What are you most optimistic about in today's cybersecurity industry?

Security & GRC Outsourcing & Managed Services

Technology16%

People45%

Processes14%

All of the above23%

Other (share below)1%

154 PARTICIPANTS

1.9k views1 Comment

Sort by:

CIO in Services (non-Government)3 years ago

It is EXTREMELY telling, that "Processes" is at 0% on this list. It tells me that we need a LOT more work on how we design and implement processes.

1

Content you might like

How likely are you to use Kaspersky’s new online cybersecurity training program to enhance your team’s skills?

Very likely3%

Likely30%

Moderately likely36%

Moderately unlikely6%

Unlikely9%

Very unlikely13%

Unsure

View Results

With AI adoption accelerating across enterprises, what do you view as the top information security challenge that leaders should address? How can CISOs, VPs and Director’s align governance, risk and security investments to enable AI innovation without creating new exposures?

Read More Comments

What cyber threat are you most concerned about?

Insider threats – rogue admins24%

Encrypting my data39%

Deleting my backup copies13%

Resident malware18%

Data theft – data exfiltration5%

Other

View Results

Seeking input: Has anyone drafted an SOW for a cloud-based SIEM with setup, migration, and maintenance? I’m working on a FedRAMP-authorized SIEM SOW, migrating from on-prem Splunk, covering data, searches, alerts, dashboards, and models.
Scope includes Environment Setup:
Cloud provisioning, configuration, testing.
Connectors/Parsers: Custom data source integration.
Content Development: Rules, use cases, threat feeds.
Performance Tuning: Query/index optimization.
Runbooks: Operational procedures.

Also required: 24x7 support, maintenance, lifecycle and application management, role-based training, and documentation.
Must comply with NIST SP 800-53, CJIS, and FedRAMP Moderate+. Goal: Secure, scalable SIEM for rapid deployment. I may be missing elements, so suggestions are welcome. Please share redacted SOWs or tips if possible.

We are currently going through ITT for our IT managed services. One of the outstanding questions that I cannot get my head around is whether I want to take our Service Licenses (Professional Services excluded) internal. i.e. Do I become Servicenow's customer rather than buying my licenses via IT support partner? Commercials are comparable but I don't know if I'll get a better "service" contracting direct. Has anyone had a similar thoughts?

Read More Comments