Intelligent Tech Channels Issue 17 - Page 39

INTELLIGENT ENTERPRISE SECURITY
Visibility Develop a clear picture of the key assets you have , where they are located , who has access to them , identify the most critical assets . In the digital age , data is king so knowing which devices have access to your data is key . Note that data is not just the domain of the large enterprise , but a reality for every size and type of organisation . This assessment will lead to you the determination of what makes up your organisation .
Architecture With the proliferation of IoT , adoption of BYOD , growth in use of virtualised environments , and adoption of public and private cloud infrastructures – all require that you step back and examine how you architected your core network .
Focus on the outcomes you desire while you examine the architecture : is your network architected to maximise availability and ensure continuity even if it is under attack , have you secured your data paths to make sure you are protecting every known avenue that can be used to steal that data , does your protection extend to the physical and virtual elements in your network ?
Inventory Technology is a key element to addressing security challenges , but technology is part of the solution . People and processes play an equally important role in maintaining a robust security posture . Developing an understanding of how sensitive information is handled , who has access to sensitive information , your internal policies on how you treat sensitive data , policy enforcement mechanisms and ongoing training of personnel handling sensitive data must be part of the overall solution .
Basics Often organisations invest in the latest and greatest technology and buzz word driven solutions . Sometimes there is a perceived correlation between high-end solution and impact . But there is a difference between perception and reality . Organisations must start with the basics .
Mohammad Jamal Tabbara , Senior Systems Engineer UAE and Channel , Infoblox .

Organisations have migrated from having tightly controlled networks with endpoints , to one where the definition of an endpoint is changing .

Practices Like I said above , people and process are a critical component of addressing your security posture . Make sure you have instituted best practices around passwords , patching your systems with the latest updates and keeping up to date with your hardware and software .
Core Organisations that have adopted a defense in-depth approach have done so for several critical applications like e-mail , web traffic and endpoints . Often , they ignore the core of their network – the basic systems that allow access to applications and services on their network . In other words , core elements like DNS , DHCP and IP address management , often referred to as DDI .
Get help Too often organisations rely on internal expertise , but budget constraints and the availability of trained security experts constrain their ability to have the extensive coverage they need . Help comes in many forms , technology and external expertise .
Augmenting the team ’ s skill sets with the latest development in technology that allows automation and leverages machine learning to drive better insight into threats is key . Relying on security expertise from organisations that specialise in security is often underutilised .
Unify Make sure that all the elements of your defense in depth approach work in unison . This means that when one system sees a vulnerability that information should be shared with the other parts of the infrastructure . Whether that information is an indicator of compromise or threat intelligence , the information should be shared .
For example , if your DDI infrastructure identifies a new device on the network , that information should be shared with a Vulnerability Scanner so it can scan the device to ensure its integrity . While the information in isolation is useful a new device on the network it is becomes actionable and more impactful when it is shared with other parts of your infrastructure .
Of course , this requires that the vendors you select have an open approach and have built their products with the ability to share information with other parts of your infrastructure . •
39
INTELLIGENT ENTERPRISE SECURITY Visibility Core Develop a clear picture of the key assets you have, where they are located, who has access to them, identify the most critical assets. In the digital age, data is king so knowing which devices have access to your data is key. Note that data is not just the domain of the large enterprise, but a reality for every size and type of organisation. This assessment will lead to you the determination of what makes up your organisation. Organisations that have adopted a defense in-depth approach have done so for several critical applications like e-mail, web traffic and endpoints. Often, they ignore the core of their network – the basic systems that allow access to applications and services on their network. In other words, core elements like DNS, DHCP and IP address management, often referred to as DDI. Architecture Too often organisations rely on internal expertise, but budget constraints and the availability of trained security experts constrain their ability to have the extensive coverage they need. Help comes in many forms, technology and external expertise. Augmenting t RFV( 266WG2vFFRFW7BFWfVVBFV6wF@w2WFFBWfW&vW26PV&rFG&fR&WGFW"6vBFF&VG02W&Vǖr6V7W&GWW'F6Rg&Ц&v6F2FB7V6Ɨ6R6V7W&G0gFVVFW'WFƗ6VBvFFR&ƖfW&FbBFFb%Bw&wFW6Rbf'GVƗ6V@Vf&VG2BFFbV&Ɩ2@&fFR6VBg&7G'V7GW&W2( 2&WV&PFBR7FW&6BW֖RrP&6FV7FVBW"6&RWGv&f7W2FRWF6W2RFW6&PvRRW֖RFR&6FV7GW&S0W"WGv&&6FV7FVBF֗6Pf&ƗGBV7W&R6FVGWfV`B2VFW"GF6fRR6V7W&VBW FFF2FR7W&RR&R&FV7FpWfW'vfVVRFB6&RW6V@F7FVFBFFFW2W"&FV7FWFVBFFR66Bf'GVVVVG0W"WGv&fVF'FV6w2WVVVBFFG&W76p6V7W&G6VvW2'WBFV6w2'@bFR6WFVRB&6W76W2WVǒ'FB&RFp&'W7B6V7W&G7GW&RFWfVpVFW'7FFrbr6V6FfPf&F2FVBv266W72F6V6FfRf&FW"FW&Ɩ6W0rRG&VB6V6FfRFFƖ7Vf&6VVBV662BvpG&rbW'6VFƖr6V6FfPFFW7B&R'BbFRfW&6WFvWBVBF&&&6V"77FV0VvVW"TRB6Vf&&v6F0fR֖w&FV@g&fpFvFǐ6G&V@WGv&2vFVGG2FRvW&RFPFVfF`VGB06vr&672&7F6W0gFV&v6F2fW7BFRFW7B@w&VFW7BFV6wB'Wv&BG&fV6WF26WFW2FW&R2W&6VfV@6'&VF&WGvVVvVB6WF@7B'WBFW&R2FffW&V6R&WGvVVW&6WFB&VƗG&v6F2W7@7F'BvFFR&672ƖR6B&fRVRB&6W70&R7&F66VBbFG&W76pW"6V7W&G7GW&RR7W&RPfR7FGWFVB&W7B&7F6W2&V@77v&G2F6rW"77FV2vFFPFW7BWFFW2BVWrWFFFRvFW"&Gv&RB6gGv&RVgR7W&RFBFRVVVG2`W"FVfV6RFWF&6v&V6F2V2FBvVR77FV6VW2gVW&&ƗGF@f&F6VB&R6&VBvFFPFW"'G2bFRg&7G'V7GW&RvWFW FBf&F2F6F"`6&֗6R"F&VBFVƖvV6RFPf&F6VB&R6&VBf"WRbW"DDg&7G'V7GW&RFVFfW2WrFWf6RFRWGv&FBf&F6V@&R6&VBvFgVW&&ƗG66W 6B666FRFWf6RFV7W&RG0FVw&GvRFRf&Fগ6F2W6VgVWrFWf6RFPWGv&B2&V6W27F&R@&R7FgVvVB26&VBvFFW"'G2bW"g&7G'V7GW&Rb6W'6RF2&WV&W2FBFPfVF'2R6VV7BfRV&6BfR'VBFV"&GV7G2vFFP&ƗGF6&Rf&FvFFW 'G2bW"g&7G'V7GW&R* 3