Enterprise network environments continue to increase in complexity with growing security policies across more devices, managed across multiple organizational silos. A siloed approach to managing …
Enterprise network environments continue to increase in complexity with growing security policies across more devices, managed across multiple organizational silos. A siloed approach to managing security leads to limited visibility, inconsistent processes and human error - reducing an organization’s ability to quickly adapt to changing business requirements and opening the door to increased risk.
In a recent AlgoSec survey, more than half of mid-to-large organizations reported that network security complexity ultimately led to a system outage, a security breach or both. Security management traditionally has been managed across different silos such as information security, network operations, and audit teams. In large organizations running hundreds if not thousands of business applications, and applications being introduced to the network, updated or decommissioned on a weekly basis, the DevOps team is yet another silo.
Each of these silos is often overburdened and can fall into the trap of “putting the blinders on”. With each silo focused on their specific responsibility, the organization ends up with fractured visibility and no true owner of the complete security management process. What is the impact of making a security policy change? Does it introduce new risk? How long does this process take? What’s the impact to a critical business application such as a trading platform and vice-versa?
To ensure the highest level of security without slowing down business, organizations must be able to quickly translate business requirements into technical requirements and then implement and verify these changes. This requires automation and a comprehensive business process that is enforced in a uniform way across these multiple silos.
This session will examine new research findings on the impact of network security complexity, tips to improve security management and will share a real-life use case from CitiGroup, detailing how this enterprise shifted from a siloed security approach to a unified, end-to-end process and the return on its investment.