why do we need automation - firewall … · automation in security te tion have some automation but...

1
THE STATE OF AUTOMATION IN SECURITY THE CURRENT STATE OF AUTOMATION have some automation but felt it was not enough have little to no automation of organizations are highly automated 15% 52% 33% WHY DO WE NEED AUTOMATION SO... Network operations staff want automation to replace manual tasks Data center architects want automation for cloud and SDN projects Security staff want automation to address cyber threats Cyber threats and the number of alerts Difficulty hiring experienced security staff Too much time spent on manual tasks Cloud and SDN projects Hackers using automated tools, so an automated defense is required 1 2 3 4 5 Lack of knowledge on how to automate processes 5 Concerns about accuracy and false positives 1 6 Concerns about business disruption Don’t have the time to implement automation 3 2 Difficulty driving organizational changes 4 Lack of automation tools FEAR IS HOLDING US BACK Lack of automation tools Business disruption TOP CONCERNS FOR SENIOR EXECUTIVES 1 2 WITHOUT AUTOMATION WHAT’S EVERYONE DOING ALL DAY? 1 Ongoing security configuration and change management 5 Monitoring and intrusion prevention Vulnerability analysis and patching 4 Large complex deployment projects 3 6 Auditing and compliance 7 Deploying new security solutions 2 Incident response and/or remediation 2.5/5 2.5 in 5 said it caused AN APPLICATION OUTAGE 2/5 2 in 5 said it caused A NETWORK OUTAGE 1/5 1 in 5 said it caused A SECURITY BREACH WHAT’S THE IMPACT? 2/5 2 in 5 said it caused A DECREASE IN APPLICATION PERFORMANCE THE AVERAGE COST OF A DATA CENTER OUTAGE PONEMON INSTITUTE, 2016 COST OF DATA CENTER OUTAGES REPORT $740,357 in 2016 will be >3 working days 1-3 working days 1 working day 3-6 hours <1 hour 1-3 hours 23.4% 35.1% 22.3% 11.7% 4.9% 2.6% HOW LONG DOES IT TAKE TO FIX A MANUAL ERROR? said that the use of automation needs to increase over the next 3 years EVERYONE WANTS MORE WHICH IS WHY IT'S YES TO SECURITY PROCESS AUTOMATION WHICH IS WHY IT'S YES TO SECURITY PROCESS AUTOMATION 3.25 out of 4 believe it will INCREASE THE OVERALL SECURITY POSTURE OF AN ORGANIZATION 3.25/4 2 out of 4 say it will HELP DEAL WITH THE SKILLS SHORTAGE 2/4 3/4 3 out of 4 say that it will REDUCE ERRORS AND PROCESS SECURITY POLICY CHANGES FASTER 3 out of 4 agree or strongly agree that it will ELIMINATE MISTAKES THAT CREATE ACCESS POINTS FOR HACKERS 3/4 3 out of 4 say it will IMPROVE APPLICATION AVAILABILITY BY REDUCING OUTAGES 3/4 3/4 3 out of 4 say it will REDUCE AUDIT PREPARATION TIME AND IMPROVE COMPLIANCE BROUGHT TO YOU BY: www.algosec.com

Upload: lamnguyet

Post on 09-Sep-2018

215 views

Category:

Documents


1 download

TRANSCRIPT

THE STATE OFAUTOMATION IN SECURITY

THE CURRENT STATEOF AUTOMATION

have some automation but felt it was not enough

have little tono automation

of organizations are highly automated

15% 52% 33%

WHY DO WE NEED AUTOMATION

SO...

Network operations staff want automation to replace

manual tasks

Data center architects want automation for cloud

and SDN projects

Security staff want automation to address cyber

threats

Cyber threats and the number of

alerts

Difficulty hiring experienced security staff

Too much time spent on manual

tasks

Cloud and SDN projects

Hackers using automated tools,so an automated

defense is required

1 2 3 4 5

Lack of knowledge on howto automate processes

5

Concerns about accuracy and false positives

16

Concerns about businessdisruption

Don’t have the time to implement automation

3

2

Difficulty drivingorganizational changes

4

Lack of automation tools

FEAR IS HOLDING

US BACK

Lack of automation tools

Business disruption

TOP CONCERNS FORSENIOR EXECUTIVES

1

2

WITHOUTAUTOMATIONWHAT’S EVERYONE DOING

ALL DAY?

1

Ongoing security configuration and change

management

5

Monitoring and intrusionprevention

Vulnerability analysisand patching

4

Large complexdeployment projects

36

Auditingand compliance

7

Deploying newsecurity solutions

2

Incident responseand/or remediation

2.5/5

2.5 in 5 said it causedAN APPLICATION OUTAGE

2/5

2 in 5 said it causedA NETWORK OUTAGE

1/5

1 in 5 said it causedA SECURITY BREACH

WHAT’S THE

IMPACT?

2/5

2 in 5 said it causedA DECREASE IN APPLICATION PERFORMANCE

THE AVERAGE COST OF A DATA CENTER OUTAGE

PONEMON INSTITUTE, 2016 COST OF DATA CENTER OUTAGES REPORT

$740,357in 2016will be

>3working days

1-3working days

1working day

3-6hours

<1hour

1-3hours

23.4%

35.1%

22.3%

11.7%

4.9%2.6%

HOW LONGDOES IT TAKE TO FIXA MANUAL ERROR?

said that the useof automationneeds to increaseover the next 3 years

EVERYONE WANTS MORE

WHICH ISWHY IT'S YESTO SECURITY PROCESS

AUTOMATION

WHICH ISWHY IT'S YESTO SECURITY PROCESS

AUTOMATION

3.25 out of 4 believe it will

INCREASE THE OVERALL SECURITY POSTURE OF AN ORGANIZATION 3.25/4

2 out of 4 say it will

HELP DEAL WITH THE SKILLS SHORTAGE 2/4

3/4

3 out of 4 say that it will

REDUCE ERRORS AND PROCESSSECURITY POLICY CHANGES FASTER

3 out of 4 agree or strongly agree that it will

ELIMINATE MISTAKES THAT CREATEACCESS POINTS FOR HACKERS 3/4

3 out of 4 say it will

IMPROVE APPLICATION AVAILABILITYBY REDUCING OUTAGES 3/4

3/4

3 out of 4 say it will

REDUCE AUDIT PREPARATION TIMEAND IMPROVE COMPLIANCE

BROUGHT TO YOU BY:

www.algosec.com