Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
SlideShare a Scribd company logo

How much does it cost to be Secure?

•
•
M
mbmobile

This document discusses how organizations can improve their return on investment (ROI) in security and compliance management through IT process automation. It argues that automating routine security tasks can free up resources to focus on more strategic work, while also integrating tools and data to streamline processes. This approach aims to simultaneously improve operational efficiency and business enablement. The document provides examples of how NetIQ solutions can help achieve these goals across key areas like configuration management, user activity monitoring, and change control.

1 of 17
Improve ROI on Security and Compliance Management June 7, 2010
How Much It Cost To Be Secure? First Level Third Level Second Level *Calculated on 2080 Hours/Year Deeper it goes, longer is the Exposure and the associated Risk Cost Standard IT Security Model Resource Type Ownership % Hourly Cases Hourly Cost* Help Desk & Service Desk Low Skill Resources High Turnaround 68% 4 22$ IT Professionals Platform Specific In-House Personnel 26% 1,5 44$ Security Officers Technology Specific Mostly External 6% 0,13 112$
High value resources consumed by simple tasks Different skills required for different platforms Training costs Adoptions of service management frameworks that incur higher than expected costs Roles and responsibilities not formalized New technologies that introduce unexpected management challenges Inability to track and evaluate response times The User is never part of the Solution Impossibility to calculate the per-piece/per-transaction managing Security impact cost And Why?
Goal of IT Management Become an Efficient Business Enabler Operational Efficiency Business Enablement Goal: Cost Effective with Optimized Service Delivery Sub-Optimal: Cost-Centric and Tactical with Marginal Services Current State: Expensive and Tactical with Limited Perceived Value Sub-Optimal: Aligned To Business Goals But Expensive Efficient Business Enabler A Low Cost Provider C Expensive Business Enabler B Low Value Provider D
Management’s Dilemma Operational Efficiency vs. Business Enablement Significant up-front investments and the need for profound changes jeopardize or delay expected cost reductions . Off-shoring and outsourcing, combined with little investment in processes, often forsake agility and business enablement . “ The Cost Cutter” “ The Framework Adopter” Operational Efficiency Business Enablement Operational Efficiency Business Enablement
A Different Approach IT Process Automation Provides a Direct Route to Improve Efficiency IT Process Automation enables you to: 1 Reduce Inefficiencies from Current Security Mgmt Tools Eliminate manual intervention caused by routine, highly mundane tasks Free administrators to focus on more critical problems to the business 2 Integrate Tools within IT Security and Operations 3 Combine management data with contextual information to further streamline IT run books Allow IT managers to reallocate resources to deliver strategic business projects Integrate the Business into IT Security Mgmt Processes Bridge security and business users by formalizing responsibilities within the context of IT processes I mprove business alignment and reduce IT costs by involving the business in IT processes Simultaneously improve both business enablement and operational efficiency Demonstrate improvements in the short term and long term Support both framework adoption and cost-cutting strategies Operational Efficiency Business Enablement 1 2 3
The NetIQ Security Vision Audit Monitor Control Be efficient on risk vs. business value Understand the security and risk posture Satisfy compliance mandates Distributed, multi-vendor environments Business alignment and policy exceptions Configuration drift Evolving best practices and vulnerabilities Reduce risks of privileged user access Protect sensitive corporate data Quickly resolve threats Satisfy compliance mandates Invisibility of privileged user activity Large volume of user-generated events Excessive privileged access rights Lack of integration Manage planned and unplanned changes to production systems Harden business elements efficiently Satisfy compliance mandates Impractical or ineffective change auditing Restricting permissions without impeding service delivery Inability to relate changes to change authorizations Monitor and Manage User Activity Control and Audit Configuration Manage and Enforce Change Control Goals Challenges Our Approach NetIQ Solution NetIQ Solution NetIQ Solution All of those through Automation
Control and Audit Configuration Primary Goal: Protect systems, applications and data in accordance with their business value and satisfy compliance mandates NetIQ Delivers Real-time event correlation reduces alert volumes while highlighting critical events, improving incident management while reducing costs. TRACE™ technology delivers log management, protects the chain of custody, and provides trend analysis and forensics to meet evolving mandates. Powerful auditing of user activity and access controls helps meet compliance mandates and address both inside and outside threats. Effective detection at both the host and network level provides better protection of corporate data and demonstrable oversight of change controls. What's Needed Event Correlation and Analysis Log Management and Forensics Access Control and User Monitoring Change and Threat Detection Challenges What's Needed 1. Security events and alerts often overwhelm security staff, inhibiting effective security incident management. Event Correlation and Analysis 2. Evolving mandates require more than simple log consolidation, to encompass integrity of data, chain of custody, and forensic reporting. Log Management and Forensics 3. Effective protection of corporate data is dependent on user activity monitoring, which is often inhibited by native capabilities. Access Control and User Monitoring 4. Intrusion detection and log monitoring are insufficient to meet the evolving mandates for data protection and change control. Change and Threat Detection
Monitor and Manage User Activity Primary Goal: Maintain the infrastructure, applications, user accounts, and security per business requirements NetIQ Delivers A prevention-oriented, proxy-based administration solution delivers higher availability than that of system-wide backup and restoration. Non-hierarchical, rules-based delegation simplifies safely granting privileges to users. Automated tasks triggered by events streamline routine administrative tasks, saving time and improving service. Automation and repeatability, along with Active Directory and Unix users optimization, assures business availability and satisfied end users. What's Needed Prevention and Recovery Delegated Administration Administrator Task Automation Migration and Optimization Challenges What's Needed 1. Administrative errors and malicious acts threaten the integrity and reliability of systems and services. Prevention and Recovery 2. Native tools make it impractical to enable non-administrators to make routine or low-risk changes. Delegated Administration 3. Manual, routine tasks often consume valuable skilled resources. Administrator Task Automation 4. Diversity, complexity and emerging technologies increase the time to deploy and operate systems management tools. Migration and Optimization
Manage and Enforce Change Control Primary Goal: Real time enforcement of an organization policy throughout the different layers of the IT infrastructure. Without stopping the services operations CalCom Delivers Automated Process for Real Time Policies Enforcement within the different IT Layers, not stopping the normal operations An extensible library with hundreds of Policy Process Protection Rules covering OSs, Applications, Users Behavior, Network Connections Learning Mode to understand how and element should behave. Unparalleled capabilities in Monitoring, Auditing, Access and Change control Built-in reports, Regulatory Compliance Reports, Policy Center © – Gap Analysis Report and Compliance Dashboard © What's Needed Hardening Solutions that doesn’t harm or stop the Services Operations Harden not only basic Objects but also ensure Applications proper utilization and regulate Policies Changes and Access Easily p rovide Real Time Policies monitoring and implementation Unparalleled reporting capabilities on regulatory compliance Challenges What's Needed 1. Real time enforcement of an organization policies on the IT Infrastructure layers, without harming the Services Operation Hardening Solutions that doesn’t harm or stop the Services Operations 2. Protect and enforce the organization’s Policy Processes through verifying the User behavior Harden not only basic Objects but also ensure Applications proper utilization and regulate Policies Changes and Access 3. Monitor, alert and prevent policies break, rolling back to any change of the hardened element following the Policies Easily p rovide Real Time Policies monitoring and implementation 4. Be able to produce a wide range of regulatory reports, gap analysis, what if analysis and compliance dashboard Unparalleled reporting capabilities on regulatory compliance
All of Those Through Automation Workflow Automation Engine NetIQ Products Message Bus, Resource Model, CMDB 3 rd Party Best-of-Breed products Run Books (Event Correlation, Fault Recovery, Routine Server Restarts, etc. ) Processes (ITIL Incident Management, Change Management, DR testing, etc.) Correlation Engine AM SM/CG SCM DRA SCOM HPOM Remedy Smarts Adapters Bi-directional data collection and control Activity Libraries Workflow building blocks that control other tools Process Templates Provides built-in knowledge Presentation Layer Consoles tailored to specific users Independent Engines Allow data processing scalability Resource Mgmt DB Normalizes data from diverse tools Ops Console Config Console Reports … …
At The End This is What Really Counts
Real World Example On Self Password Reset
NetIQ Aegis NetIQ Security Manager CalCom Hardening Module NetIQ Change Guardian for Databases NetIQ Change Guardian for Active Directory NetIQ Change Guardian for Group Policy NetIQ Change Guardian for Windows NetIQ Secure Configuration Manager NetIQ Security Solutions for iSeries NetIQ Identity Integration Suite The Cast and The Crew
Total Economic Impact ROI and Payback Period for NetIQ IT Security Process Automation Organizations can realize benefits in the form of improved productivity for system administrators, as well as other IT professionals, through the automation of common IT processes. Higher ROIs are achievable with each additional process automated through Aegis. In general, an organization would expect greater returns as more workflows are implemented to reduce the amount of time required to perform a given process. F ORRESTER ® Summary financial results Original estimate Risk-adjusted ROI 150% 141% Payback period (yrs) 1.1 1.2 Total Benefits (PV) $1,232,563 $1,192,083 Total costs (PV) ($493,847) ($495,549) Total (NPV) $738,716 $696,534
Next Steps with NetIQ & CalCom © 2010 NetIQ Corporation. All rights reserved. Your Need Action Items Learn More about IT Process Automation Visit NetIQ.com and Calcomp.com Schedule an online demo Attend a NetIQ webinar Validate Our Approach Read Forrester SWOT and Total Economic Impact™ Study Read Gartner SIEM Magic Quadrant™ report Read Gartner IT Governance, Risk & Compliance MarketScope™ Build a Business Case for NetIQ Read Forrester Total Economic Impact™ Study Complete ROI calculation with NetIQ and CalCom Complete an internal business case Assess NetIQ for a Technical Fit Schedule a technical discussion with our engineers Implement a Proof Of Concept (POC) onsite Engage our consultancy services to perform an onsite assessment Prepare for IT Process Automation Optimize your existing deployment Work with NetIQ/CalCom consultancy to plan a roll-out Leverage introductory pricing to implement a production pilot
Marco Bianchi Sales Director Italy, Greece, Israel and Cyprus World Wide New Offerings Director +39 348 2214412 Marco.Bianchi@NetIQ.com - www.netiq.com JLudmir@CalComp.co.il - www.calcomp.co.il

More Related Content

How much does it cost to be Secure?

  • 1. Improve ROI on Security and Compliance Management June 7, 2010
  • 2. How Much It Cost To Be Secure? First Level Third Level Second Level *Calculated on 2080 Hours/Year Deeper it goes, longer is the Exposure and the associated Risk Cost Standard IT Security Model Resource Type Ownership % Hourly Cases Hourly Cost* Help Desk & Service Desk Low Skill Resources High Turnaround 68% 4 22$ IT Professionals Platform Specific In-House Personnel 26% 1,5 44$ Security Officers Technology Specific Mostly External 6% 0,13 112$
  • 3. High value resources consumed by simple tasks Different skills required for different platforms Training costs Adoptions of service management frameworks that incur higher than expected costs Roles and responsibilities not formalized New technologies that introduce unexpected management challenges Inability to track and evaluate response times The User is never part of the Solution Impossibility to calculate the per-piece/per-transaction managing Security impact cost And Why?
  • 4. Goal of IT Management Become an Efficient Business Enabler Operational Efficiency Business Enablement Goal: Cost Effective with Optimized Service Delivery Sub-Optimal: Cost-Centric and Tactical with Marginal Services Current State: Expensive and Tactical with Limited Perceived Value Sub-Optimal: Aligned To Business Goals But Expensive Efficient Business Enabler A Low Cost Provider C Expensive Business Enabler B Low Value Provider D
  • 5. Management’s Dilemma Operational Efficiency vs. Business Enablement Significant up-front investments and the need for profound changes jeopardize or delay expected cost reductions . Off-shoring and outsourcing, combined with little investment in processes, often forsake agility and business enablement . “ The Cost Cutter” “ The Framework Adopter” Operational Efficiency Business Enablement Operational Efficiency Business Enablement
  • 6. A Different Approach IT Process Automation Provides a Direct Route to Improve Efficiency IT Process Automation enables you to: 1 Reduce Inefficiencies from Current Security Mgmt Tools Eliminate manual intervention caused by routine, highly mundane tasks Free administrators to focus on more critical problems to the business 2 Integrate Tools within IT Security and Operations 3 Combine management data with contextual information to further streamline IT run books Allow IT managers to reallocate resources to deliver strategic business projects Integrate the Business into IT Security Mgmt Processes Bridge security and business users by formalizing responsibilities within the context of IT processes I mprove business alignment and reduce IT costs by involving the business in IT processes Simultaneously improve both business enablement and operational efficiency Demonstrate improvements in the short term and long term Support both framework adoption and cost-cutting strategies Operational Efficiency Business Enablement 1 2 3
  • 7. The NetIQ Security Vision Audit Monitor Control Be efficient on risk vs. business value Understand the security and risk posture Satisfy compliance mandates Distributed, multi-vendor environments Business alignment and policy exceptions Configuration drift Evolving best practices and vulnerabilities Reduce risks of privileged user access Protect sensitive corporate data Quickly resolve threats Satisfy compliance mandates Invisibility of privileged user activity Large volume of user-generated events Excessive privileged access rights Lack of integration Manage planned and unplanned changes to production systems Harden business elements efficiently Satisfy compliance mandates Impractical or ineffective change auditing Restricting permissions without impeding service delivery Inability to relate changes to change authorizations Monitor and Manage User Activity Control and Audit Configuration Manage and Enforce Change Control Goals Challenges Our Approach NetIQ Solution NetIQ Solution NetIQ Solution All of those through Automation
  • 8. Control and Audit Configuration Primary Goal: Protect systems, applications and data in accordance with their business value and satisfy compliance mandates NetIQ Delivers Real-time event correlation reduces alert volumes while highlighting critical events, improving incident management while reducing costs. TRACE™ technology delivers log management, protects the chain of custody, and provides trend analysis and forensics to meet evolving mandates. Powerful auditing of user activity and access controls helps meet compliance mandates and address both inside and outside threats. Effective detection at both the host and network level provides better protection of corporate data and demonstrable oversight of change controls. What's Needed Event Correlation and Analysis Log Management and Forensics Access Control and User Monitoring Change and Threat Detection Challenges What's Needed 1. Security events and alerts often overwhelm security staff, inhibiting effective security incident management. Event Correlation and Analysis 2. Evolving mandates require more than simple log consolidation, to encompass integrity of data, chain of custody, and forensic reporting. Log Management and Forensics 3. Effective protection of corporate data is dependent on user activity monitoring, which is often inhibited by native capabilities. Access Control and User Monitoring 4. Intrusion detection and log monitoring are insufficient to meet the evolving mandates for data protection and change control. Change and Threat Detection
  • 9. Monitor and Manage User Activity Primary Goal: Maintain the infrastructure, applications, user accounts, and security per business requirements NetIQ Delivers A prevention-oriented, proxy-based administration solution delivers higher availability than that of system-wide backup and restoration. Non-hierarchical, rules-based delegation simplifies safely granting privileges to users. Automated tasks triggered by events streamline routine administrative tasks, saving time and improving service. Automation and repeatability, along with Active Directory and Unix users optimization, assures business availability and satisfied end users. What's Needed Prevention and Recovery Delegated Administration Administrator Task Automation Migration and Optimization Challenges What's Needed 1. Administrative errors and malicious acts threaten the integrity and reliability of systems and services. Prevention and Recovery 2. Native tools make it impractical to enable non-administrators to make routine or low-risk changes. Delegated Administration 3. Manual, routine tasks often consume valuable skilled resources. Administrator Task Automation 4. Diversity, complexity and emerging technologies increase the time to deploy and operate systems management tools. Migration and Optimization
  • 10. Manage and Enforce Change Control Primary Goal: Real time enforcement of an organization policy throughout the different layers of the IT infrastructure. Without stopping the services operations CalCom Delivers Automated Process for Real Time Policies Enforcement within the different IT Layers, not stopping the normal operations An extensible library with hundreds of Policy Process Protection Rules covering OSs, Applications, Users Behavior, Network Connections Learning Mode to understand how and element should behave. Unparalleled capabilities in Monitoring, Auditing, Access and Change control Built-in reports, Regulatory Compliance Reports, Policy Center © – Gap Analysis Report and Compliance Dashboard © What's Needed Hardening Solutions that doesn’t harm or stop the Services Operations Harden not only basic Objects but also ensure Applications proper utilization and regulate Policies Changes and Access Easily p rovide Real Time Policies monitoring and implementation Unparalleled reporting capabilities on regulatory compliance Challenges What's Needed 1. Real time enforcement of an organization policies on the IT Infrastructure layers, without harming the Services Operation Hardening Solutions that doesn’t harm or stop the Services Operations 2. Protect and enforce the organization’s Policy Processes through verifying the User behavior Harden not only basic Objects but also ensure Applications proper utilization and regulate Policies Changes and Access 3. Monitor, alert and prevent policies break, rolling back to any change of the hardened element following the Policies Easily p rovide Real Time Policies monitoring and implementation 4. Be able to produce a wide range of regulatory reports, gap analysis, what if analysis and compliance dashboard Unparalleled reporting capabilities on regulatory compliance
  • 11. All of Those Through Automation Workflow Automation Engine NetIQ Products Message Bus, Resource Model, CMDB 3 rd Party Best-of-Breed products Run Books (Event Correlation, Fault Recovery, Routine Server Restarts, etc. ) Processes (ITIL Incident Management, Change Management, DR testing, etc.) Correlation Engine AM SM/CG SCM DRA SCOM HPOM Remedy Smarts Adapters Bi-directional data collection and control Activity Libraries Workflow building blocks that control other tools Process Templates Provides built-in knowledge Presentation Layer Consoles tailored to specific users Independent Engines Allow data processing scalability Resource Mgmt DB Normalizes data from diverse tools Ops Console Config Console Reports … …
  • 12. At The End This is What Really Counts
  • 13. Real World Example On Self Password Reset
  • 14. NetIQ Aegis NetIQ Security Manager CalCom Hardening Module NetIQ Change Guardian for Databases NetIQ Change Guardian for Active Directory NetIQ Change Guardian for Group Policy NetIQ Change Guardian for Windows NetIQ Secure Configuration Manager NetIQ Security Solutions for iSeries NetIQ Identity Integration Suite The Cast and The Crew
  • 15. Total Economic Impact ROI and Payback Period for NetIQ IT Security Process Automation Organizations can realize benefits in the form of improved productivity for system administrators, as well as other IT professionals, through the automation of common IT processes. Higher ROIs are achievable with each additional process automated through Aegis. In general, an organization would expect greater returns as more workflows are implemented to reduce the amount of time required to perform a given process. F ORRESTER ® Summary financial results Original estimate Risk-adjusted ROI 150% 141% Payback period (yrs) 1.1 1.2 Total Benefits (PV) $1,232,563 $1,192,083 Total costs (PV) ($493,847) ($495,549) Total (NPV) $738,716 $696,534
  • 16. Next Steps with NetIQ & CalCom © 2010 NetIQ Corporation. All rights reserved. Your Need Action Items Learn More about IT Process Automation Visit NetIQ.com and Calcomp.com Schedule an online demo Attend a NetIQ webinar Validate Our Approach Read Forrester SWOT and Total Economic Impact™ Study Read Gartner SIEM Magic Quadrant™ report Read Gartner IT Governance, Risk & Compliance MarketScope™ Build a Business Case for NetIQ Read Forrester Total Economic Impact™ Study Complete ROI calculation with NetIQ and CalCom Complete an internal business case Assess NetIQ for a Technical Fit Schedule a technical discussion with our engineers Implement a Proof Of Concept (POC) onsite Engage our consultancy services to perform an onsite assessment Prepare for IT Process Automation Optimize your existing deployment Work with NetIQ/CalCom consultancy to plan a roll-out Leverage introductory pricing to implement a production pilot
  • 17. Marco Bianchi Sales Director Italy, Greece, Israel and Cyprus World Wide New Offerings Director +39 348 2214412 Marco.Bianchi@NetIQ.com - www.netiq.com JLudmir@CalComp.co.il - www.calcomp.co.il

Editor's Notes

  1. Level 1 – Focus on High Turnaround and Training Costs Level 3 are usually not fully onsite – This extend Time to Exposure Focus on reducing Time to Exposure Different Tools requires Different Skills and Different Training Focus on the Human Element – The human make mistakes by design © 2008 NetIQ Corporation. All rights reserved.
  2. © 2008 NetIQ Corporation. All rights reserved.