Vulnerability management - beyond scanning
0 likes319 views
The document outlines the importance of vulnerability management in cybersecurity, emphasizing the relationship between patch management and vulnerability management processes. It highlights key challenges such as data overload and prioritization while providing a blueprint for an effective vulnerability management process. Jirasek Security's credentials and client testimonials underscore their expertise and successful partnerships in enhancing cybersecurity capabilities.
Vulnerability management - beyond scanning
- 1. WoC Dubai April 2018 VULNERABILITY MANAGEMENT?
- 2. Who am I? • European, husband & father • Security Architecture • Vulnerability management technology and processes • Security Operations Centre • Cloud Security • Crypto coin backed VPN project • CEO, Jirasek Security Ltd Just a guy with some experience in security https://Vladimir.jirasek.eu @vjirasek on Twitter Not on Facebook
- 4. Known challenges 4 • Knowns & unknowns • Data overload • Priorities © Jirasek Security. All rights reserved. 2018
- 5. Relationship between two key processes 5© Jirasek Security. All rights reserved. 2018 Patch management •Regular activity by Dev or Ops driven by patch cycles •Not necessarily risk driven •Responsible: Ops Vulnerability management • Analytics is key – threat, company context, … • Threat triggered process • Responsible: Cyber Security Ops
- 6. Blueprint for an effective Vulnerability Management Process Asset discovery Vulnerability acquisition Triage (Analysis) Action Patch Reconfigure Monitoring Vulnerabilities CMDB Reporting Threat intelligence & existing controls Reconciliation between scanned and known hosts. Asset criticality. Authenticated and agent-based scanning where possible Automated analysis of each vulnerability, threat context – threat actors, exploitability Implementing corrective actions and increasing monitoring Incident and change requests Determine criticality 6 Vulnerability posture © Jirasek Security. All rights reserved. 2018 Business Assets
- 7. “We have worked with Jirasek Security for over 3 years. Their work has been professional, precise and exceeding expectations.” • We come from your side of the fence • We’ve experienced the good, bad and the ugly • Ability to relate to expectations • Taking an interest in our clients • Always available • We never reach “the end”, the journey continues CISO, a global semiconductor company 7© Jirasek Security. All rights reserved. 2018 What makes us unique We have worked with Jirasek Security since 2017. Their professional and managed service have helped us secure and retain business with FTSE 100 companies.” CTO, Cortexica Vision Systems
- 8. Our clients 8 For over 7 years we have successfully helped our clients enhance their cyber security capability © Jirasek Security. All rights reserved. 2018
- 9. Our partners 9 Well balanced portfolio covering all cyber security domains © Jirasek Security. All rights reserved. 2018
- 10. Benefits of engaging with Jirasek Security 10 • Customer Satisfaction • Specialist Resources • Additional Revenue © Jirasek Security. All rights reserved. 2018
- 11. Contact us 1 1 Jirasek Security Ltd +44 207 183 9858 Contact@JirasekSecurity.com www.JirasekSecurity.com Company Number: 06871193