Symantec Control Compliance Suite 11, February 2012

Symantec Control Compliance Suite 11February 14, 2012

Connecting IT Risk to the Business• 70% of security decision makers report increased executive awareness of IT security due to high profile attacks and breaches• Changes to IT risk management programs that would have the most positive impact on business counterparts – 47%: better explain the value of security in business terms – 44%: provide more accurate and timely data – 40%: more frequent reporting of risk and compliance dataSymantec Control Compliance Suite 11 2

Organizational EvolutionFrom Compliance to Business Risk Management Build Connect to sustainable business Focus on risk program top priorities Stay ahead of threats Comply withkey mandates Only 1 in 8 best performing organizations feel Info Sec can influence business decisions Source: Information Risk Executive Council, 2011Symantec Control Compliance Suite 11 3

Structured Approach to Addressing IT Risk and Compliance Stakeholders Security / Audit IT / Operations Business / Mgmt. 1. PLAN 3. REPORT Define policy and Customize reports for IT risk objectives multiple stakeholders 2. ASSESS 4. REMEDIATE Assess environment Remediate based on against objectives highest priority risks EnvironmentSymantec Control Compliance Suite 11 4

Symantec Control Compliance Suite Stakeholders Security / Audit IT / Operations Business / Mgmt. PLAN REPORT • Demonstrate compliance to multiple • Define Policy risk objectives CCS business CCS Risk CCS Reporting CCS Dynamic Manager Manager* stakeholders • Create policies for multiple mandates • Correlate risk across business assets & Analytics Dashboards • Map to controls and de-duplicate CCS Content • High level dashboards with drill down EVIDENCE ASSETS CONTROLS ASSESS REMEDIATE • Identify deviations from technical Symantec Data Extended Data CCS Standards CCS Response Vulnerability 3rd Party • Risk-based prioritization Symantec Assessment Connectors Connectors standards Symantec Manager Manager Manager • Discover critical vulnerabilities • Closed loop tracking of deficiencies Ticketing Workflow ServiceDesk CCS • Evaluate procedural controls • Integration Integration systems with ticketing Integration • Combine data from 3rd party sources EnvironmentSymantec Control Compliance Suite 11 5 * Planned new product. Roadmap subject to change.

Control Compliance Suite Risk Manager  Define a business asset you want to manage  Visualize and understand IT risk for this business asset  Prioritize remediation based on IT risk, not technical severity  Monitor risk reduction over timeSymantec Control Compliance Suite 11 6

Visualize and Understand IT Risk Enterprise Wide View of Business RiskRisk Overview for People’s Bank Symantec Control Compliance Suite 11 7

Visualize and Understand IT Risk Business Unit Level View of RiskRisk Overview for Internet Banking Symantec Control Compliance Suite 11 8

Visualize and Understand IT RiskBalanced View of Business and Operational Metrics Drill down to technical detailsSymantec Control Compliance Suite 11 9

Prioritize Remediation Based on RiskRisk ModelingSymantec Control Compliance Suite 11 10

Prioritize Remediation Based on RiskRemediation Plan by Security Objective Review & finalize remediation planSymantec Control Compliance Suite 11 11

Monitor Risk Reduction Over TimeManage Remediation Plans Track risk reduction for remediation plansSymantec Control Compliance Suite 11 12

Visualize and Understand IT Risk High Level Progress Reporting on Security ObjectivesRisk Overview for Internet Banking Review progress, discuss gaps and drive further actions, investments and accountability Symantec Control Compliance Suite 11 13

Key Benefits of Control Compliance Suite Risk Manager Visualize IT Risk • Holistic view of IT risk across the enterprise • Customized views for different audiences Translate into Business Terms • Business stakeholders make better decisions • IT operations prioritize based on business impact Drive Action to Reduce Risk • Relevant metrics drive awareness and action • Better justification for security investmentsSymantec Control Compliance Suite 11 14

Thank you! Copyright © 2012 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.Symantec Control Compliance Suite 11 15

Symantec Control Compliance Suite 11, February 2012

by Symantec

Accessibility

Categories

Upload Details

Usage Rights

Statistics

Symantec Control Compliance Suite 11, February 2012 Presentation Transcript