Latest / CYBR.Signal / Holidays: Using This Time to Measure Managed Security Effectiveness
Transcript
- 0:00SPEAKER_00: And hello, everybody.
- 0:01SPEAKER_00: Happy Cyber Sunday, Monday edition.
- 0:03SPEAKER_00: My name is Michael Farnham.
- 0:05SPEAKER_00: Hope you're doing well.
- 0:06SPEAKER_00: Started recording yesterday, ran out of daylight, so decided to record today.
- 0:11SPEAKER_00: So it is holiday time.
- 0:13SPEAKER_00: A lot of us here celebrating Thanksgiving in the United States, other places in the world, all these holidays are starting to come together.
- 0:21SPEAKER_00: This is a really good time of year to look at any kind of managed service provider, managed security service provider that you have, any kind of like an MDR or something like that.
- 0:38SPEAKER_00: Why do I say that?
- 0:41SPEAKER_00: A lot of times what you see this time of year is an increase in some kind of attacks going on in your environment.
- 0:47SPEAKER_00: That a lot of times, not all the time, but a lot of times that happens because they know that a lot of your staff maybe is thinking about family, thinking about food, maybe you've got a smaller staff because people are on vacations, they're looking for a time to come after you because maybe you're not as diligent as you always are.
- 1:09SPEAKER_00: Well, if you've got a managed provider helping you, either doing all of that sock work, like a virtual sock, doing that threat hunting, detection, remediation for you, or maybe they're doing some of it and you're handling the other pieces, it's a really good time of year to measure their effectiveness against the what the rest of the year is to see, hey, how diligent are you really being and are you susceptible to that same type of issue that I might be if I was running the SOC completely on my own because I've got people that are not focused on this, or I've got short staff, that kind of thing.
- 1:47SPEAKER_00: Really pay attention to the metrics that you have in place with them.
- 1:53SPEAKER_00: Uh, any kind of SLAs that you've got in place, any kind of mean time to whatever resolution, remediation, whatever you want to call it, any of those metrics that are in place.
- 2:04SPEAKER_00: And I'm not talking about vanity metrics where we, you know, saw these number of attacks or whatever.
- 2:09SPEAKER_00: I'm talking about what you actually did with the attacks, what your managed provider helped you with, how quickly are they alerting you?
- 2:18SPEAKER_00: Are they alerting you on all the use cases that you've talked about?
- 2:22SPEAKER_00: This time of year, you just want to see kind of how effective, and it's not a gotcha thing.
- 2:30SPEAKER_00: I'm not trying to get them in a bind, and but this is an important time of year where those things need to be looked at, and you can tell whether or not they're staying true to what they're supposed to do for you during this time of year.
- 2:44SPEAKER_00: And it's also just a good time to look because you are or you may get more attacks this time of year anyway.
- 2:51SPEAKER_00: So it's something you need to be diligent on.
- 2:53SPEAKER_00: So pay attention during this time if you've got some kind of managed provider, and heck, even if you don't have a managed provider and you're doing it on your own staff, it's a good time to look and see whether your own staff is uh doing their due diligence during this time of year.
- 3:06SPEAKER_00: Again, not a gotcha.
- 3:08SPEAKER_00: It's just a guys, you're doing good all this time of year, and you can't really slack off during this time of year because I'm there's a potential I'm more susceptible to attacks or somebody's gonna attack me more this time of year, hoping that I'm not as diligent.
- 3:22SPEAKER_00: So I hope that makes sense.
- 3:23SPEAKER_00: Let me know what you think.
- 3:25SPEAKER_00: Have a good Thanksgiving, good holidays.
- 3:27SPEAKER_00: I will talk to you next time.
- 3:28SPEAKER_00: Bye bye.