securely enabling the digital age
TRANSCRIPT
World®’16
SecurelyEnablingtheDigitalAge
AndrewMcCullough- SecurityConsultant- HewlettPackardEnterprise
SCT74S
SECURITY
2 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
©2016CA.Allrightsreserved.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.
Thecontentprovidedinthis CAWorld2016presentationisintendedforinformationalpurposesonlyanddoesnotformanytypeofwarranty. The informationprovidedbyaCApartnerand/orCAcustomerhasnotbeenreviewedforaccuracybyCA.
ForInformationalPurposesOnlyTermsofthisPresentation
3 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Abstract
Thedigitalrealityisalreadyuponus,andmakingasuccessfulmovetodigitalrequiresacoordinatedeffortandacomprehensiveviewofsupportingtechnologies.Tobecomeadigitalenabler,ratherthanfocussecuritysimplyonprovidingdigitalresilience,yoursecuritymustenablethebusinesstosecurelytransformapplicationsintothedigitalageandfosterclients’trust.Howcansecuritybecometheacceleratorfordigitaltransformation,whileprovidingtheresiliencerequiredforthedigitalage?Inthissession,you’lllearnhowsecuritywillenablethebusinessandplayakeyroleintransformingapplications—safelyandsecurely.
AndrewMcCulloughHewlettPackardEnterpriseSecurityConsultant
4 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Agenda
DIGITALAGE
DIGITALENABLER
DIGITALRESILIENCE
1
2
3
5 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Agenda
DIGITALAGE1
6 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
DigitalAge
SystemsofEngagement&Interaction
SystemsofControl
SystemsofRecord
MonetizeInteraction
User/Consumerisking
Atoms
Bits
Photons
Digital
7 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Fullyinterconnectedworld
2020
7.6Billionworldpopulation1
100Billionconnecteddevices1
1 HPEInternalResearch
Cybersabotageinthephysicalworldisareality
Identityisthenewperimeter“Usersjustwanttoaccessdata”
FullyInterconnectedsupplychainsmeansinterconnectedusers&risks
IoTattacksurfacecanbeusedtolaunchmassivescaleattacks
8 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Agenda
DIGITALENABLER2
9 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
SecurityasaDigitalEnabler?
Betterinteraction(CX) MoreinteractionsSourceofdifferentiation
– Privacyandsecurityfocus
– Customer’schoice
– Adaptive
– Biometrics
– Federated
– Socialmedia
Attractandretainmorecustomers|Chargepremiumforprivacy/security
10 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Example:EnablethebusinesswithbettercustomerexperienceIdentityFederation
Tweet:TheloyaltypointsfromthepurchaseIdidlastWednesdayweren’tcreditedyet
Tweet:Thankyou!
Tweet:Apologiesfortheinconvenience.Justcreditedtherespective325points.
Retail
Tweet:Ijustmissedmyflight
Tweet:Perfect!
Tweet:Mr.Smith,Ijustrebookedyourflight.Pleaseproceedtogate9.Yourflightdepartsin40minutes.
TravelandTransportation
11 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Today’sDigitalEnterpriseNeedsaNewStyleofProtection
Traditional
Ultimatestate – Impregnable
Messaging – Fear,uncertainty, doubt
Businessproximity – None
Accountabilityandleadership – IT/risk department
Focus – Perimeterandinformation
Approach – Complicate,obstruct,sayno
SOCfocus – Regional,isolated,servers,network&securitydevices
ProtectYourDigitalEnterprise– Assumeastateofcompromise.Digitalresilience– Stopexfiltrationandbusiness disruption– Detectearly.Quickandeffectiveresponse
– Confidence,Assurance, Visibility,preparedtorespond
– Enabler.Providerofbusinessoutcomes
– Board,CEO,business
– Protect yourmostcriticalassetsandtheinteractionsbetweenthem, regardlessofdevice orlocation
– UseaRiskBasedApproachtoaddresscybermaturitygaps– Includes valuechainandvaluecreationecosystem
– Lean,agile. Maximizeinteractionopportunitiesatlowestrisk
– FullCyberSituational Awareness– Global,sharingthreat intelligence– AlldevicesincludingICS/SCADA
12 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Agenda
DIGITALRESILIENCE3
13 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
UnderstandToday– CyberMaturityReview(CMR)
CyberDefense (CD)
14 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Acceleratetomorrow– CyberReferenceArchitecture
12intotal
63intotal345intotal
CyberDefense (CD)
Risk&ComplianceManagement(RCM)
ResilientWorkforce(RW)
Strategy,Leadership
&Governance(SLG)
SecurityResilientArchitecture(SRA)
PhysicalSecurity(PS)
SecurityResilientArchitecture(SRA)
CyberDefense (CD)
IdentityandAccess
Management(IAM)
InfrastructureandEndpointSecurity(IES)
ApplicationsSecurity(AS)
DataProtectionandPrivacy
(DPP)
ConvergedSecurity(CS)
RiskandComplianceManagement(RCM)
ResilientWorkforce(RW)
SecurityOrchestrationandManagement(SOM)
Strategy,Leadership
andGovernance(SLG)
Domain
Sub -domain
Sub -domain
Capability
Capability
Capability
Capability
Cyberdefenseblueprint
Identityandaccess
managementblueprint
Infrastructureandendpoint
securityblueprint
Applicationssecurityblueprint
Dataprotectionandprivacy
securityblueprint
Resilientworkforceblueprint
Riskandcompliancemanagementblueprint
Cloudsecurityblueprint
(consumption)
Cloudsecurityblueprint(provider)
Internetofthingssecurityblueprint
Connectedvehiclesecurity
blueprint
Industrialcontrolsystemssecurity
blueprint
GDPRsecurityblueprint
Collaborationsecurityblueprint
Mobilitysecurityblueprint
Framework
Highlystructuredandgranular
SingleDomain
MultiDomain
15 Blueprints
15 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Don’tMissOurINTERACTIVESecurityDemoExperience!
SNEAKPEEK!
World®’16©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD15
16 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Questions?
17 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Stayconnectedatcommunities.ca.com
Thankyou.
@CAWORLD#CAWORLD ©2016CA.AllRIGHTSRESERVED.18 @CAWORLD#CAWORLD
Security
FormoreinformationonSecurity,pleasevisit:http://cainc.to/EtfYyw