The Future of Symantec Risk and Compliance Solutionsvox.veritas.com/legacyfs/online/veritasdata/IS...

The Future of Symantec Risk and Compliance Solutions 1

Kurt Van Etten: Director of Product Management Threat & Risk Management

November 2012

The Future of Symantec Risk and Compliance Solutions

2

Disclaimer

Any forward-looking indication of plans for products is preliminary and all future release dates are tentative and are subject to change. Any future release of the product or planned modifications to product capability, functionality, or feature are subject to ongoing evaluation by Symantec, and may or may not be implemented and should not be considered firm commitments by Symantec and should not be relied upon in making purchasing decisions.

SYMANTEC VISION 2012

Agenda


Moving From Compliance to IT Risk 1

Leveraging Existing Investments 2

Single Platform for Many Jobs 3

Actionable Intelligence 4


Risk And Compliance Maturity Curve


Comply with key mandates

Stay ahead of threats

Focus on top priorities

Build sustainable risk program

Connect to business

70 % CISOs report increased executive awareness 50% expect increased business influence Only 1 in 8 feel Info Sec can influence business decisions

Source: IREC 2011


Expanding From Compliance To Risk – Drivers


Compliance Centric

Risk Centric

• Driven by external mandates

• Focus on pass / fail checkbox

• Large volume of audit findings leads

• Point in time view

• OFTEN SUBJECTIVE

• Driven by business needs

• Focus on continuous improvement

• Risk-prioritized issues drive action

• Continuous Monitoring

• DATA DRIVEN


Expanding From Compliance To Risk – Constraints


“I need a way to leverage my

existing investments”

“I want to use the same platform to complete many

jobs”

“I need actionable intelligence to make better decisions”


I Need To Leverage My Existing Investments


Use the infrastructure I

have

• No need to displace existing solutions

• Help my existing solutions work together

1 Quick time to

value

• Integrate security information from multiple technologies

• Automatically updated data mappings

2 Keep my costs

down

• Minimal initial set-up costs

• Easy to maintain interface between 3rd party systems

3


Symantec Partner Developed

Community Supported

Additional Connectors

Symantec Connector Strategy


Information Protection

Endpoint Security

Infrastructure Security

Network Security

Application Security

Security Management

Identify and Access Controls

Symantec Built

Symantec Tested

Symantec Supported

Supported Connectors


Symantec Connector Roadmap

9 9 The Future of Symantec Risk and Compliance Solutions

• Endpoint Protection

• Data Loss Prevention

• CCS Standards Manager

• CCS Vulnerability Manager

• Security Information Manager

• Critical System Protection

• Encryption

Symantec Third Party

• Qualys

• Rapid7

• HyTrust

• Salesforce

• Bit9 • Catbird • Cenzic • Core Security • Courion • eEye • Imperva

• RedSeal • SailPoint • Skybox • Tenable • Veracode • VMware

Create custom connectors with open

SPC Enterprise platform

• Symantec DeepSight™

• Managed Security Services

• Mail Security for Exchange®

• Messaging Gateway

• Web Gateway

• VIP User Authentication

• Certificate Intelligence Center

• Mobile Device Management

• Endpoint Management

• Symantec NetBackup™

• Symantec Backup Exec™


I Want One Platform To Manage My Security Program


Scalability is critical for me

• Need to manage

Big Data

• Link to underlying technical assessment technologies

1 Get the right

data to the right user

• Customizable views for multiple stakeholders

2 Help me get

better insights from my data

• Cut the data multiple ways

• Cross-reference data points for unique insights

3


Dynamic Dashboards (Web and iPad*)

Managed Security Services (inc. SSIM)

Symantec Endpoint Protection

CCS Standards Manager

Critical System Protection

Symantec Encryption

CCS Vulnerability Manager

Data Loss Prevention

Virtualization Security Manager

Symantec Approach: One Platform Three Views

Asset System Security Intelligence Data Store

Security Metrics and Analytics Platform

Compliance View Security Metrics View Risk Management View

11 The Future of Symantec Risk and Compliance Solutions


I Need Actionable Intelligence To Make Better Decisions


I need data relevant to my

business

• Data that supports business critical operations at your fingertips

1 I need to prioritize

• Know what to fix first so you make best use of resources

2 I need to drive

action

• Get clear direction on how to address identified risks

3

SYMANTEC VISION 2012 The Future of Symantec Risk and Compliance Solutions 13

Actionable Intelligence: An Example

Identify Compliance Failures & Focus Remediation




Identify Sensitive Data & Focus on Critical Exposures




Highlight Business or Critical Process Exposures




Drill Down To The Details And Model Risk


Actionable Intelligence


Monitor Action Plans


Roadmap Themes


Interoperability

• Virtualization Security

• Robust Connectors • WebSphere

Risk Management Usability

• Internationalization • Simplified

architecture • Mandate-based

reporting • Web-enabled

dashboards

• Risk Manager • Vendor Risk • Risk modeling

Thank you!

Copyright © 2012 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, and the Checkmark Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.

19

[email protected]

[email protected]

The Future of Symantec Risk and Compliance Solutions

mailto:[email protected]

mailto:[email protected]




Drill Down To The Details And Model Risk

Date post:	10-Aug-2020
Category:	Documents
Upload:	others
View:	0 times
Download:	0 times

The Future of Symantec Risk and Compliance Solutionsvox.veritas.com/legacyfs/online/veritasdata/IS...

Documents