Security Summit July 2009

Your Text here Your Text here

Shahar Geiger Maor shahar@stki.info

Visit My Blog: http://shaharmaor.blogspot.com/

1

Agenda

1 Downturn Economics

2 Communication
CISOs Agenda
3 Technologies (NAC, DCS, IAM SIEM)

Shahar Maor’s work Copyright 2009 @STKI Do not remove source or attribution from any graphic or portion of graphic 2

Israeli Information Technology Market Size

Your Text here Market here 2008:
Your Text size
4.645 B$

Market size 2009:
4.063 B$


IT Market Share (%) by Industry



Israeli Information Security Market Size

GRC and Security market size (Ms of $)

Your Text here 2008 2009 Your Text here 2010
Governance & Risk Management
(also BCP) 35.0 42% 50.0 50% 75.0
Security (projects) 95.0 -10.53% 85.0 11.76% 95.0
Security (Software) 90.0 -5.56% 85.0 -5.88% 80.0
Total 220 0% 220 14% 250


Security Budgeting Difficulties –
The Market is Under Stress

Although most 2009 72% expect additional
security budgets are set downward revisions during
(89% surveyed) the remainder of the year

65% of security vendors are
53% of vendors are
providing discounts for new
reducing maintenance fees
products purchases

Source:
http://metrosite.files.wordpress.com/2008/06/information_security_spending_survey_2009.pdf

Vendor Discounting in Response to Buyer
Request


Source:

Security Budgeting Difficulties –
Downturn Mechanism

Longer
POC

Your Text here Longer Your Text here
sale
cycle
Vendor
bottom line
turns red


More Optimism about Security
Spending
45%
40%
35%
30%
25% Your Text here Your Text here
IT Spending
20%
Sec Spending
15%
10%
5%
0%
> -10% -10% to -5% -5%% to 5% 5% to 10% 10+%
Source:

What’s on the CISO’s Agenda?
(STKI Madad 2008-2009)

Network DLP Hardening
Market Players
5% 4% 3%
5%
Access
GRC 18%
5%
Miscellaneous EPS/Anti x
6% Your Text here Your Text here
14%

NAC DB Protection WAF & Apps
6% 7% 11%
Management Trends
8% 8%


(STKI Madad March-June 2009)
Sec Tools
SIEM/SOC
EPS 5%
5%
5%
DB/DC SEC
Encryption 18%
9%
Access/Authenti
Market/Trends cation
10% 15%

NAC
Miscellaneous
10%
DLP 15%
10%


Financial sector:
• Access and DLP: Mobile Security, OTP, Data Obfuscation
Governmental agencies and subsidiaries:
• NAC, IDM
High-Tech and Services:

• Virtualization, Cloud Computing, EPS and mobility

Cross-sector:
• SIEM-SOC, Application Security and methodologies


Security Staffing Ratios

Organization Type Ratios of Security
Personnel (Israel)

Average Public Sector 0.15% of Total Users

“Sensitive” Public Sector 0.5% of Total Users


Technologies Categorization 2009
Business Value
Investment
to make money Remote
Access
Cut costs, Increase Manage Sec.
productivity IAM/IDM Services IT Project
Business
SSO Cloud Project
App.
Your Text here Anti Your Text here
Sec. DLP Size of figure =
Commodity IT X Mobile
complexity/
EPS SIEM/SOC Sec.
Services cost of project

DB
Vir.
Network NAC
Sec. Sec.
Security
Investment
for regulations
GRC
Using Implementing Looking
Market Maturity

Network Access Control



NAC Insights
NAC has not been “fully digested” by Israeli customers in
2008. There should be more activity in 2009
NAC can be deployed less expensively when it is an
embedded feature of an existing vendor and customers
take notice of it
Some network and security vendors alreadyText here
Your Text here Your have

solutions that can be part of the NAC process
 Israeli customers first priority: network visibility and
guest network control
Network or Security? NAC is a Layer 2 vs. Layer 3
match


Data Centric Security


Data Centric Approach


“Business of Security” – Security
“perimeter security”
is built into the business process


Data Centric Security Arena

DLP ERM

Database
Encryption
Protection

EPS


DLP –Market Status

DLP Deployments Status -Israel 1Q09

Solution Deployed
20%
Your Text here
PlanYour Text here
to Deploy
Not "There" Yet Soon
60% 20%


Identity & Access Management (IDM/IAM)



IDM/IAM Savings


Source: http://blogs.technet.com/mcs-ireland-infrastructure/default.aspx

Key Success Factors for Future IDM Project

Consider IDM also as a business project, rather
than a pure IT project
Make sure the project bridges the gap between
business and IT
 StartYour Text here easier success (Single Signhere a
small for Your Text
On,
vertical project)
 Choose a step-by-step approach, rather than a
mastodon implementation.
Focus on basic functionalities not on the
additional features

Security Information and Event
Management


24

Silos of Redundant Information
Management


Source: Network Intelligence

An Enterprise Platform for Compliance and
Security

SIEM

Source: Network Intelligence

SIEMSOC “Round Table” Insights

How to “sell” SIEM project to your organization
Knowing when NOT to start a project
Reporting Systems, Logging and parsing
“Tracing the events” (real-time?)
Who defines what is “risk”? How to translate it to HD?

Maintenance and operations: What does it take?
Outsourced SOC (must be taken under consideration)



Shahar Geiger Maor
VP & Senior Analyst
shahar@stki.info

28

Security Summit July 2009

Recomendados

Recomendados

Mais conteúdo relacionado

Semelhante a Security Summit July 2009

Semelhante a Security Summit July 2009 (20)

Mais de Shahar Geiger Maor

Mais de Shahar Geiger Maor (19)

Último

Último (20)

Security Summit July 2009