The New Security Management Model
by Jon Oltsik, ESG
Executive Summary
Driven by regulatory compliance and security event correlation, most large organizations have deployed a Security Information and Event Management (SIEM) system over the past few years. Does this mean that they are adequately protected? ESG does not believe so. Ominous security threats and a rash of publicly-disclosed data breaches certainly place an intense strain on many legacy security management tools and ESG believes this is just the tip of the iceberg. This paper concludes:
- Security management requirements are in a state of transition. For years, compliance requirements drove security investments, but this led to large organizations meeting compliance mandates while still remaining fraught with security risks. Recognizing this, many enterprise are moving from compliance "check box" approach to enterprise security to one based upon risk management aligning IT and business risks.
- Security management needs push technology requirements. New security management platforms need massive scalability and extensive analytics capabilities for a wide variety of business, IT, and security users. This is the only way to cope with the massive business and IT transitions taking place.
- Server virtualization and cloud computing exacerbate technical requirements. The onset of virtual servers and cloud raise the technical ante for scale, analytics, and intelligence. Security management systems will have to recognize virtual resources and cloud services and then align them with applications, business processes, and their associated risks.
- New requirements mandate a new security management model. To accommodate changing business and technology needs, next-generation security management must be built upon a foundation of, 1) Massive data collection, processing, and storage; 2) Deep and diverse data analytics; and 3) Virtualization and cloud intelligence.
For the full contents of this whitepaper, please download the PDF (registration required).
These icons link to social bookmarking sites to help share this content.
Log in
