David Van: Identify Gaps and Risks in Your Security Operations

“Before the pandemic, we used intrusion detection sensors to identify abnormal behavior on the network.”

Before the pandemic, we used intrusion detection sensors to identify abnormal behavior on the network. We put in network access control products to detect an unauthorized foreign object trying to get onto a network. We had been deploying different security controls and tools for decades, assuming that the bulk of the employees were working from a corporate office and using a private network.
When everybody began working from home, none of those sensors was effective anymore. Overnight, our security controls had to shift to the individual endpoint — basically, the users’ computing devices. We originally had an infrastructure topology protection of the data centers, the servers, and the network, with everything on premises. The next morning, we needed to make sure that we were protecting Joe, Sam, and Lily — all the employees of every department.
You need three capabilities, or three Cs, to be resilient in this kind of situation: connectivity, communications, and collaboration. If one of these three things stops working, remote operations will fail. If you have a problem connecting, you cannot do business. If you cannot communicate among teams, you cannot conduct business. If you cannot collaborate, you cannot do business. No business exists in a vacuum, right? These three critical capabilities must become resilient immediately.

This is an excerpt from 7 Experts on Transforming Your Threat Detection & Response Strategy.  This eBook was generously sponsored by Trustwave.