IT Foundation Management Security
- 1. IT Foundation Management for SecuritySecuring the IT Foundation of your BusinessYour business is built on IT
- 2. What is the IT Foundation?The IT Foundation includes all of your physical and virtual:Servers…Network Gear…SANS…Operating Systems…Blades…Networks…Databases…Appliances…Virtual Machines…Environment…And is supported by:Michael…VM AdministratorI’m Joe…Solaris Systems AdministratorSteve,I’m a SANS AdministratorCheryl,Oracle DBA…Hi. Raphael.Network AdministrationDave,Independent ConsultantChris here…Tools ManagerHi I’m Tania,Linux Systems Administrator TDi Technologies Your business is built on IT
- 3. IT Foundation ManagementPrivileged InterfacesDELIVERS: Persistent Security Model Unified Security Practice Automatic Forensics Capture Transparency & OversightDRIVING: Comprehensive Security Coverage Simplified Management Model Common-Consistent Practices Transparency Reliability QualityYIELDING: Meeting of CISO Mandates Enhanced Information Assurance Improved Governance Reduced Risk Better ControlPrivileged ActorsMichael…VM Administrator I’m Joe…Solaris Systems AdministratorSteve,I’m a SANS AdministratorCheryl,Oracle DBA…Hi. Raphael.Network AdministrationDave,Independent ConsultantChris here…Tools ManagerHi I’m Tania,Linux Systems Administrator TDi Technologies Your business is built on IT
- 4. The Challenges are Driven by Complexity TDi Technologies Your business is built on ITSiloed Operation. Multiple Applications.Many Methods. Labor Intensive.I’m Joe…Solaris Systems AdministratorHi. Raphael.Network AdministrationSteve,I’m a SANS AdministratorHi I’m Tania,Linux Systems AdministratorCheryl,Oracle DBA…Michael…VM Administrator
- 5. Simplified by IT Foundation Management TDi Technologies Your business is built on ITTo a unified security solution over all privilegedusers and interfaces.I’m Joe…Solaris Systems AdministratorHi. Raphael.Network AdministrationSteve,I’m a SANS AdministratorHi I’m Tania,Linux Systems AdministratorCheryl,Oracle DBA…Michael…VM Administrator
- 6. IT Foundation ManagementTraditional Practices Persistence: Normal OperationDocumentation: Manual Persistence: All ModesDocumentation: AutomaticSecured in Normal Mode OnlyDocumentation is by handPersistent connectionFull security in all modesFull documentation in all modes including:Normal OperationMaintenanceConfigurationFailureWith New Capabilities that Drive Success TDi Technologies Your business is built on IT
- 7. Command and Control TDi Technologies Your business is built on ITIT Foundation Management Delivers Real-time Policy EnforcementBusiness RulesThreat!Generate AlertTerminate AccessEtc…Their activity is scanned in real-time against PoliciesBreak/FixIncidentsConfigurationPatchingProgrammingHousekeepingMaintenanceInstall softwarePrivileged Actors perform their WorkResulting in Real-Time Foundational Command and Control Real-time scanning of Privileged User Activity Script Engine for Complex and Wildcard Rules Control over Sessions – including Termination Configurable Alert Priorities Custom Actions (email, text, terminate) Unlimited Rules Support Directly Embed Compliance Rules in ScansNo Threat.No Action Required.
- 8. Simplification Example – Access ComplexityWith the Traditional Approach, Privileged Actors need to know…Log on?PuTTY?Absolute?Credentials?TeraTerm?ZOC?IP Address?SSH?CMDB?Commands?Tunnelier?WHERE?WHICH?WHAT?HOW?Terminal?Other DB?TELNET?etc?Other records?HTTP?Other?What syntax applies?With IT Foundation Management, Privileged Actors need to know…NAME
- 9. Maintenance is Managed Safely and EffectivelyMaintenance occurs regularly – yet mistakes can take critical IT assets off-line or compromise security.Maintenance Includes:PatchingSecurity
- 10. Performance
- 11. Features
- 13. Demand
- 14. New requirements
- 15. Issues
- 16. Expansion
- 19. Run backups
- 20. Monitor/schedule jobsUpgradingNew software versions TDi Technologies Your business is built on ITIT Foundation Management optimizes, automates, and centrally-manages all foundational maintenance activities.
- 21. Managing the IT Services FoundationApplicationApplicationApplicationServiceCompletesApplicationService StartsBusiness logic is updated as needed(continuous improvement)This information is collected in real-timeResponse/ Remediation actions are triggeredBusiness logic is applied: Events, SLA Threats
- 22. Use Case – Electronic Funds Transfer (EFT)Receiving Bank Transfer/Posting ServiceCurrencyExchange ServiceFederal ReserveTransfer ServiceServiceCompletesSending Bank WireTransfer ServiceService StartsBusiness logic is updated as needed(continuous improvement)SLA Management:Transactions (tracking) & Applications (errors)Work BottlenecksMonitor, Predict, Alert on end-to-end processing timeIdentify Issues (work stoppage) in Real-TimeThis information is collected in real-timeRemediation actions are triggeredBusiness logic is applied: SLA Threats
- 23. Customer BInstanceCustomer AInstanceCustomer CInstanceCustomer DInstanceCustomer EInstanceIT Foundation Management in Public CloudsCLOUDITFM for Public Clouds:Privileged Interfaces SecuredIsolated from other Cloud CustomersIsolated from Cloud ProviderPrivileged Activity Automatically Recorded (down to the keystroke)IT Operations Simplified and OptimizedIT Services Effectively Managed
- 24. Reducing Risk to the Business TDi Technologies Your business is built on IT“Manual documentationAutomatic DocumentationReducing our risk exposure is always a good thing. When it includes addressing regulatory, security and operational challenges the value adds up fast.CEOUnnecessary complexityDramatic SimplificationUnified Privileged Interface SecuritySiloed security tools and practicesReal-time Command & ControlLittle or no control capabilityRISKDefinitive VerificationExplicit AccountabilityNo means of verificationLack of accountabilityWhen mistakes happen in the IT Foundation, the business is placed at risk.
- 25. IT Security and Compliance BenefitsVP IT OperationsAccess policy enforceableChange records automatically capturedVerification easyCISO expectations met point by pointIT Tools ManagerThe right tool that does the whole job rightReduction in workloadIncreased internal customer satisfactionProblem solved!The BusinessAssets better protectedOperations simplifiedOversight and transparency enabledRisks reducedCISOPrivileged user security in all modesStrong, verifiable deterentComprehensive forensics records TDi Technologies Your business is built on IT
- 26. IT Foundation ManagementSecurity FoundationClosing the Foundation Gap Role-based access and control
- 27. Record the 5 Ws
- 28. Complete forensic historyIT Operations FoundationDoing More with LessUniversal, integrated environment•Optimized automated process • Secure remote management•Compliance FoundationMeeting Intent & Interpretation Control subsystems changes
- 29. Detect compliance events
- 30. Build auditable historyIT Services FoundationDelivering on CommitmentsSense and Respond in real-time• Correlate across the architecture• Proactively manage and protect• TDi Technologies Your business is built on IT