR orchestration and automation - aligning security teams' people, process, and technologies into a single hub for incident response. By understanding the capabilities of the solution, attendees can learn how to: 

• Achieve greater intelligence and efficiency by integrating your existing security technologies, including SIEMs, EDR, threat intelligence, and more.

• Adapt to real-time incident conditions with Resilient Dynamic Playbooks –ensuring a fast and complete response to all incident types.

• Build, configure, and maintain your own IR action plans within hours or days

Faster, Efficient, More Intelligent Incident Response Orchestration

The conversation for the upcoming Payment Services Directive (PSD2) has been centered on the digital transformation offered by the new open banking requirements. However, there are major implications for Incident Response (IR) too.

In our upcoming webinar on Tuesday January 23 at 12.00 GMT our security experts, Jamie Cowper and Jess Cholerton, will discuss the following:

- The mandatory incident reporting requirements outlined in PSD2
- How a well-documented, audited IR process is crucial to security teams meeting the four-hour deadline
- The value security orchestration and automation strategies can provide to IR processes for staying compliant

New PSD2 guidelines: Can your team respond to a security incident in 4 hours?

To effectively operate in today's changing threat landscape, organizations must draw upon the widest degree of data and intelligence, as well as relevant operational context in order to identify and respond to attacks. This talk is intended to highlight how automation can be leveraged as part of a wider incident response program to resolve cyber incidents and proactively improve overall security posture.

How Automation & Orchestration Can Improve Your Incident Response

Ask the Expert with Allen Rogers, VP Engineering, IBM Resilient

Ask the Expert with Allen Rogers

Why should organizations integrate their SIEM with an Incident Response Platform?

Why should organizations integrate their SIEM with an IR Platform?

In the current cyber threat landscape, organisations are looking at ways to respond as effectively as possible. This session will look at the role that can be played by OODA loops, a military concept developed to improve fighter pilots' abilities to respond in combat, it stands for Observe, Orient, Decide & Act. Companies can build these concepts into their Incident Response (IR) process to aid clarity of thinking and improve their ability to respond quickly and effectively to cyber attacks.

How a Military Concept can Help Build Your Incident Response Framework

Incident response orchestration and automation are game-changing developments in cyber security – putting people in control and supporting them with the processes and tools they need to fuel dynamic and accelerated response.

An orchestration strategy allows for security teams to process incidents faster and more accurately. And by automating repetitive and menial tasks and delivering the right information to the right analyst at the right time, orchestration can significantly drive down Mean-Time-To-Response.

Join your fellow professionals to learn:

•How orchestration and automation are defined and how the two strategies relate

•How to effectively leverage automation to support an orchestrated incident response function

•Best practices for orchestrating your SOC and achieving faster, more efficient, and intelligent incident response

Orchestration in Incident Response: A Game-Changing Strategy

Organisations in the Middle East are dealing with sophisticated cyberattacks every day. As the volume of these attacks continues to grow, and the adversaries’ attacks become more complex, companies need to be able to adapt to defend themselves. Cyber Resilience – an organisation’s ability to maintain normal operations while under attack, is a critical factor.

Join Dr Larry Ponemon at this webinar on September 13 at 15:00 DST to hear the findings from new research into the state of cyber resilience in the Middle East. Larry and Paul Ayers, GM, EMEA at IBM Resilient will review the findings and discuss:

•Key steps to help security leaders measure, assess, and grow their organisation’s Cyber Resilience

•Real-world examples of organisations improving Cyber Resilience by focusing on incident response preparation.

The State of Cyber Resilience in the Middle East - new industry research

Cyber Incident Response

Incident Response

Cyber Security

SIEM

Security Operations

Security Incidents

Threat Analysis

Incident Detection

Incident Management

Incident Resolution

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Why should organizations integrate their SIEM with an IR Platform?

Presented by

About this talk

More from this channel