What can you do to maintain security in a large enterprise when your cyber budget is shrinking?

Question

Answer

I realize that this may not be the same for everybody, but in my experience we are really happy to collect a large number of 'best in class' tools and platforms. Several of those tools have evolved and now overlap with other tools, sometimes with quite acceptable results. A critical review of the tool landscape can really help weed out some of those. As a nice by-product we found a tool that was simply not worth the money we have been paying and decided to terminate the license. The vendor countered with a much more aggressive quote. Pretty much like your cellphone or your insurance bill, if you don't ask for a lower price you will certainly not get it!

Answer

1. Use Layered Security Processes/Technologies
Every business needs to have a layered security approach to thwart cyber attackers and hackers. The importance of patch management cannot be overstated—confirmation of updated operating systems and applications is paramount. It’s important to install antivirus, spam detection, and filtering software on each computer, while also protecting the network via proper firewall configuration.

2. Download the Data Security Guide: Learn how to prevent, detect, and contain a data security incident.
Consider Data Encryption Software
Encryption algorithms and keys play a critical role in preventing hackers from getting sensitive business information. This can be useful for data both at rest and in transit, as well as for portable media and device access.

3. Protect Mobile Devices
Every business is operating in the age of mobility where their workforce is often operating remotely. Consequently, mobile device management (MDM) and security are vital part of IT security. Some of the ways to implement MDM are through the use of sign-on passwords, data encryption, and wireless connection encryption when using public networks.

4. Next-Generation Firewalls
Next-generation firewalls are a foundational element of preventing outside attacks to the network. Today, integrated firewall/VPN client solutions can automatically enforce fine-tuned security across a business’s network, as well as remote offices and on an individual user level. The many features of VPNs and next-generation firewalls enable administrators to:
Centrally manage security policies
Implement rule-based access controls
Define policies for different user groups

Answer

Ensure the basics are maintained....user training/awareness, access rights, multi-layered approach, ensure patches and upgrades are applied, appropriate configurations.

Answer

Crucially, know your environment and how to prioritize. I remember an incident years ago when a third party ran a vulnerability scanning tool on our website and reported a SQL injection vulnerability. Kept repeating that it was number 1 on the OWASP list and kept insisting that we had to fix it immediately. I had to shut them down as our website was basically informational and did not have a database behind it.

Answer

Maintain a well thought out cyber security training program for the employees that can be used over again with minimal revisions, as well as ensure that your core cyber security group understands the responsibilities of managing your network given the current budget concerns.

Answer

Maintaining security for large or any enterprise where security is important can be quite difficult. Having competent, flexible staff willing to dive into new tech is critical. Many &#34;new&#34; approaches to cyber security that include AI take the work off of your plate to a degree and and very effective, however we know they are extremely expensive. Your employees must have a concrete working knowledgebase of your environment, be up to date on infrastructure design and protocol. Additional software tools that may be labor intensive are available at reasonable price are available if you have the staff to champion the deployment and upkeep necessary to maintain an acceptable level of security. These processes and technologies are ever advancing, so imo the best/cheapest tools at your disposal are your human resources when it comes to protection.

Answer

The problem occurs in every company, but you have to do what you have to do so in my opinion:

1. Have at least WAF or NGFW.
2. There are a lot of open-source tools that you can use for security ( SIEM, FIM, etc.) if the policy requirements are not strict about open-source tools.
3. Use open-source vulnerability scanners to check perimeters.
4. Segregate your network.
5. Use port security.
6. etc.

P.S. A lot of things can be done when it comes to securing the enterprise but the most important is, you have to convince the enterprise that it is important to at least keep the budget the same if they are looking for paid solutions.

Answer

Go above and Beyond, Hire and retain best Security talent, get the budget you need to secure the company, etc.

Answer

As others have mentioned, it's really about consolidating and reviewing controls. It might be about breaking things down and removing a lot of the complexity that we've given ourselves over the years but with that might come a loss of functionality. If you want to take something away, you can either get creative or be prepared that you might lose something when those budgetary dollars disappear.

Answer

User training is one of the most valuable activity that you can perform. This can be performed for little investment.

What can you do to maintain security in a large enterprise when your cyber budget is shrinking?

Content you might like

Which of the following measures do you have in place to safeguard against ransomware attacks?

What is your organization's main driver to secure your mobile payment application(s)?

If you had a magic wand - what's the #1 daily business challenge you'd eliminate?

What's your initial reaction to Cisco acquiring Splunk?