Network infrastructure and operations teams and information security teams are not natural partners, but they need to learn how to be. Today, 75% of enterprises have seen an increase in the amount of collaboration that takes place between the network teams and security teams. Unfortunately, only 39% of enterprises have been fully successful with efforts to improve collaboration between these teams. Based on new research, Enterprise Management Associates (EMA) can now reveal that successful NetSecOps collaboration will be essential to digital transformation. These slides based on the webinar featuring Shamus McGillicuddy, vice president of research at EMA, provide insights from the research report, “NetSecOps: Aligning Networking and Security Teams to Ensure Digital Transformation.”

1. NetSecOps
Aligning Networking and
Security Teams to Ensure
Digital Transformation
Shamus McGillicuddy
Vice President of Research
Shamus@enterprisemanagement.com

2. Watch the On-Demand Webinar
• NetSecOps: Aligning Networking and Security Teams to Ensure Digital Transformation
On-Demand Webinar: https://info.enterprisemanagement.com/netsecops-research-webinar-ws
• Check out upcoming webinars from EMA here:
https://www.enterprisemanagement.com/freeResearch

3. Featured Speaker
Shamus McGillicuddy is the vice president of
research at Enterprise Management Associates
(EMA), where he leads the network infrastructure and
operations practice. He has more than 15 years of
experience in the IT industry. His research focuses on
all aspects of managing enterprise networks,
including network automation, AIOps-driven network
operations, multi-cloud networking, and WAN
transformation.
© 2021 Enterprise Management Associates, Inc. 3
Shamus McGillicuddy
Vice President of Research
Network Infrastructure and Operations
| @ema_research

4. Sponsors
© 2021 Enterprise Management Associates, Inc. 4
| @ema_research

5. Agenda
Research
Goals and
Methodology
1 2 3
Drivers of
NetSecOps
Collaboration
Making it
Happen
4
Network Data
5
Network
Monitoring
and
Management
Tools
6
Q&A
© 2021 Enterprise Management Associates, Inc. 5
| @ema_research

6. Research Goals
and Methodology

7. NetSecOps Research Goals
© 2021 Enterprise Management Associates, Inc. 7
Why is this collaboration increasing?
What role does network data play?
What network management tools and technologies support this
collaboration?
Are there any roadblocks to these partnerships?
Have IT organizations established best practices?
Over the last few years,
EMA research has found that
network infrastructure &
operations teams have
increased their collaboration
with information security and
cybersecurity teams
| @ema_research

8. © 2021 Enterprise Management Associates, Inc.
Job Titles
25% IT executives
48% IT middle management
27% Engineers/Architects/Admins
Groups
25% IT executive suite
20% Network engineering/administration
19% InfoSec/Cybersecurity/SecOps
15% IT architecture
14% Network operations
9% Data center operations
16+ Industries
24% IT services/MSPs
19% Retail/Wholesale/Distribution
15% Manufacturing
13% Finance/Banking/Insurance
5% Construction
5% Healthcare/Medical/Pharmaceutical
4% Software
Geography
50% North America 50% Europe
Company Size by Employees
27% Midsized enterprise (1,000 to 2,499)
53% Large enterprise (2,500 to 9,999)
20% Very large enterprise (10,000+)
Research Methodology: Market Survey
© 2021 Enterprise Management Associates, Inc. 8
| @ema_research

9. Drivers of NetSecOps
Collaboration

10. 75% of IT Organizations Report Growth in NetSecOps Collaboration
© 2021 Enterprise Management Associates, Inc. 10
| @ema_research
Sample Size = 366
Most important areas of collaboration
1. Technology implementation 44%
2. Infrastructure planning & design 37%
3. Technology evaluation & procurement 36%
4. Operational monitoring 33%
5. Change management 23%
6. Troubleshooting/Incident response 18%

11. Collaboration Drivers
© 2021 Enterprise Management Associates, Inc. 11
| @ema_research
81% Public cloud adoption/migration
81% Work from home/work from anywhere
81% Data center modernization
79% IoT/Edge computing
75% DevOps
72% WAN transformation (SD-WAN/SASE)
68% Zero trust security
“I believe that everyone is responsible for
security. It’s not just the security team’s job
to do security. Network engineers need to
develop security-oriented solutions.”
Director of network engineering and operations
$7 billion healthcare enterprise

12. The Many Benefits of Successful Collaboration
© 2021 Enterprise Management Associates, Inc. 12
Benefits of successful NetSecOps partnerships
NetSecOps partnerships serve the
interests of other IT groups
• ITSM 66.4%
• IT governance/financial management 53.8%
• CloudOps 53%
• Data center I&O 50.5%
• DevOps 41.5%
“You will get a final product that is
more secure, better implemented,
and can recover from disaster.”
Network security architect
$2.5 billion software company
| @ema_research
Sample Size = 366

13. Making it Happen

14. Friends or Foes?
© 2021 Enterprise Management Associates, Inc. 14
| @ema_research
“[The security team is] too esoteric. They ask,
‘Why is the application team putting this
here instead of there?’ That ship has already
sailed. We often get the sense that [security]
doesn’t understand what the business is.”
Network architect
$15 billion retailer
“When the network team is building
something and working on a deadline,
they see the security team as a roadblock
to hitting a milestone, especially if leadership
is pushing them to run things tightly,”
Network security architect
$2.5 billion software company
Only 39% reported fully successful
NetSecOps partnership
• IT execs are most enthusiastic 69%
• Engineers/Architects/Admins are less
enthusiastic 24%
Top challenges to collaboration
• Data quality/authority issues 28%
• Cross-team skills gaps 25%
• Budget issues 21%
• Architectural complexity 20%
• Lack of tools/technologies that enable
collaboration 19%

15. 92% of CIOs/CISOs Have Introduced Policies and Programs to Encourage
NetSecOps Collaboration
© 2021 Enterprise Management Associates, Inc. 15
62% New best practices and processes (e.g., ITIL)
57% Reorganization
53% Budget sharing
51% Training/Certifications
48% Shared tools
Only 36%
of CIO policies and
programs have been
fully successful
| @ema_research
“I’ve been added to committees, and we have quarterly meetings
where global security comes and presents. We come up with priorities
for collaboration based on business priority.”
Director of global networks
$80 billion technology company

16. Network Data

17. Security Teams Need to Analyze Network Traffic Drives NetSecOps Collaboration in
83% of Enterprises
© 2021 Enterprise Management Associates, Inc. 17
| @ema_research
“The process of sharing data sometimes works well, and sometimes it
doesn’t work well because the security team doesn’t have a solid
idea of what they’re asking for. They say, ‘Show me data from web
servers.’ And I have to ask, ‘Which web servers? Because we have a
lot.’ Sometimes it’s difficult to communicate with them.”
Network architect
$15 billion retailer
93%
of security teams
need access to
packet metadata
92%
of security teams
need access to full
packet data
Why they need this data
69% Network detection & response/network traffic analysis
58% Incident response
55% Real-time packet payload analysis
42.5% Forensic packet analysis

18. Unifying Packet Access and Capture
© 2021 Enterprise Management Associates, Inc. 18
Network packet brokers
• 94% are using NPBs to get packet data to analysis tools
• 90% believe NPBs are important to facilitating collaboration
Consolidation of packet capture infrastructure
• 97% of enterprises are consolidating network and security team
packet capture resources
• Primary drivers: Reduced security/compliance risk, fewer data
conflicts
Packets are the
ultimate source of
network truth
• 56% of network teams need
continuous access to all
packets crossing the wire
• 51% of network teams need
the same
| @ema_research

19. Network Monitoring
and Management

20. “
Siloed IT Organizations and Vendors Have Work to Do
© 2021 Enterprise Management Associates, Inc. 20
“When you are buying a solution, you aren’t thinking
about the other team’s needs. My criteria is to select
a tool that is network-centric, focused on my needs.
It’s very difficult to have a tool that serves different
needs. There are some tools that can offer it, but
most of the tools have a particular focus in one
direction or another.” Network architect
$100 billion bank
| @ema_research

21. Network Monitoring and Analysis
© 2021 Enterprise Management Associates, Inc. 21
| @ema_research
76% of IT organizations
have separate traffic
monitoring & analysis
tools for NetOps and
SecOps
82% of SecOps teams
sometimes use the
NetOps team’s
monitoring tools
80% of enterprises are interested in consolidating onto a
shared tool
Barriers to consolidation
• Solutions don’t meet requirements of both teams 38%
• Benefits of sharing unclear 32%
• Budget conflicts 32%

22. DDI Management
© 2021 Enterprise Management Associates, Inc. 22
| @ema_research
DNS is a potential threat vector
• DDoS
• Spoofing
• Malware
94% of security teams have
started analyzing DNS traffic
IPAM offers security team insight into security domains, network segmentation,
IP addresses
75% of network teams share data from DDI solutions with the security team
• 46% are doing this manually today
• 87% of network teams have integrated or plan to integrate DDI
management tools with the security team’s tools
“[Security doesn’t] seem to care about [DDI]. But they do come
back to us and say, ‘What is this subnet?’ Having access to IPAM
would save them a lot of time. There is no reason why they couldn’t
access it.”
Network architect
$15 billion retailer

23. Network Automation
© 2021 Enterprise Management Associates, Inc. 23
Automation tools most useful to
collaboration
1. NCCM 47%
2. Security policy automation 46%
3. Infrastructure as code 42%
4. DDI automation 41%
Tasks the two teams want to
automate together
1. Event management 53%
2. Infrastructure provisioning 51%
3. Incident response/troubleshooting 47%
4. Infrastructure lifecycle management 45%
Importance of automation tools to facilitating NetSecOps collaboration
| @ema_research
Sample Size = 366

24. Final Thoughts
© 2021 Enterprise Management Associates, Inc. 24
| @ema_research
CIOs and CTO are trying to
make this happen
NetOps and SecOps teams
are trying to align
Network teams lean on
network packet brokers,
packet capture appliances,
network traffic monitoring,
DDI management, and
network automation to
enable collaboration
Traffic data (and the security
team’s need to analyze it) is
the center of gravity for this
collaboration

25. Get the report
https://bit.ly/3m0piiQ
© 2021 Enterprise Management Associates, Inc. 25
| @ema_research