Upload File

security roadmap firm ongoing tentative completed … ·  · 2017-07-18adding new features to...

  • Home
  • Documents
  • Security Roadmap Firm Ongoing Tentative Completed … ·  · 2017-07-18Adding New Features to Splunk (Dashboards, Reporting, Alerting, Data Feeds, Etc.) Beta Deployment with Non-ITS
4
FY15 Q3 FY15 Q4 FY16 Q1 FY16 Q2 FY16 Q3 FY16 Q4 WEB APPLICATIONS FIREWALL PROOFPOINT EMAIL MALWARE SECURITY SYSTEM ENDPOINT PROTECTION UPGRADE SYSTEMS HARDENING DATA CENTER SEGMENTATION SPLUNK SECURITY MONITORING ENHANCEMENTS DLP BACKEND REARCHITECTURE Security Roadmap ✓ LEGEND Firm Timeframe Ongoing Timeframe Milestone Completed Milestone Delayed Milestone Tentative Timeframe Adding New Features to Splunk (Dashboards, Reporting, Alerting, Data Feeds, Etc.) Beta Deployment with Non-ITS Systems Beta + Production Deployment to Security Systems; Beta deployment to other ITS systems Deployment with ITS Systems Deployment with Non-ITS Systems ✓ ✓ Requirements Gathering for Upgrade; Build New Environment Migrate Clients to New Environment ✓ ✓ Beta Deployment Solution Deployment ✓ ✓ Install + Configure DLP Servers DLP Policy Revision Test Creation of Documentation Testing + QA Implementation + Enforcement ✓ ✓ Data Canter Firewalls Deployed Implement Data Center at all Data Center Zones Segmentation Design Implement High Security Network Zone ✓ Implement Additional Network Zones ✓ ✓ Deploy Additional Network Monitors ✓ ✓ ✓ ✓ Security

Upload: buiphuc

Post on 08-Jun-2018

213 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: Security Roadmap Firm Ongoing Tentative Completed … ·  · 2017-07-18Adding New Features to Splunk (Dashboards, Reporting, Alerting, Data Feeds, Etc.) Beta Deployment with Non-ITS

FY15Q3 FY15Q4 FY16Q1 FY16Q2 FY16Q3 FY16Q4

WEBAPPLICATIONSFIREWALL

PROOFPOINTEMAIL

MALWARESECURITYSYSTEM

ENDPOINTPROTECTIONUPGRADE

SYSTEMSHARDENING

DATACENTERSEGMENTATION

SPLUNKSECURITY

MONITORINGENHANCEMENTS

DLPBACKENDREARCHITECTURE

Security Roadmap ✓ LEGENDFirmTimeframe

OngoingTimeframe Milestone Completed

MilestoneDelayedMilestone

TentativeTimeframe

AddingNewFeaturestoSplunk(Dashboards,Reporting,Alerting,DataFeeds,Etc.)

BetaDeploymentwithNon-ITS

Systems

Beta+ProductionDeploymenttoSecuritySystems;BetadeploymenttootherITSsystems DeploymentwithITSSystems

DeploymentwithNon-ITSSystems

✓ ✓

RequirementsGatheringforUpgrade;BuildNewEnvironment MigrateClientstoNewEnvironment

✓ ✓

BetaDeployment SolutionDeployment✓ ✓

Install+ConfigureDLPServers

DLPPolicyRevisionTest

CreationofDocumentation Testing+QA Implementation+Enforcement

✓ ✓

DataCanterFirewallsDeployed

ImplementDataCenteratallDataCenterZones

SegmentationDesignImplementHighSecurityNetworkZone

✓ ImplementAdditionalNetworkZones

✓ ✓

DeployAdditionalNetworkMonitors

✓ ✓ ✓ ✓

Security

Page 2: Security Roadmap Firm Ongoing Tentative Completed … ·  · 2017-07-18Adding New Features to Splunk (Dashboards, Reporting, Alerting, Data Feeds, Etc.) Beta Deployment with Non-ITS

FY15Q3 FY15Q4 FY16Q1 FY16Q2 FY16Q3 FY16Q4

DLPENDPOINTAGENT

UPGRADES

NETWORKACCESSCONTROL

REMOTEACCESSREARCHITECTURE

LAPTOPTRACKING

ANDMONITORING

TWO-FACTORAUTHENTICATION

EPICE-PRESCRIBING

MULTI-FACTORAUTHENTICATION

AUTHENTICATIONDR+CONTINUITY

Security Roadmap ✓ LEGENDFirmTimeframe

OngoingTimeframe Milestone Completed

MilestoneDelayedMilestone

TentativeTimeframe

RequirementsGathering+SolutionReview ProofofConcept

RequirementsGathering+SolutionReview

DeploymentofSolutionProofofConcept+Beta

ProductAnalysis✓

DeploymentforEPCS

DistributionofTokens

EnforcementforEPCS

DuoDeploymentformyApps VoluntaryEnrollmentformyApps

DuoDeploymentforVPN

VoluntaryEnrollmentforVPN

RequirementsGathering+SolutionReview ProofofConcept DeploymentofBetaSolution✓

TestDeployWindowsAgent

DeployMacAgent

2

DuoEnforcementtoITSServers

DuoDeploymentforO365

VoluntaryEnrollmentforO365

DuoDeploymentforShibboleth

✓

1

DuoDeploymenttoITSServers

✓

✓

Security

Iden

tity

Page 3: Security Roadmap Firm Ongoing Tentative Completed … ·  · 2017-07-18Adding New Features to Splunk (Dashboards, Reporting, Alerting, Data Feeds, Etc.) Beta Deployment with Non-ITS

FY15Q3 FY15Q4 FY16Q1 FY16Q2 FY16Q3 FY16Q4

CENTRALWEBAUTHUPGRADE

ACCOUNTCREATION

IMPROVEMENTS

ORACLEDIRECTORY

REPLACEMENT

DIRECTORY:NEW

FEATURES+CLEANUP

PCI3.0COMPLIANCE

PASSWORDPOLICY

ENFORCEMENT

BREACHDETECTION

ENHANCEMENTS

Security Roadmap ✓ LEGENDFirmTimeframe

OngoingTimeframe Milestone Completed

MilestoneDelayedMilestone

TentativeTimeframe

RequirementsGathering+SolutionReview

ProofofConcept Beta,Pilot+Deploy

DeploymentofUpgradedFairWarningSystem ✓

IntegrateEpicLogMetadataintoSplunk

Analysis/OptimizationofFWAlerts+Reports

BetaTest/DeploymentofAnomalyDetection

PhoneNumberDataCleanup

✓

ExposeDirectorytoInternet

ImprovementstoUI+Backend ServicesDirectory(YellowPages)Release

✓

ConnectdownstreamsystemsandappsDeployNewLDAPforDirectory✓

RequirementsGathering+SolutionReview

ProofofConcept

Beta BetaforStandardUserSolution✓ ✓

RequirementsGathering

DesignProvisioning/DeprovisioningImprovementsImplementprocessimprovements

✓ ✓

PCI3.0GapAnalysis Gapremediation✓

Iden

tity

Compliance

Page 4: Security Roadmap Firm Ongoing Tentative Completed … ·  · 2017-07-18Adding New Features to Splunk (Dashboards, Reporting, Alerting, Data Feeds, Etc.) Beta Deployment with Non-ITS

FY15Q3 FY15Q4 FY16Q1 FY16Q2 FY16Q3 FY16Q4

EXTERNALSECURITYSETTINGS

WCMSECURITYASSESSMENT

VULNERABILITYVALIDATION

SECURITYAWARENESSTRAINING

ADOPTNISTSECURITY

FRAMEWORK

Security Roadmap ✓ LEGENDFirmTimeframe

OngoingTimeframe Milestone Completed

MilestoneDelayedMilestone

PerformValidations

h

PerformValidations

h

PerformValidations

h

PerformValidations

h

PerformValidations

h✓ ✓ ✓ ✓

RequirementsGathering+SolutionsReview ProofofConcept Beta

Purchase+Implementation

ExternalSecurityTestingPlanning

2012HighSeverityFindingsResolved

✓ ExternalSecurityTesting TestFindings/Remediation

DevelopProposal Implementation

TentativeTimeframe

Compliance


Big Data Lab 3 Using Splunk Software€¦ · Splunk Search is the primary interface for using Splunk Enterprise to run searches, save reports, and create dashboards. This Search Tutorial

Copyright © 2011, Splunk Inc.Listen to your data. Get Started with Splunk Reports & Dashboards

Splunk .conf2011: Real Time Alerting and Monitoring

Splunk Cloud Product Briefwinncom.com.ua/wp-content/uploads/2018/07/splunk-Log_Flow.pdf · Extend Benefits With Splunk Apps Splunk Cloud includes support for premium solutions such

Temenos Platform Technology eBrochure · ¥ Provides a set of Splunk‑powered real‑time dashboards to monitor the health ... Temenos Platform Technology eBrochure Author: Temenos

SPLUNK® ENTERPRISE - CDWwebobjects.cdw.com/.../Splunk/Product-Brief-Splunk-Enterprise-The... · Splunk Enterprise collects data from any source, including logs, clickstreams, sensors,

Rivium Splunk Windows · o Splunk Enterprise Security * o uberAgent* o Splunk App for Web Analytics Common Splunk Apps & Add-ons 15 SplunkingWIndows o Splunk Add-on for Microsoft

Splunk .conf2011: Splunk for Fraud and Forensics at Intuit

Page 8x11 - Evolven · Machine learning analytics allows Splunk@ users to: Know what changed directly from within Splunk@ dashboards ' Zero-in on true root-cause for accelerated troubleshooting

Splunk in Rakuten: Splunk as a Service for all

Splunk For IT Operational Intelligenceuploads.integrity360.com/1425903243-Splunk-for-IT-Operations.pdf · • Splunk Apps –Splunk App for VMware –Splunk Apps for Citrix & Hyper

Splunk at analyticsMD | Customer Success | …...Thanks to Splunk Light, the team can determine whenever customer-facing dashboards within analyticsMD are having performance issues,

Hawkular Alerting

Islands*of*Splunk* - .conf2017 | The 8th Annual Splunk ... · Background*! Splunk*administrators*are*increasingly*required*to*provision*Splunk* as*aservice*offering*to*mulJple*customers*

Alerting service

Advanced Splunk Dashboards in Operations and Support · PDF file · 2017-10-13Advanced Splunk Dashboards in Operations and Support Norbert Hamel Vodafone Group ... • With Vodafone

Time*ACer*Time*–** Comparing*Time*Ranges*in*Splunk* · AboutMe*! Splunk*Senior*Instructor*since*2009*! Frequentcontributor*to*Splunk*Answers*! Love*Splunk*search*language*puzzles*

GCSS-AF Data Services - Montgomery AFCEA Chapter SOA 2009.pdf · GCSS-AF Data Services Application Hosting ... Analysis Dashboards Alerting Web Services Rich ... •Axis2 Exposes

Advanced Splunk Searching for Security Hunting and Alerting · 2017. 9. 26. · Advanced commands expand question vocabulary •Allows for current events to be compared to historical

Monitoring Docker Containers with Splunk - Splunk .conf · Splunk and Docker – At A Glance Visibility in your Container Environments Delivering Splunk as Containers Monitoring for

Netfilter Iptables for Splunk Documentation - Read … · Netfilter Iptables for Splunk Documentation, Release 0 Splunk Answers Splunk has a strong community of active users and

Splunk Spark Integration - GitHub Pageslitaotao.github.io/files/4. splunk_spark.pdf · Splunk Spark Integration ... • Splunk"products:""! Splunk"Enterprise"! ... splunk_spark Created

Splunk Review - University of Birmingham · Ref: Splunk Review, Dec 2014 Mohammad Rameez Shafsad [email protected] Indexing 2.2.1 Searching using splunk Splunk uses

Information Risk & Policy Governance Council - Roadmap ... · Expand the Splunk service to ingest additional log sources for security correlation and alerting purposes (Brenton) Expand

Referent / Redner Benjamin Tiggemann · 2015-07-08 · Splunk for Exchange Splunk for Enterprise Security* Splunk for Vmware Splunk for PCI Compliance* Splunk for Windows Splunk for

Splunk SIEM Partner Guide - cisco.com€¦ · choose when and where to use the new data. Splunk also accepts multi-line ... makes transaction mining simple through form search dashboards

Admission Control using Splunk Enterprise Deployment Guide€¦ · Configuring Splunk Enterprise ... For more information on Splunk configuration, see Splunk documentation. Troubleshooting

Splunk Conf2010: Corporate Express presents Splunk with SAP

Program Overview - Splunk...mission-critical services. None. Splunk Enterprise System Administration Splunk Enterprise Data Administration Splunk Cloud Administration Implementing

Splunk user group - automating Splunk with Ansible

Splunk conf2014 - Splunk for Data Science

Splunk*Dashboard* Framework*–What’s* New · AboutUs*! Nicholas*Filippi*–Sr.*ProductManager** Mathew*ElDng*–Engineering*Lead,*Splunk*Core*UI 3 Simple XML / HTML Dashboards

Agency Chargeback Models to Enable Enterprise Splunk ......Workshops: Get Splunk Hands -on Experience Attend a Splunk Workshop Upcoming Schedule December 1: Introduction to Splunk

Splunk conf2014 - Onboarding Data Into Splunk

ReversingLabs Explainable Threat Intelligence Enriches ... Data Sheets/RL-Splunk...sent to Splunk. • In Splunk, the TitaniumScale report is correlated with other available Splunk