Cyber threats are growing increasingly complex, and with the explosion of the internet of things (IoT), organizations need to take steps to protect themselves and their customers. Intel has projected there will be over 200 billion IoT devices by 2020, and online data volumes are expected to grow up to 50 times what they are today. Infotech and security leaders are now evaluating a new cyber resilient architecture that can adapt and scale with rapid business digitalization and new IT models. Simplifying the security stack is no longer just a cost-saving priority – with cybercrime threatening to cost $6 trillion by 2021, it is also a prerequisite for uninterrupted visibility, responsiveness and resilience. In this webinar, guest speaker Jeff Pollard, Principal Analyst at Forrester, and David Meltzer, Chief Technology Officer at Tripwire, discuss the growing challenges of cyber threats and share steps you can take now to build a cyber resilient organization. Topics include: -How to identify and cut the technology bloat in your security operations. -Challenges and opportunities as IT transitions from on-premise to in the cloud. -Eliminating blind spots and dark spots for uninterrupted visibility, regardless of the endpoint or its location. -How to re-evaluate strategic planning so that you can align your security programs to new business models.

2. © 2016 Forrester Research, Inc. Reproduction Prohibited 2
Agenda
›Cutting Bloat In Security Operations
›Challenged By Moving To The Cloud
›Eliminating Our Operational Blind Spots
›Developing New Strategic Plans For Resilience

3. © 2016 Forrester Research, Inc. Reproduction Prohibited 3
Cutting Bloat In Security Operations

4. © 2016 Forrester Research, Inc. Reproduction Prohibited 4
Interesting, but uncontrollable

5. © 2016 Forrester Research, Inc. Reproduction Prohibited 5
Internal focus matters more than external focus
Source: Forrester Research “Hunting Insider Threats” report

6. © 2016 Forrester Research, Inc. Reproduction Prohibited 6
Challenged By Moving To The Cloud

7. © 2016 Forrester Research, Inc. Reproduction Prohibited 7
X-aaS vs. On-Premise Introduces Variables
Source: Forrester Research “Cloud Service Provider Categories Are Shifting: Here's Your Guide” report

8. © 2016 Forrester Research, Inc. Reproduction Prohibited 8
Eliminating Our Operational Blind Spots

9. © 2016 Forrester Research, Inc. Reproduction Prohibited 9
Figure out if its real
Alert
True
Network
Endpoint
False Close

10. © 2016 Forrester Research, Inc. Reproduction Prohibited 10
Ask questions based on source
Alert
True
Network
Endpoint
False Close

11. © 2016 Forrester Research, Inc. Reproduction Prohibited 11
Record artifacts
Alert
True
Network
IP
URL
Endpoint
Hash
Delivery
False Close

12. © 2016 Forrester Research, Inc. Reproduction Prohibited 12
Enrich contextually
Alert
True
Network
IP
External
Intel
Internal
Intel
URL
Reputation
Other Visits
Endpoint
Hash
VT, etc
Other
Cases?
Delivery
Other
Visitors?
Other
Targets?
False Close

13. © 2016 Forrester Research, Inc. Reproduction Prohibited 13
Content management and Workflow problem
Alert
True
Network
IP
External
Intel
Internal
Intel
URL
Reputation
Other Visits
Endpoint
Hash
VT, etc
Other
Cases?
Delivery
Other
Visitors?
Other
Targets?
False Close
Tool 1
Tool 2
Tool 3
Tool 4
Tool 5
Tool 6

14. © 2016 Forrester Research, Inc. Reproduction Prohibited 14
16GB of RAM is plenty for all these Tabs
Each item discovered leads to:
A different technology
A different skillset
Team’s forced to drive technology:
Not drive an investigation
Not analyze and cross-reference

15. © 2016 Forrester Research, Inc. Reproduction Prohibited 15
Developing New Strategic Plans For Resilience

16. © 2016 Forrester Research, Inc. Reproduction Prohibited 16
Good things happening
“Real” REST API’s for security tech
(with actual documentation)
Security NEEDS Detect, Protect, and Respond –
not pick one of three
Increased demand leading to more opportunities,
more training, more skills

17. Thank you
forrester.com
Jeff Pollard
jpollard@forrester.com
@jeff_pollard2

19. 1000s
of successful
customer
deployments
20M
Critical
assets
covered
globally

20. Security
• Detect unauthorized changes
• Assess configurations against security baselines
• Identify risks in environment
Compliance
• Demonstrate compliance with regulatory standards
• Automate manual compliance efforts
• Produce data for audits and for forensics
IT Operations
• Validate changes for a strong change control process
• Identify unauthorized changes that circumvent process
• Discover and inventory what is on network

21. Extensive library of security configuration
best-practices to establish and monitor
configurations
Detection and alerts on all changes to
established baseline – what, who and
business context
Discover assets, vulnerabilities, and
malicious changes on systems and help
manage the workflow and process of
remediation
Automate manual processes associated
with dealing with change - Isolate and
escalate changes and events of interest
Assess configurations
against security policies
Detect unauthorized changes
Identify risks on assets
Deal with security
data overload

22. Security
Configuration
Management
Integrity
Monitoring
Vulnerability
Management

23. !
THREAT
DETECTED!
4
Indicators
Feed
2
Search forensics data for
previous existence of indicator.
Start monitoring for indicator in
all new changes.
3
Drive workflow to investigate
and remediate system
5

26. tripwire.com | @TripwireInc
Jeff Pollard
jpollard@forrester.com
@jeff_pollard2
David Meltzer
dmeltzer@tripwire.com
@davidjmeltzer

27. tripwire.com | @TripwireInc