Story image

Why you need to go beyond SIEM to stay secure

Threat Detection and Response has become a critical concern for today’s security teams so they can defend their organisations from exploitation by advanced threats.

According to the 2018 Trustwave Global Security Report, it takes an average of 83 days to discover a cybersecurity breach. Advanced threats are bypassing traditional security measures and are compromising the integrity of IT environments at an alarming rate.

In response to this trend, a new class of services known as Managed Detection and Response (MDR) have emerged from a growing list of speciality providers and forward-thinking Managed Security Services Providers (MSSP). 

However, as with most emerging services, the challenge is to discover which capabilities best meet the specific needs of each business.

In addition to 24x7x365 monitoring and notification, MDR services employ incident response and remediation capabilities that often include proactive threat hunting.

In essence, MDR is focused on solving the broader challenges of threat detection and response comprehensively, by quickly identifying both known and unknown threats, rapidly validating their presence and spread within an organisation, and then quickly eradicating the threat.

The goal is to reduce the attacker dwell times by short-circuiting the kill chain, minimising any potential damage done and shorten the cycle to remediation.

It is thus important for organisations to combine Managed SIEM with Managed Threat Detection to get greater value and increased resilience.

This is also important as organisations start to shift investment from preventive controls such as firewalls and endpoint protection, as cyber attacks have continued, becoming more sophisticated and harder to detect with point solutions alone.

To learn more about these solutions click here

Key benefits MDR services provide include:

  • Real-time threat intelligence and behavioural analytics to uncover advanced threats which are typically missed by traditional perimeter and endpoint security technologies.
  • Rapid identification and containment of both known and unknown threats, minimising attacker dwell times, significantly reducing time spent on remediation and reimaging activities.
  • Proactive threat hunting techniques to validate the exact nature of the threat as well as its spread across the network or to multiple endpoints for positive containment. 
  • Remote incident investigation and response removing latency at critical phases throughout the process to minimise the damage done and ensure the threat has been fully eradicated so that the business can quickly be returned to steady-state operation.

Trustwave up-levels traditional MSSP competencies like device management and log collection, providing the foundation for organisations to consider more proactive security like endpoint detection and response and proactive threat hunting.

If you want to find out more click here

Salesforce continues to stumble after critical outage
“To all of our Salesforce customers, please be aware that we are experiencing a major issue with our service and apologise for the impact it is having on you."
D-Link hooks up with Alexa and Assistant with new smart camera
The new camera is designed for outdoor use within a wireless smart home network.
Slack users urged to update to prevent security vulnerability
Businesses that use popular messaging platform Slack are being urged to update their Slack for Windows to version 3.4.0 immediately.
Secureworks Magic Quadrant Leader for Security Services
This is the 11th time Secureworks has been positioned as a Leader in the Gartner Magic Quadrant for Managed Security Services, Worldwide.
Google puts Huawei on the Android naughty list
Google has apparently suspended Huawei’s licence to use the full Android platform, according to media reports.
Using data science to improve threat prevention
With a large amount of good quality data and strong algorithms, companies can develop highly effective protective measures.
General staff don’t get tech jargon - expert says time to ditch it
There's a serious gap between IT pros and general staff, and this expert says it's on the people in IT to bridge it.
ZombieLoad: Another batch of flaws affect Intel chips
“This flaw can be weaponised in highly targeted attacks that would normally require system-wide privileges or a complete subversion of the operating system."