Name: How to Transform and Automate Security Operations: A Case Study
Start: 2023-05-16T16:00:00Z
End: 2023-05-16T16:00:43.000Z
Location: BrightTALK
Rating: 0

Transform your security operations the same way you are transforming your business with automation, AI, context, and collaboration between security, IT, and risk teams. You can identify, prioritize, and respond with agility to evolving cyber threats. We can also help you get proactive to improve your security by systematically hardening and reducing your digital attack surface and optimizing and orchestrating your security operations.

To get a pulse on what challenges cybersecurity professionals face today, ESG reached out to enterprise organizations for their insights and opinions. Of those, 63% surveyed believe that the area of security operations is more difficult today than two years ago.

Why is this and what actions are organizations taking as countermeasures?

Join our webinar in which Jon Oltsik, senior principal analyst and fellow at the Enterprise Strategy Group, will present research examining:

-The internal and external challenges increasing security operations complexity
-How CISOs are addressing security operations with process automation
-Future strategies for continuous improvement of security operations

Security Operations Transformation

Enterprises are enthusiastic about the MITRE ATT&CK Framework, a behavioral-based threat model, and how it can help enable thinking “like the enemy”—stitching together cyber-attack kill chains and visualizing adversarial tactics.

However, while many security tools provide basic MITRE ATT&CK support, SOC teams still find it hard to operationalize the framework into processes for incident detection, security engineering, and threat hunting and response. Your security orchestration, automation, and response (SOAR) tools can help, but only if they’re tightly integrated.

Join our webinar on integrating the MITRE ATT&CK Framework with SOAR, as we discuss:

- The key requirements you will need for this integration
- The benefits you can gain by including MITRE ATT&CK data into incidents/observables
- Creating custom dashboards and runbooks
- Gaining an intuitive visualization of attack campaigns and adversarial behavior

The MITRE ATT&CK Framework and SOAR: Better Together

Risk insights can help utilize your teams limited capacity and scale to not only more quickly prioritize new vulnerabilities, but also to determine who should respond, how best to respond, and in what order. With little time and few resources to waste, the question is "how do I get it right the first time?" ServiceNow's Risk-based Vulnerability Management solution, ServiceNow Vulnerabillity Response, has proven its value in hundreds of deployments. 

Join our vulnerability experts to review best practices and to learn about our Top 10 Value Drivers for real customer situations.

Risk-Based Vulnerability Management in Action

In an era of evolving cyber threats, ServiceNow’s DLP Incident Response app enables you to manage and protect sensitive, proprietary information— from financial and health records to Social Security numbers. Learn to respond to and remediate data loss when you join our upcoming webinar. Our speakers will discuss: 

- Integrating with third-party DLP solutions for a unified view of incidents  
- Monitoring and assigning incidents to the appropriate end user 
- Tracking DLP incident, false positive, and remediation trends

Increase visibility & accelerate response to threats with DLP Incident Response

A brief demonstration of ServiceNow's Security Operations suite, illustrating how it can help get work done in security and beyond. Through the context of a major security incident, we explore Security Orchestration Automation and Response use cases, hardening attack surfaces through vulnerability remediation workflows, collaboration with IT, and evaluating readiness to combat advanced persistent threats.

Transform security operations with the ServiceNow platform

In a time of rising cyber-threats, security operations teams need tools to identify, analyze and report hazards pending further investigation and resolution. By integrating performance analytics into our Security Operations solution, ServiceNow helps stakeholders make faster, more informed decisions.

Harnessing the power of Performance Analytics for Security Operations

Join us as we explore how you can dramatically improve enterprise security through cross-team collaboration that connects the incident response and vulnerability response processes to the rest of the enterprise. In addition, learn how ServiceNow Security Operations solutions help you gain the insight and visibility you need, into the most critical areas of your infrastructure, to accelerate response time to threats and reduce risk.

Transform enterprise security with enterprise-wide collaboration and visibility

How SOAR Saved the Day; A Guide to Modernising Your Security Solutions

According to Gartner by year-end 2022, 30% of organisations with a security team larger than five people will leverage SOAR tools in their security operations, up from less than 5% today. The almost overnight migration to a virtual employee workforce has tasked Security and IT teams to deliver and secure digital transformation at lightning speed. This was not an easy task for teams already stretched thin and juggling multiple tools and limited resources.

With the volume of threats in mind and the scaling that needs to happen overnight for these teams, security orchestration and automation (SOAR) solutions are critical for their success.

In this session, we will discuss:
- How automating workflows can help ensure that threats to your business are resolved before they can impact the business and your employees
- The impact of the pandemic on security solutions, and why SOAR is so important now than ever before
- The importance of automation and orchestration in the new normal

How SOAR Saved the Day; A Guide to Modernising Your Security Solutions

The MITRE ATT&CK framework is a knowledge base of cyberattack tactics and techniques used as a foundation for the development of specific threat models and methodologies. Proactively hunt for threats and stay ahead of adversaries with ServiceNow's Security Incident Response and the MITRE ATT&CK framework. 

Learn how you can empower your incident response teams to know each attacker’s tactics and techniques for the incident under investigation to quickly prioritize and manage detection and response procedures and reduce attack surface.

Unify Detection and Response with MITRE ATT&CK

Proven frameworks offer reliable structure for maturing security programs.

Join this discussion to learn how you can most efficiently adopt the NIST CSF and RMF frameworks or the CIS Top 20 Controls. We'll present coverage, fine-grained alignment, and quick time-to-value examples based on the ServiceNow Security and Risk portfolio with other ServiceNow and ecosystem products.

Best Practices in Adopting NIST and CIS Control Frameworks

In this webinar, you will learn how to rapidly respond to evolving threats while optimizing and orchestrating enterprise security operations. You will be able to enable your teams to eliminate the errors and friction of manual handoffs across systems, teams and responsibilities. Instead, Integrations, playbooks, dashboards, and a common data model for enterprise case management expedite investigation, response, and remediation across IT, Security, and Risk teams to minimize incident impact, data loss, and exposure. This drives the maturity of your security operations, and centralizes case management for threats, data loss events, and more.

Drive cyber resilience with enterprise case management

Many organizations and their security teams are overwhelmed trying to keep up with vulnerabilities and cyber threats. Not only is prioritization a challenge, but many teams depend on point tools and cumbersome, labor-intensive processes—while dealing with staff shortages and lack of advanced skills.

The solution is to harden the attack surface to thwart attackers. Join us for Mind the gap: How ServiceNow helps organizations find, prioritize, and manage vulnerable assets, and gain a successful, proactive security program. Spend an hour to learn how ServiceNow’s Vulnerability Response can help your organization:

- Reduce exposure to vulnerabilities
- Gain greater visibility and intelligence—and shorten time to resolution
- Improve threat detection, automate workflows, enhance collaboration, and boost productivity
- Be sure to attend—and take important steps to manage vulnerabilities across your enterprise.

Hosted by:
Karl Klaessig, director of product marketing, security operations, ServiceNow
Mike Plavin, senior technical product marketing manager, security operations, ServiceNow

Mind the gap: How to find, prioritize, & manage vulnerable assets

How to Transform and Automate Security Operations: A Case Study

Automating security operations eases the load for your security team by detecting threats in your environment, determining the response to threats, and reducing the amount of time consuming manual work that goes into SecOps. 

Automation and orchestration are no longer intimidating but have actually become trusted allies in the fight against increasing demands and limited resources. In 2021, your company will depend ever more heavily on digital services, which means you must adapt and extend security and vulnerability operations.

In this session, we will discuss:
-  How digitized, cross-functional workflows can embed best practices, efficiency, and security resilience into operations
-  The benefits of automating your security operations
-  The adoption and advances in both incident and vulnerability response

How to Transform and Automate Security Operations: A Case Study

Automation

Digital Transformation

Incident Response

IT Security

ITSM

Orchestration

Resiliency

SecOps

Threat Detection

Vulnerability Management

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Join this new, vibrant community to learn and connect with top thought leaders, startups and banks who are disrupting the financial services industry. Keep up with the latest news and trends in Fintech and take part in lively debates on topical issues and challenges.

Fintech

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful operations insights for your business. Connect with experts and colleagues to get the most up-to-date knowledge on which systems and processes are driving operational efficiency, maximizing value and customer success.

Operations

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

How to Transform and Automate Security Operations: A Case Study

Presented by

About this talk

More from this channel