Cost-effective approach to full-cycle vulnerability management
0 likes579 views
The document discusses an automated and cost-effective approach to vulnerability management for small and medium businesses. It recommends automating network topology mapping, vulnerability assessments, reporting, and remediation workflows through a ticketing system. This allows businesses to prioritize security tasks while reducing the workload through automation. Periodic scanning, automated report generation and a closed-loop ticketing system for patching are key parts of the recommended approach.
Cost-effective approach to full-cycle vulnerability management
- 1. Cost-effective approach to full-cycle vulnerability management Sumita Chotani 13th November 2012 Company Confidential
- 2. Common Issues across SMB 2 One man army Security is not a priority Upper Management wants results Time is of the essence User friendly product is imperative
- 3. AUTOMATION is the key 3 What can you automate? Identifying your Network Topology and Asset Management? Vulnerability Assessment of the network? Reporting the findings of the assessment? Remediation workflow via a ticketing system?
- 4. Identifying your network topology and Asset Management 4 Discover, understand and organize your network and the people managing the systems 3 Basic Steps: o Run Scheduled maps* o Form Asset Groups around the existing logical structure o Assign each Asset Group to its respective owner Map ~ Network discovery
- 5. Identifying your network topology and Asset Management 5
- 6. 6 Identifying your network topology and Asset Management
- 7. 7 Identifying your network topology and Asset Management
- 8. Identifying your network topology and Asset Management 8
- 9. Vulnerability Assessment of the network 9 Periodic scanning of all perimeter and internal systems E.g. o Nightly scans of Production Environment o Weekly scans Critical servers and workstations o Monthly scans of entire network pre and post Patch Tuesday
- 10. Vulnerability Assessment of the network 10
- 11. 11 Reporting the findings of the assessment Actionable Report o Patch Report • One Interactive Report: - View of a Patch Matrix - Patch – Host Mapping - Link to download the Patch Schedule report generation
- 12. 12 Reporting the findings of the assessment
- 13. 13 Reporting the findings of the assessment
- 14. 14 Setting up a Remediation workflow via a ticketing system Need for Closed Loop Ticketing System
- 15. 15 Setting up a Remediation workflow via a ticketing system Closing Open Tickets
- 16. 16 Setting up a Remediation workflow via a ticketing system Reopening Closed Tickets
- 17. 17 Setting up a Remediation workflow via a ticketing system
- 18. 18 Setting up a Remediation workflow via a ticketing system
- 19. Check - List 19 Automated Inventory Lookup ✓ Asset Management and Delegation ✓ Automated Scanning ✓ Automated Report Generation ✓ Reports for Patch Management ✓ Automated Remediation Workflow ✓
- 20. 20 Reduce workload for everyone through automation and prioritisation
- 21. schotani@qualys.com Thank You © 1999–2012 Qualys, Inc. All rights reserved.