Page 46 - FULL MAGAZINE - KUSCCO.indd

OPINION
s$5(:($75,6."S
That’s a question that all IT professionals
have heard at one time, whether you are an
(3@TCHSNQ@RDBTQHSXBNLOKH@MBDN?BDQNQ if you depend on the same source of
an IT operational manager.
3GD
It may come from your CIO, CTO, or even
your CEO, but it’s always the same story.
A security breach is making the news and
they want to know if your organization is
exposed to that risk or any others.
They expect YOU to have the answer. It’s
that chilling moment when strategic risk
meets daily reality.
So, what will you say?
The answer is to own that moment and
be a super star. Here is what you need to
respond with:
Yes, we are aware of this critical
vulnerability.
We know how many machines
are vulnerable (if any) in our
organization.
The emergency patching has
already started.
Here is the progress so far.
44| SACCO Star Magazine
4 things your CEO wants
to hear about security
breaches
CPA Derrick Majani
Member Internal Audit Subcommittee, ICPAK
<HVZHDUHDZDUHRIWKLV :HNQRZKRZPDQ\
FULWLFDOYXOQHUDELOLW\ PDFKLQHVDUHYXOQHUDEOHLI
DQ\LQRXURUJDQL]DWLRQ
You cannot get ahead of the problem
An average of 38 new vulnerabilities
information as your CEO (e.g., the news @QDHCDMSH?DCDUDQXC@X
cycle). challenge is that you don’t know
in advance how many of these
The solution? Get your data directly new security holes apply to your
from the source, such as the United organization; it is likely that not all of
States Computer Emergency Readiness those vulnerabilities will be relevant
Team (US-CERT). You could simply sign to your systems.
up to their weekly email summary of
all new vulnerabilities, sorted by risk To be sure, you will need to cross-
level. However, this means relying on reference the list of vulnerabilities
someone reading this email diligently with your list of assets: for each
and having enough knowledge about vulnerability, check the full list
your architecture to identify which ones of software installed across your
are relevant—not an ideal solution. organization. This easily results in
hundreds of millions of comparisons
A better way is to automatically retrieve to run!
that data from the web. ACL Analytics
N?DQRL@MXC@S@BNMMDBSNQRNTSNESGD Luckily, ACL has been a leader in data
box and can also connect to custom analysis for the past 30 years and
APIs. The result: a consolidated table can turn this daunting and seemingly
with all the vulnerabilities information impossible task into something that
you need, instantly retrieved from US- takes just minutes to handle:
CERT. And with ACL Analytics Exchange,
you can schedule the import as often Use ACL powerful text analysis
as you want: every week, every day, or and fuzzy-matching functions
every hour. to match disparate data
Summarize the data to reduce
the volume and accelerate
treatment
+DUDQ@FDOQDUHNTR?MCHMFRSN
focus on what’s new and avoid
CTOKHB@SHMFD?NQSR