Automated systems only: why CISOs should switch off their dumb machines. Issue 9 (September 2019)

• Record Type: Journal Article
• Authors: Young, Spencer
• Is Part Of: Network security. Volume 2019:Issue 9(2019)
• Page Start: 6
• Page End: 8
• Publication Date: 2019-09
• Subjects: Computer security -- Periodicals; Computer networks -- Security measures -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; Computers -- Access control -- Periodicals; 005.805
• DOI: 10.1016/S1353-4858(19)30106-0
• Languages: English
• ISSNs: 1353-4858

Abstract

Abstract : Cyber security is supposed to reduce risk and be cost effective at the same time. It's supposed to take the burden of legwork away from the CISO and his or her team. It's supposed to reduce the financial and reputational risk posed by malicious actors in an efficient, intelligent manner. Cyber security is supposed to reduce risk. What it's not supposed to do is generate reams of near-to-useless information, burying the security team in an avalanche of flags and alerts. Automating processes ensures that common threats are caught and dealt with early. Security orchestration, automation and response (SOAR) can help, stitching together an organisation's disparate policy enforcement infrastructure, such as firewalls, gateways and other types of controllers, as well as existing event management systems, explains Spencer Young of Imperva.