IBM Security Strategy Intelligence,

Editor's Notes

1. Identity Management Managing user identities and their rights to access resources throughout the identity life cycle is critical for effective identity and access management, in both our physical and logical worlds: Identity lifecycle management, with user self-care, enrollment, proofing, provisioning, recertification and de-provisioning Identity control, including access and privacy control, role management, single sign-on (SSO) and auditing Access ManagementAccess Management provides timely access throughout the user's lifecycle – authenticating users and providing access to authorized users across multiple environments and security domains, while enforcing security policies and protecting against internal and external threats: Centralized control for consistent execution of security policies across multiple applications and users Single Sign-On (SSO) to improve the user experience and reduce help-desk costs
2. From the start, QRadar has had a kick-ass rule engine that can leverage information from a variety of sources, providing the ‘big picture’ of an overall threat attempt. It can see changes in filesystems, db access attempts, what external flow information followed that db access and then tie it back to the actual identity of the user. Since the acquisition, the QRadar team has done an excellent job at ratcheting up their integrations with IBM security products (e.g. flow information coming from NIPS for activity monitoring, AppScan information, TEM events, Guardium and QRadar rule logic are now being synchgronized It’s very important to note though that QRadar can add tremendous amount of value to customers that may not have any IBM product. With over 450 3rd party integrations, QRadar can fit unobtrusively into any customer environment. Endpoint Management vulnerabilities enrich QRadar’s vulnerability database, resulting in more accurate risk and offense correlation and improved compliance reporting Applications context allows QRadar SIEM to better detect and prioritize threats by calculating more accurate risk levels for each asset and more accurate offense scores for each incident.
3. Industry unique compliance NERC CIPs (version 3 to version 4 and/or 5) California privacy + data security (and other state PUCs) Looming Federal legislation (Cybersecurity Act of 2012) Privacy, information governance and data security Classification and protection of utility and customer data, including customer usage data Increased awareness of Cyber security risks With Stuxnet and variants widely reported, and the recent Basecamp publication of control system vulnerabilities and exploits, it’s becoming clear that cyber threats are no longer an IT-only problem Management seeks more visibility in this area (e.g., situational awareness, intelligence, forensics, etc.)