A holostic cybersecurity

1. Cybersecurity – A Holistic
Approach
ANDREA NULLI
Rome, September 28th
#CWIN17

2. Cybersecurity – A Holistic Approach| 2017-09-28
Copyright © 2017 Capgemini. All rights reserved. 2
Table of Contents
 A holistic approach
 Why
 Our approach

3. Cybersecurity – A Holistic Approach| 2017-09-28
Copyright © 2017 Capgemini. All rights reserved. 3
A Holistic Approach……
“ relating to or concerned with wholes or with complete systems rather than with the
analysis of, treatment of, or dissection into parts”
https://www.merriam-webster.com/dictionary/holistic

4. Cybersecurity – A Holistic Approach| 2017-09-28
Copyright © 2017 Capgemini. All rights reserved. 4
….to Cybersecurity
 A holistic approach incorporates technical, human and physical factors that are relevant
to the detection, prevention, and correction of cybersecurity vulnerabilities.
 Risk zero doesn’t exist.
 Technology is just a small part of the solution, and can become a big part of the
problem.
 Assume breach.
 It’s a difficult war: the good guys have to fix all holes, while the bad guys need to find
just one !

5. Cybersecurity – A Holistic Approach| 2017-09-28
Copyright © 2017 Capgemini. All rights reserved. 5
2017’s breaches: some examples

6. Cybersecurity – A Holistic Approach| 2017-09-28
Copyright © 2017 Capgemini. All rights reserved. 6
So …
I divide the entire set of Fortune Global 2000 firms into two categories: those what know they’ve
been compromised and those don’t yet know
Dmitri Alperovitch
V.P. of threat research, McAfee after discovering of Operation Shady RAT (August 2011)

7. Cybersecurity – A Holistic Approach| 2017-09-28
Copyright © 2017 Capgemini. All rights reserved. 7
From cyber threat awareness …
Operational
Technology
systems
IoT
(Internet
of Things)
IT
systems
Across
• Secure its digital transformation and
move to cloud
• Be well governed, compliant and
secure
• Control security related costs
Your enterprise needs to:
Gartner >“Operational Technology (OT): industrial systems and manufacturing IT systems
Stay ahead of increasingly
sophisticated threats

8. Cybersecurity – A Holistic Approach| 2017-09-28
Copyright © 2017 Capgemini. All rights reserved. 8
A 360°end-to-end future-focused approach
to control and secure your assets
… to controlling and securing assets
Your customers
will …
Your business
will …
Be secure and compliant
with regulations
Optimize costs with as-
a-service offers
Access digital
services securely
Trust you
Live an enhanced
customer experience
Access the best domain
experts worldwide
Benefit from packaged
offers powered by the best
technology products

9. Cybersecurity – A Holistic Approach| 2017-09-28
Copyright © 2017 Capgemini. All rights reserved. 9
A Cybersecurity framework
4 families of
Cybersecurity Services
1 Cybersecurity
framework
Consulting
&
Assessment
Services
Protection
Services
Monitoring
Services
IT
systems
OT & IoT
Systems &
Products
Cloud
Gartner >“Operational Technology (OT): industrial systems and
manufacturing IT systems
Data
Threat
Hunting
Services

10. Cybersecurity – A Holistic Approach| 2017-09-28
Copyright © 2017 Capgemini. All rights reserved. 10
1st Advanced Data Analysis
Security Operation Center
Dedicated SOCs or
Multi-tenant SOCs: SOCaaS
Design & Build
Managed Security Services
8 multi-tenant operated from
France, UK, Luxemburg, India *2, Spain, Belgium
+ many dedicated SOCs
Monitoring
Services
Detect and analyze even the most advanced
attacks before they can impact the business.
Gain complete visibility of your IT and security
system to detect, analyze and react to cyber
attacks.
3rd Generation
Security Operations Centre (SOC)
capability
Response: take targeted action on the most
important incidents.
External
Threat
Intelligence
Vulnerability
management
Incidents
Prevention
Security
monitoring
Incidents
Detection
Security update, files
in quarantine, isolation
of an IT system part,…
Incident Response &
reporting
1 2
3

11. Cybersecurity – A Holistic Approach| 2017-09-28
Copyright © 2017 Capgemini. All rights reserved. 11
Hunting
Find the hacker inside
Threat
Hunting
Services
PROACTIVE THREAT HUNTING
Search for undetected adversaries already inside the network
 Use available information to look for generic and specific IOCs
(indicator of compromise), based on Threat intelligence.
 Gather meaningful data on endpoint, servers and networks
to search for abnormal behavior.
 Leverage OS experts and malware analysts to identify real on-
going attacks among noise and misconfiguration.
Share results with the Security team to:
 Trigger a timely “ incident response ” process
 Patch exploited vulnerabilities and reduce attack surface
Investigation cycle
Define
perimeter
and threats
Collect data
Uncover
unknown
behavior
Investigate
for intrusions
Share results
with Security
team

12. Cybersecurity – A Holistic Approach| 2017-09-28
Copyright © 2017 Capgemini. All rights reserved. 12
Thank You!
Phone: +39 3494923311
andrea.nulli@capgemini.com
Andrea Nulli
Title: Principal Consultant
Role: Italian Cybersecurity Leader
@NulliAndrea
Speaker 1
Photo

13. www.capgemini.com
The information contained in this presentation is proprietary.
Copyright © 2017 Capgemini. All rights reserved.
Rightshore® is a trademark belonging to Capgemini.
About Capgemini
With more than 180,000 people in over 40 countries, Capgemini is one of With more
than 190,000 people in over 40 countries, Capgemini is one of the world's foremost
providers of consulting, technology and outsourcing services. The Group reported
2016 global revenues of EUR 12.5 billion. Together with its clients, Capgemini
creates and delivers business, technology and digital solutions that fit their needs,
enabling them to achieve innovation and competitiveness. A deeply multicultural
organization, Capgemini has developed its own way of working, the Collaborative
Business Experience™, and draws on Rightshore®, its worldwide delivery model.