NetSecOps: Examining How Network and Security Teams Collaborate for a Better Digital Future

| @ema_research
NetSecOps: How Network
and Security Teams
Collaborate for a Better
Digital Future
Shamus McGillicuddy
Vice President of Research
Network Infrastructure and Operations
Enterprise Management Associates (EMA)
smcgillicuddy@enterprisemanagement.com
Sponsored by . . .

| @ema_research 2
Watch the On-Demand Webinar
• NetSecOps: Examining How Network and Security Teams Collaborate
for a Better Digital Future On-Demand Webinar:
https://info.enterprisemanagement.com/netsecops-2024-webinar-ss
• Check out upcoming webinars from EMA here:
https://www.enterprisemanagement.com/freeResearch
© 2023 Enterprise Management Associates, Inc.

| @ema_research
| @ema_research
Featured Speaker
Shamus is a Vice President of Research at EMA,
where he leads the network infrastructure and
operations practice. He has nearly two decades of
experience in the IT industry. His research focuses on
all aspects of managing enterprise networks,
including network automation, AIOps-driven network
operations, multi-cloud networking, and WAN
transformation.
© 2024 Enterprise Management Associates, Inc. 3
Shamus McGillicuddy
Vice President of Research
Network Infrastructure and Operations
Enterprise Management Associates (EMA)

| @ema_research
| @ema_research
Sponsors

| @ema_research
| @ema_research
Agenda
Research
Goals and
Methodology
Drivers of
NetSecOps
Convergence
Challenges
and Benefits
Network
Data: The
Foundation of
Collaboration
Tools for
NetSecOps
Collaboration
Final Thoughts
and Q&A
1 2 3 4 5 6

| @ema_research
Research Goals and
Methodology

| @ema_research
| @ema_research
NetSecOps Alignment is Expanding
COLLABORATION BETWEEN NETWORK AND SECURITY
TEAMS IS INTENSIFYING
MANY NETWORK AND SECURITY SILOS ARE COLLAPSING

| @ema_research
| @ema_research
Research Goals
Why are network and security teams coming together?
What are the best ways for them to collaborate?

| @ema_research
| @ema_research
Job Titles
61.5% Technical personnel
21.1% IT middle management
17.4% IT executives
IT Groups
36.2% IT executive suite
28.3% Network engineering
14.5% Cybersecurity/IT security
7.2% Network operations/NOC
6.6% IT architecture
8.3% Cloud architecture/engineering
3.0% Security operations/SOC
Top Industries
23.0% Online services/software as a service
18.4% Finance/Insurance/Banking
16.8% Retail/Wholesales/Distribution
13.8% Manufacturing
7.9% Health care/Hospitals
3.6% Professional services not related to IT
3.3% Construction
2.4% Transportation
Region
67.1% North America
32.9% Europe
Annual Revenue
3.9% $100 million to <$250 million
8.6% $250 million <$500 million
24.0% $500 million to <$1 billion
46.1% $1 billion to <$5 billion
16.4% $5 billion or more
2.0% Unknown/Not applicable
Company Size (by Employee)
45.7% Small enterprise (1,000 to 4,999)
37.5% Medium enterprise (5,000 to 19,999)
16.8% Large enterprise (20,000+)
Methodology: Survey of 304 IT Professionals

| @ema_research
Drivers of NetSecOps
Convergence

| @ema_research
| @ema_research
Why are These Teams Coming Together?
Technologies and initiatives most responsible for collaboration:
40% IT/network automation strategy
31% Hybrid cloud
29% Secure access service edge
28% Internet of Things/operational technology
28% Multi-cloud architecture
24% Remote/Hybrid work
Business issues that
encourage collaboration:
30% IT labor issues/skills gaps
29% New regulatory
requirements
27% Recent cybersecurity
incidents
25% Budget challenges

| @ema_research
| @ema_research
SASE Unifies Network and Security Architecture
Multi-vendor SASE drives more collaboration
SASE IMPACTS ON COLLABORATION BETWEEN
NETWORKING AND SECURITY PERSONNEL
WHO HAS RESPONSIBILITY FOR EACH OF THE FOLLOWING ASPECTS
OF YOUR ORGANIZATION’S ENGAGEMENT WITH SASE
TECHNOLOGY?

| @ema_research
| @ema_research
Establishing guardrails, integrating
operations
Cloud Takes Away IT Control; Network and Security Teams are Taking it Back
PUBLIC CLOUD ADOPTION’S IMPACT ON COLLABORATION
BETWEEN NETWORKING AND SECURITY PERSONNEL
Cloud network traffic is a key issue
88% say it is at least somewhat valuable for
network and security teams to have access to
cloud traffic data
Top areas of cloud collaboration:
38% Technology implementation
36% Security incident response
32% Network troubleshooting
31% Infrastructure planning/design

| @ema_research
Challenges and
Benefits

| @ema_research
| @ema_research
Only 45% report complete success
with collaboration
Most IT Organizations Think Network and Security Could Improve Collaboration
Key challenges:
35% Data quality/authority issues
35% Budget conflicts/shortfalls
30% Architectural complexity
29% Skills gaps
26% Cultural resistance/conflicts
IT execs boost collaboration by:
48% Implementing shared best practices and workflows
45% Reorganizing groups or consolidating middle management
45% Increase budgets
42% Deploying shared tools
Admins, engineers, and architects are least confident in these measures

| @ema_research
| @ema_research
Outcomes: More Secure, More Efficient, Faster to Solve Problems
Benefits of success:
43% Reduced security risk
40% Operational efficiency
40% Accelerated MTTR of network
trouble
39% Faster detection/resolution
of security issues
“My team now has exposure to the [security teams’]
environment. It helps us troubleshoot a lot of issues,
but it also helps us make the right decisions for the
business, We know each other’s environments and
we’re eliminating knowledge gaps.”
Network engineering manager
Midmarket travel and hospitality enterprise

| @ema_research
Network Data:
The Foundation
of Collaboration

| @ema_research
| @ema_research
83% of network teams have at least
partial ownership of infrastructure used
to collect packets
Network Teams Must Deliver Packets to Security
HOW VALUABLE IS IT FOR YOUR SECURITY TEAM TO HAVE ACCESS TO
FULL PACKET DATA ASSOCIATED WITH THE TRAFFIC THAT TRAVERSES
YOUR ORGANIZATION’S NETWORK?
Security team’s top use cases for
packet data
40% Investigating endpoint security tool
alerts
35% Investigating network security tool alerts
33% Investigating SIEM/XDR alerts
30% Investigating exfiltration

| @ema_research
| @ema_research
Network teams own most, but not all, DNS
DNS Data is Critical to Cybersecurity
HOW VALUABLE IS IT FOR YOUR NETWORK AND SECURITY TEAMS
TO HAVE ACCESS TO NETWORK TRAFFIC DATA IN YOUR
ORGANIZATION’S PUBLIC CLOUD ENVIRONMENTS?
“We’ve had a lot of projects around DNS to make sure that there aren’t any unapproved DNS
queries and that there is less risk of random DNS servers being used.”
Security architect
Fortune 500 software and services enterprise
Only 50% of network teams can provide
logs and query data from all DNS
infrastructure to security
38% ”We can provide most DNS data, but
some remains inaccessible.”
11% “We can provide some DNS data, but
most is inaccessible.”

| @ema_research
Tools for NetSecOps
Collaboration

| @ema_research
| @ema_research
Network Automation
91% believe network automation tools are valuable
collaboration facilitators
Successful collaborators say automation is critical
94% want to enable self-service orchestration of networking
and security resources by DevOps and app teams
• Establishes guardrails in hybrid, multi-cloud
Key automation use cases:
48% Security incident response
44% Threat isolation/remediation
39% Network trouble
remediation  best practice
32% Compliance reporting
29% Infrastructure provisioning

| @ema_research
| @ema_research
58% say both network and security teams consume these insights
86% of organizations have network performance management
solutions that provide security insights
Network Monitoring Tools that Deliver Security Insights
Most valuable insights:
52% Network detection and response/traffic analysis
43% Health/performance monitoring of security infrastructure
40% Correlations of abnormal network health/performance with
suspicious activity
32% Inventory assessments

| @ema_research
| @ema_research
88% believe it would be valuable for network and security
teams to deploy a shared monitoring tool
Shared Monitoring Tools
Factors that correlate with enthusiasm for shared
monitoring:
Deploying multi-cloud architecture
SASE adoption
Interest in actively monitoring network infrastructure for product
vulnerabilities
Need for network monitoring tools that can reveal application
security and application performance

| @ema_research
Final Thoughts
© 2024 Enterprise Management Associates, Inc.
86% of companies see
growing NetSecOps
collaboration
Multiple paths
Both siloed network and security
teams and newly converged
NetSecOps teams report
successful collaborations
Multi-cloud and SASE are
key areas of collaboration
Organizations should examine how network automation and
network monitoring tools can facilitate partnerships
Network data is collaboration’s currency,
especially packets and DNS data
Successful partnerships drive:
Reduced security risk
Operational efficiency
Faster resolution of problems
| @ema_research 24

| @ema_research
| @ema_research
The NetSecOps report is now available!
Learn more and download:
https://bit.ly/3RKsEoD

NetSecOps: Examining How Network and Security Teams Collaborate for a Better Digital Future

More Related Content

Similar to NetSecOps: Examining How Network and Security Teams Collaborate for a Better Digital Future

More from Enterprise Management Associates

Recently uploaded

NetSecOps: Examining How Network and Security Teams Collaborate for a Better Digital Future