Latest / CYBR.Signal / Discussions from BlackHat: People and Assets

Transcript

Discussions from BlackHat: People and Assets · CYBR.Signal

• 0:00
  SPEAKER_00: Hey everybody, Michael Farnum here.
• 0:02
  SPEAKER_00: Happy Cyber Sunday.
• 0:03
  SPEAKER_00: Hope you're doing well.
• 0:04
  SPEAKER_00: Just got back from Black Hat a couple of days ago.
• 0:07
  SPEAKER_00: If you can't tell, my voice is still kind of scratchy and deeper than normal.
• 0:12
  SPEAKER_00: I uh do a lot of meetings and talk a lot and talk in loud areas, uh, so I'd strain my voice.
• 0:18
  SPEAKER_00: Happens every year.
• 0:19
  SPEAKER_00: Um But I the reason one of the reasons to talk a lot is because we're in our customer meetings in our suite, and there were a couple of interesting themes that came up.
• 0:28
  SPEAKER_00: One probably not surprising, one may be surprising.
• 0:32
  SPEAKER_00: The first one was lack of resources in their organization, so lack of talent, skills, whatever you want to call that.
• 0:40
  SPEAKER_00: Uh basically the people that they were trying to hire, or if they somebody left and they were trying to fill a spot, getting replacements was extremely difficult, very expensive, so on and so forth.
• 0:52
  SPEAKER_00: Nothing anybody, everybody on here who's listening to this probably doesn't know about already.
• 0:57
  SPEAKER_00: Um what was interesting is how they were trying to figure out how to combat that.
• 1:02
  SPEAKER_00: And there were two themes that came out of that theme, which was either they were trying to do typical staffing, which with a typical recruiter sometimes can be very challenging if you don't know, if that recruiter doesn't know your business well.
• 1:20
  SPEAKER_00: Um that's really key to knowing how to recruit for somebody, do a better job.
• 1:25
  SPEAKER_00: Um also having a recruiter that knows how to look for the right people and doesn't just throw you 500 resumes.
• 1:32
  SPEAKER_00: Um, the managed services route is definitely interesting, definitely see that as a um a trend happening, especially in the mid-sized enterprises, maybe not in the large enterprises, even though there's some exceptions to that.
• 1:43
  SPEAKER_00: But one thing I didn't hear come up, and we kind of push to them a little bit outside of the staffing that we do within uh my employer set solutions, is um doing staff augmentation.
• 1:55
  SPEAKER_00: So sometimes they didn't want to do staff augmentation, or wasn't something that they thought of of doing something temporary so then you could fill that spot later.
• 2:04
  SPEAKER_00: Um, so something to think about if you are having staff shortages, you don't always just have to immediately fill that spot.
• 2:13
  SPEAKER_00: You can do staff augmentation from some groups that can help you do services, and that can be long-term staff augmentation.
• 2:19
  SPEAKER_00: So that's something we talked about to our customers as a little bit of a different thing to help fit that challenge or meet that challenge of um staff shortage.
• 2:29
  SPEAKER_00: The second thing that came out, which was really kind of encouraging to me, which was it was all around kind of a fundamental, and I think I've talked about that before on Cyber Sunday, which is um asset management.
• 2:43
  SPEAKER_00: So uh you got you know, you go to the floor and you got all of these latest and greatest things, and we're doing this, and it's zero trust or whatever buzzword, but there are like three or four companies that have come out recently, and there's one kind of in a stealth mode that I know about that's doing uh doing some of this as well with some additional stuff, but there's like three or four companies that are starting to do basic asset management, and what they're doing is connecting to different sources of truth within your organization.
• 3:14
  SPEAKER_00: So maybe you've got EDR, maybe you've got vulnerability management, maybe you've got patching, maybe you've got um uh like a ServiceNow, or you know, all of the different uh pieces that could have different sources of truth of what all's in your um environment as far as machines and software and every all of those things.
• 3:34
  SPEAKER_00: And you'll know that if you've been doing this a while, you go look at each one of those different things, and they've got sometimes wildly different numbers of assets in them.
• 3:44
  SPEAKER_00: So these companies, and I'll I'll name the three that are I know the best, which is Ixonius, um Sevco, and Jupyter One, they all go in and pull from those different ones, dedupe all of those, and then give you a better source of truth of what all your assets are, and then you can do whatever you're gonna do.
• 4:05
  SPEAKER_00: And some of those companies are adding different features depending on kind of how they think.
• 4:11
  SPEAKER_00: Um, but in generally, in general, that that was uh really encouraging to me to see people looking at asset management systems and the fact that there was uh some realistic type of solutions out there that um can really help you with asset management.
• 4:26
  SPEAKER_00: So, in summary, two trends from Black Hat talking to customers, uh staffing shortages, not surprising.
• 4:33
  SPEAKER_00: Um, we talked to them about doing stuff a little bit differently, maybe with staff augmentation, instead of just trying to fill that role and being extremely frustrated, give them some time to fill that role.
• 4:43
  SPEAKER_00: And then two asset management tools are um the new hotness in some ways, even though asset management's not very fun.
• 4:52
  SPEAKER_00: Um, but they can do some cool stuff for you.
• 4:54
  SPEAKER_00: So look those up.
• 4:55
  SPEAKER_00: If you got any other trends you saw at Black Cat that you want to let me know of, comment.
• 5:00
  SPEAKER_00: See you next time.