Collaboration and automation are key to secure organizations in the New Normal

Soma Tah

The COVID-19 pandemic has caused monumental changes in the security outlook for organizations as more and more of their infrastructure becomes distributed across the globe. The switch to Remote Work has accelerated adoption of digital technologies among the enterprises of all sizes and across all industries. Threat actors are leveraging this expansive attack surface with endless attacks on remote access endpoints and software and hardware supply-chains. Ransomware threats and social engineering attacks exploiting the pandemic-induced fears have also reared their ugly head to make things worse.

Akshat Jain, CTO and Co-founder, Cyware feels that it has now become crucial for organizations to leverage threat intelligence and build automated cross-functional workflows that can orchestrate security actions across cloud-based, on-premise, or hybrid infrastructure to adapt to the evolving threat landscape and fill the gaps in their security operations.

An increasing amount of collaboration is also needed in various aspects of security operations within organizations and across the industry for collective defense against the persistent threats, said he as he explained the benefits of it in detail and how Cyware's solutions can help enterprises in this regard.

Excerpt:  

What are the benefits of a collaborative cybersecurity strategy?

The importance of security collaboration for organizations cannot be understated in a world where malicious cyber actors are actively learning from each other and upping their capabilities every day. The only reliable way to outsmart and outpace the most advanced threats is to eliminate the silos that exist between various security functions and across organizational boundaries. The speed and efficacy of actions taken by security teams can be massively boosted by adopting a collaborative approach to security operations. This not only reduces the burden on security teams but also optimizes them for massive-scale threat response.

Every organization and every industry sector faces unique threats based on its business context, geographical location, size, technology infrastructure, data, and several other factors. While each organization must develop its in-house security capabilities, some threats call for a much more collaborative response across industry sectors through threat intelligence sharing. This can benefit organizations in learning mitigation strategies, exchanging threat data in real-time, improving their internal processes, and getting the most value out of their security technology stack. Collaboration in cybersecurity helps everyone except the bad actors. And when bad actors are also collaborating and moving from strength to strength, there is no reason why the cyber defenders should not do the same.

Could you please explain the concept of the Virtual Cyber Fusion platform that Cyware has introduced lately?  How is it different from their existing security posture? 

Every modern security operations team today employs numerous tools to defend their networks and systems. However, these diverse security functions lack a flow of information and actions amongst themselves, which leads to operational gaps and inefficiencies that decrease response effectiveness against fast-moving cyber adversaries. Cyware has introduced the Virtual Cyber Fusion platform to redefine the way security processes are driven by integrating threat intelligence and security automation while enhancing collaboration between siloed security teams.

The Virtual Cyber Fusion platform improves threat visibility across the entire infrastructure and inculcates cyber resiliency among security teams through proactive containment of advanced attacks in the early phases of the cyber kill chain. An end-to-end integrated threat detection, response, and management enabled by the Virtual Cyber Fusion platform radically transforms the capabilities of security teams and helps them attain a higher level of security maturity against all kinds of threats. By unlocking the doors to smart security orchestration and enhanced collaboration among different moving parts of the security infrastructure, Cyware has led the way in equipping organizations to deal with the most advanced modern-day threats.

The pandemic has forced many small businesses to go digital overnight, without any preparedness to deal with the changing security landscape. Do you have any customized and cost-effective offering for them?

There is no doubt regarding the deluge of cyber risks faced by small and medium-sized businesses in today’s threat environment. We are looking to address these challenges by introducing a threat intelligence platform for mid-market companies with small or no threat intelligence teams. The platform is designed to cater to the needs of organizations with limited security budgets by equipping them with actionable threat intel insights to improve their cyber readiness while automating their entire threat intelligence lifecycle seamlessly. It comes with pre-loaded premium threat intelligence feeds and enrichment sources and also allows them to ingest threat data from commercial feed providers, OSINT sources, and exchange intel with multiple information sharing communities (ISACs, ISAOs). Due to its support for both structured (IOCs, STIX packages) and unstructured threat intel (emails, reports, blogs) sources and its enrichment capabilities, it makes operations and execution of threat intelligence lifecycle a fully automated and convenient process for security teams.

What kind of solutions do you have for the Enterprises, MSSPs, ISAC/ISAO, and CERT?

We are witnessing a rapid adoption of our solutions across all industry sectors and organization types, including Fortune2000 enterprises, information sharing communities (ISACs/ISAOs), National CERTs, and Regulatory Bodies, Industry Associations, and more.

Cyware has pioneered the Virtual Cyber Fusion platform as a solution to turn cybersecurity into a cohesive, streamlined operational unit for organizations. It connects various security functions under a single roof to provide enhanced adversary visibility, threat response capabilities, and ease of governance.

Cyware’s security orchestration, automation, and response (SOAR) solutions enable enterprises and MSSPs to build automated cross-functional workflows that can orchestrate security actions across cloud-based, on-premise, or hybrid infrastructure. By making a diverse set of tools and technologies interoperable, Cyware enables security teams to drastically reduce the time spent on manual, repetitive tasks and rapidly eliminate threats from their networks and systems.

Cyware’s threat intelligence automation solutions help drive security processes with a precise understanding of adversary behavior to enable a proactive defense. Adding to this, Cyware’s solutions enable organizations to improve their situational awareness and mount a collective defense through automated strategic and tactical threat information sharing. This helps bring together enterprises and their partners, information sharing communities (ISACs/ISAOs), National CERTs, regulatory bodies, and various other stakeholders in the fight against cyber adversaries.