Cyber Risk Operation Center … is not a SOC
0 likes30 views
The document discusses the strategic importance of the Cyber Risk Operation Center (CROC) in enhancing cyber risk management within an operational framework. It emphasizes the distinction between CROC and traditional Security Operations Centers (SOC) and outlines the lifecycle of cyber risk management, including risk scoring and threat detection. Additionally, it highlights factors such as asset importance and the likelihood of successful attacks to illustrate the value of CROC in a cybersecurity context.
Cyber Risk Operation Center … is not a SOC
- 1. CYBER RISK OPERATION CENTER STRATEGIC VALUE in CYBER RISK MANAGEMENT and OPERATIONAL FRAMEWORK FRANCESCO FAENZI HEAD OF CYBERSECURITY & RESILIENCY Itway.com
- 2. ITWAY CYBER SECURITY & RESILIENCY CYBER-PHYSICAL SECURITY & RESILIENCY IDENTITY & MICROSOFT SECURITY & RESILIENCY MULTI-CLOUD & HYBRID INFRA SECURITY & RESILIENCY MODERN PLATFORM ENGENEERING & MODERN OPS CYBER RISK OPERATION CENTER RISK MANAGEMENT
- 3. CROC IS NOT A SOC CROC SOC
- 5. WHAT CROC MEANS FOR A CISO
- 6. CYBER RISK MANAGEMENT LIFECYCLE
- 7. CROC MEANS CYBER RISK SCORING INTELLIGENT CYBER RISK SCORING Vulnerability Exposure - Vulnerabilities detected - Misconfigurations - Suspicius activity - Suspicius data access Security Config + control - Security Policies implemented - Regulatory Compliance Threat Activity - Threat Detections - Detection from investigation - Attack attempts Business Value - Asset importance - Impact of outage Asset Posture - Asset Discovery - Asset Influence - Asset Context Likelihood for a successfull attack Impact for a successfull attack Reduce Likelihood Minimaze Impact scope
- 8. THANK YOU