at&t security solutions overview€¦ · presentation title here—edit on slide master © 2016...

© 2016 AT&T Intellectual Property. All rights reserved. AT&T, Globe logo, Mobilizing Your World and DIRECTV are registered trademarks and service marks of AT&T Intellectual Property

and/or AT&T affiliated companies. All other marks are the property of their respective owners. The information contained herein is not an offer, commitment, representation or warranty by

AT&T and is subject to change.

AT&T Security Solutions Overview

National Communications Group

Email: [email protected]

AGENDA




Why Security

Common security challenges

Threat and technology trends

AT&T Security Solutions

Why AT&T

Customer Use Cases

2

Presentation title here—edit on Slide Master




Why Security? Managing resources against today’s new challenges

Escalating Attacks Increasing Complexity Resource Constraints

• Constantly changing infrastructure

• Too many products from multiple vendors; costly to configure and manage

• Inadequate and ineffective tools

• Under-staffed security teams

• Data overload with limited manpower and skills to find true threats

• Managing and monitoring increasing compliance demands

• Increasingly sophisticated attack methods

• Disappearing perimeters

• Accelerating security breaches








4

Common Security Challenges

Dynamic threat landscape

Budget and review cycles

Talent shortage

Compliance mandates

Lack of a holistic solution

Source: Christina Richmond, Program Director, Infrastructure Security Services, KDC








5

Cybersecurity in the news

1.5 million Verizon Enterprise customer records stolenVerizon Enterprise Solutions suffered a recent data breach, where a database of 1.5 million customer records was stolen and put up for sale on the Dark Web last week, according to Krebs on Security.

– Krebs on Security, News March 2016

Cyber-thieves can reap returns of almost 1,500% when they invest in ransomware, a study suggestsTrustwave looked at how much cash typical cybercriminals spend and what their potential profits might be. It estimated it would cost $5,900 (£3,860) to buy a ransomware kit that could return up to $90,000 in one month of operation.

– BBC, News June 2015

191 Million US Voter Registration Records Leaked In Mystery Database… which includes names, home addresses, phone numbers, dates of birth, party affiliations, and logs of whether or not they had voted in primary or general elections.

– Forbes, December 2015

An "Average" Cyber Crime Costs a U.S. Company $15.4 MillionCyber crimes in the United States are much costlier on an average basis than any other country surveyed. In fact, the average cost of a cyber crime incident throughout the world is $7.7 million.

– Forbes, October 2015





6

Growth in cyber risks

117,000 daily security

incidents globally.2

average decrease in net earnings in

4 quarters following breach1

of boards are not fully involved.4

An estimated 50 billion

connected devices to secure in 2020.5

of companies didn’t make any changes to security despite big breaches.6

more DDoS attacks in the last two years.3

75%

22%

62%

51%





7

Are you protected?

Traditional security concerns Emerging security concerns

Email security

Internet security threats

Remote Access

Security device lifecycle management

Identity Management

Growing number of Mobile Devices

Application vulnerabilities

CloudAdoption

The Internet of Things





How will you help secure this new world?




8








9

Security is not simply a CIO, CSO, or IT department issue. Breaches, leaked documents, and cybersecurity attacks impact stock prices and competitive edge. It is a responsibility that must be shared amongst all employees, and CEOs and board members must proactively mitigate future challenges.

– John DonovanSenior Executive Vice President AT&T Technology and Operations

Source: AT&T Cybersecurity Insights: Decoding the Adversary 2015

https://www.business.att.com/content/src/csi/decodingtheadversary.pdf





10

Managed security | Security is at the core of what we do

Benefits• Proactive protection

• Increased visibility

• Improved resource management

• Customer control

• Holistic security management

Features• Sophisticated network and cloud-based services

• Threat Intelligence

• End-to-end security management

• Built in incident response





11

Cyber expertise

8 global Security Operations Centers

24x7 global monitoring & support

Cybersecurity thought leaders

Robust consulting practice

Security experienceEnd-to-end solutions

Virtual security delivered by AT&T Software Defined Networking

Unparalleled visibility and predictive analytics

Proactive response

Innovation5 AT&T Foundry® locations worldwide

Mobile, Cloud and IoT security

179 security & privacy patents

200+ startups engaged with AT&T Foundry®

Strategic ecosystem Managed solutions with industry leading technologies

Comprehensive threat intelligence

Global cyber community

Industry-leading Managed Security from AT&T





12

End-to-end Managed Security Solutions

Customer Assets Help Prevent Help Detect & Respond

Response Consulting

AT&T DDoS Defense

AT&T Threat Manager – Log Analysis

AT&T Threat Manager –Advanced Log Management

Public Web Sites AT&T Cloud Web Security Service

Corporate Email AT&T Secure Email Gateway

Network Access AT&T VPN

AT&T Premises-Based Firewall

AT&T Network-Based Firewall

Mobile Endpoints Enterprise Mobility Management

Cloud Applications AT&T NetBond

All Assets Prevention Consulting





13

Impact of breach

The Center for Strategic and International Studies put the cost of cyber attacks to the world economy at around $445 billion, or almost 1% of global income.

Even at the low end of the range, that considerable figure is more than the national income of most nations and governments.1

The biggest cost is loss of productivity, not just with the IT team but all the people who are affected by the systems impacted, especially critical systems.2

• Revenue

• Brandreputation

• Consumer confidence

• Customers permanently lost

• Cost for technology changes

• Cost to partners

• Job loss

1. Source: AT&T Cybersecurity Insights: Decoding the Adversary 20152. http://www.darkreading.com/how-to-cushion-the-impact-of-a-data-breach/d/d-id/1140465

http://www.darkreading.com/how-to-cushion-the-impact-of-a-data-breach/d/d-id/1140465





14

Keys to security

Visibility and reporting needs Compliance, policy and security needs

Event response

• Effective management and prioritization of security threats and events

Security correlation and analysis

• Actionable information for your organization, based on collected event data across services

Staying current

• Keep pace with the compliance areas affecting your organization

Minimizing impact

• Address security beyond compliance requirements to see how it supports your overall security posture

Sound corporate security policies

• Maintain comprehensive corporate policies that form the basis for your security program across your organization

Compliant is important, but it doesn’t make you immune to security concerns








15

There is a black market for data and information that leadership needs to be aware of. This underground trade has culminated into a large, adversarial economy. Cybersecurity strategy can’t ignore this presence today or tomorrow as it will continue to grow

– Jason Porter VP of Security Solutions AT&T





16

How AT&T can help

Companies turn to us – we’re mission-tested and compete on a global scale.

• Customers require nimble security measures responding to growing cyber-threats.

• We have a multi-layered, integrated approach. Help secure at the device, connectivity, and data application layer.

© 2016 AT&T Intellectual Property. All rights reserved. AT&T, the Global logo, Mobilizing Your World and other marks are trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks contained herein are the property of their respective owners. The information contained herein is not an offer, commitment, representation or warranty by AT&T and is subject to change.





17

Cloud-based security benefits:

Faster implementations and management Easier to install and maintain services-which makes for a better customer experience

More robust security capabilitiesImproved control and visibility over threat management because it will be software driven and not dependent on siloeddevices

Improved connection speeds Less overhead will be dedicated thus providing faster network connections

Enhanced mobility Improves support of the mobile workforce

and mobile applications

Why we are transforming security





19

Our security strategy – helping to enable secure business solutions

Network enabled

Cloud based solutions

Highly secure mobile business

Threat Management

Consulting

Utilizing the network for robust visibility and control

Scalable, flexible security servicesbuilt in the Cloud

End to end security for mobile devices, network, and apps

Comprehensive threat detection, response, and mitigation

Custom solutions in support of strategy, compliance, risk and governance





20

Our Security Solutions

Threat Management Helps to detect and respond to threats with 24x7 data monitoring and threat analysis conducted by a team of security experts.

Firewall SecurityHelps to prevent malicious threats from entering your network and accessing critical data.

Web SecurityHelps to protect your company against threats that can enter your network through the Internet.

Email Security Designed to screen email for malicious attacks and breaches while providing encryption and archiving.

Mobile Enterprise Management Designed to integrate device-level protection for a comprehensive approach to mobile security.

Security Incident & Event Management Analyzes data across your network to correlate alerts and prioritize security events.

AT&T NetBond® Creates a highly secure connection between your private network and cloud solutions vital to your business

Security Consulting Customize your approach to security with a team of certified security consultants








21

AT&T Differentiated DDoS Defense Solution

Network as apoint of visibility

and control

AT&T Global IP Network

Non-targeted servers

Targeted servers

Scrubbing complex

Forward cleaned traffic

Reroute & filter

Detect attack

Utilize networkTo block traffic upstream





“AT&T provides threat detection through the power of the company’s network.”

“Overall, customers were pleased with AT&T’s services and would recommend the firm to others.”

“AT&T is an IDC Leader Worldwide”

“AT&T's investments and drive to be a global leader in MSS are evident.”

“According to customer feedback, AT&T constantly strives to find new ways to improve and understand how to deliver security, and it executes time and time again”

AT&T is ranked as a leader in security

22

1. Source: The Forrester Wave Methodology; Forrester conducted service evaluations in June, July, and August 2014 and interviewed over 40 vendor and user companies.2. Source: IDC MarketScape: Worldwide Managed Security Services 2014 Vendor Assessment





AT&T “Very Strong” in Managed Security Services

• Able to offer multinationals and large enterprises a complete and comprehensive suit of managed security solutions, delivered either over a single, globally consistent AT&T MPLS core or direct Internet access transport

• Brings deep security expertise and methodologies across a number of disciplines to customer engagements

• The company has taken on a key role as a provider of a secure network-enabled solutions with its NetBond offer that addresses security connectivity challenges in the on-demand environments of third-party providersCurrent Analysis, “AT&T – Managed Security Service”, April 2016

AT&T’s security portfolio protects not only the network and data center, but all enterprise IT resources including the mobile endpoint device.

23





24

Our experts have unique insight to help detect new threats before they become a problem.

Our software-centric network helps us create and deploy integrated solutions faster. In 2016 we’re accelerating to virtualize 30% of our networks1.

• Best in class security consulting group

• 264 Active Security & Privacy Patents

• Experts average 15 years’ experience in security

• 95% of the team is CISSP certified

• Experts average 15 years’ experience in security


Our security consulting – delivering integrated solutions

1. Source: http://www.androidheadlines.com/2016/05/att-targets-30-network-virtualization-end-2016.html








Why AT&T?

25






and/or AT&T affiliated companies. All other marks are the property of their respective owners.




26

*as of June, 2016

3800+MPLS nodes in one

of the largest IP networks in the world

197Countries and

territories with highly secure connections 100+

Petabytes of traffic per day*

15Average years of

experience of our security consultants

264Active security patents owned through 2014

24/7/365Ops Support18B

Flow records pass through our analysis engines every

hour

AT&T Value Proposition





27

Why the network matters: Visibility

We have one of largest IP networks in the world, with more than 3800 MPLS nodes in 197 countries and territories, and have built security controls into our global network

• Over 100 petabytes of data cross our network daily

• This gives us expansive visibility over global traffic and a unique view of known and emerging threats

• All of this helps us detect and reduce attacks before they impact our customers






28

Holistic approach to security to help customers prevent, detect and respond to threats

Security Functions Threat Management Security Leadership & Expertise

Virtual security functions deployed where needed

• Defense in-depth

• Best in-breed strategic alliances

Unparalleled visibility to proactively respond to threats

• Over 100PB of traffic/day

• 18B flow records analyzed/hour

• Classified govt. data

Recognized leader by Forrester, IDC, Current Analysis

• 8 SOCs

• People, knowledge, expertise

• Tools, processes, automation






29

Unparalleled visibility Robust security analyticsExpert threat response &

mitigation

• More than 100 petabytes of data traffic passes through the AT&T network on an average business day

• All traffic is scanned for malicious activity at the network points of entry

• AT&T analyzes 3.7 billion record from 197 countries and territories every hour

• Patented analytic capabilities

• Hundreds of millions of events reduced to hundreds of actionable alerts daily

• Helping to reduce attacks before they impact our customers

• Respond to threats in minutes

• 24x7 redundant Security Operations Centers

• Tightly integrated with Global Network Operations Center and Government Security Operations Center

We offer responsive threat analysis that helps provide value-deep visibility





30

Sharing our expertise

AT&T Cybersecurity insights to

help educate organizations on the

state of security

https://att.com/cybersecurity-insights https://securityresourcecenter.att.com

AT&T Cybersecurity Insights

Periodic Reports

Security Resource Center

https://att.com/cybersecurity-insights

https://securityresourcecenter.att.com/





AT&T Security Consulting practice towers

Helping to protect business assets & enhancing enterprise Governance

Security Strategy & Roadmap

Advisory and development services providing programmatic frameworks for operational alignment, advanced technology deployments (mobility and cloud) and a life cycle approach to security and risk management.

Governance, Risk & Compliance

Security assessment services that address regulatory requirements and/or industry standards. Also includes security program development with an emphasis onframeworks for policy and security management that alignwith the adoption of emerging technologies such as mobility and cloud.

Payment Card Industry Solutions

A range of comprehensive PCI compliance services that objectively help Customers achieve and maintain PCI compliance including PCI assessments, readiness assessments and remediation assistance.

Vulnerability & Threat Management

Strategic and tactical security services focused on the systems and applications supporting critical business processes. Services designed to provide validation of the overall security posture

Incident Response and Forensics

Provides a wide array of Incident Response and Forensics services, from incident response planning and analysis to emergency incident response and forensics retainer services

Security Infrastructure Services

A suite of life cycle offerings that include planning, architecting, integrating, and optimizing a highly secure network and infrastructure to help achieve business and security goals.

31

Internet of Things Security Services

Our IoT Security Lifecycle services start with a review of a customer’s objectives, current processes, and compliance requirements. We combine elements from our Security Practice Areas, specifically tailored to IoT, in Governance Risk and Compliance, Secure Infrastructure Services, Application Security and Vulnerability and Threatmanagement to help enterprises

establish a comprehensive approach to IoT security.








Customer use cases

32





33

Challenge: Suffered breach of PCI data & wanted to help secure their data and achieve PCI compliance

Details• Under pressure from board and payment brands/bank to quickly achieve

compliance and improve their data security• Facing significant fines for non-compliance• Major overhaul required in order to be fully compliant

Solutions• PCI gap analysis and remediation support

o Performed detailed gap analysis of current environment after remediation was complete

o Prepared all teams for global services assessment after remediation was completed

• Created policies and procedures, architect solutions, and provided SME support as needed

Benefits• Saved over $300 million in hard costs during the engagement• Assisted the company in becoming compliant in less than six months• Provided encryption at the point of sale protection of card holder data to

help improve security posture• Designed state of the art solutions that are still in production use today,

three years later.

Retail

© 2016 AT&T Intellectual Property. All rights reserved. AT&T, Globe logo, Mobilizing Your World and DIRECTV are registered

trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property

of their respective owners. The information contained herein is not an offer, commitment, representation or warranty by AT&T

and is subject to change.





34

Challenge: Security vulnerabilities uncovered via a data breach

Details• Limited data breach resulted in FTC imposed stiff penalties and

requirements for 20 years of biennial security assessments• Complex environment of several in scope businesses, vast

population of in scope data (PHI and PII, customer and employee data)

Solutions• Incident Management Program Assessment & Development• Security Strategy and Roadmap• Comprehensive independent risk assessment and worked with

customer teams to quickly address gaps in a cost effective manner

Benefits• Provided an incident management program customized to the

organization that enabled coverage within the distributed environment

• Utilized existing healthcare industry expertise to address applicable threats and risks, as well as effective incident management models used with industry peers

• Evaluated existing client technology for optimization rather than investing in new technology

Healthcare-health plan provider

© 2016 AT&T Intellectual Property. All rights reserved. AT&T, Globe logo, Mobilizing Your World and DIRECTV are registered trademarks and

service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other marks are the property of their respective owners. The

information contained herein is not an offer, commitment, representation or warranty by AT&T and is subject to change.





35

Challenge: Comply with information security regulations such as HIPAA & the need to access the technical security controls to identify any vulnerabilities that are present at the network and application level.

Details• Law firms with access to protected health information may find

themselves classified as “business associates” under new HIPAA rules and therefore will be subject to privacy, security, and breach-notification requirements governing their handling of such information*

Solutions• Security Assessment focused on Industry Standards and Compliance

regulations

Benefits• Assessment provided the customer with detailed information about

current compliance gaps associated with the required regulatory standards in a easy-to-interpret document

• Helped prioritize remediation requirements, based on available funding, remediation complexity and business imperatives.

Law Firm – Data Security Focus

© 2016 AT&T Intellectual Property. All rights reserved. AT&T, Globe logo, Mobilizing Your World and DIRECTV are

registered trademarks and service marks of AT&T Intellectual Property and/or AT&T affiliated companies. All other

marks are the property of their respective owners. The information contained herein is not an offer, commitment,

representation or warranty by AT&T and is subject to change.*Customer should contact their own counsel to determine regulatory or legal requirements.





36

Challenge: Distributed Denial of Service (DDoS) attack

Details• AT&T global customer• Currently using a 3rd party VPN

solution-without DDoS protection service

• The attack lasted 2 days before they contacted AT&T

Solutions• Provided emergency “on-demand”

AT&T DDoS Defense Service• Assisted with mitigation support

Benefits• Mitigation was completed in

less than 24 hours• Exposure was reduced

Heavy equipment manufacturing


and/or AT&T affiliated companies. All other marks are the property of their respective owners.








Financial / Insurance

Challenge: Need to transform security operations

Details• Underdeveloped security operation

eco-system• Desire to migrate to a centralized

operational and governance model• Build new security command center /

security operations center• Transition to world class operations

Solutions• Security Operations Center

Optimization Services from AT&T Security Consulting

Benefits• Over 60 issues were identified,

including 20 Quick Win recommendations

• Security transformation in process and meeting customer expectations








38

Manufacturing

Challenge: Security infrastructure complexity

Multiple internet gateways with multi-layered firewalls, multiple proxies, data loss prevention requirement

Details• Technology refresh urgently needed

• Business unit divestiture

• International expansion

Solutions• AT&T Security Device Management

Benefits• Helped optimize security gateway

architecture based upon network traffic flow

• Freed staff from device adds, moves and changes








39

Financial

Challenge: Distributed Denial of Service attacks

Details• Attack durations getting longer

• Bandwidth consumption getting greater

• Attacks occurring at all levels the OSI stack

• Accompanied by voice attacks over various voice platforms

Solutions• AT&T Security Device Management

• AT&T Distributed Denial of Service (DDoS) Defense

• Voice Firewall

Benefits• Volumetric attack traffic blocked in the

network and at network peering points

• Prevention of voice attacks over TDM, SIP and VoIP








40

Aerospace Manufacturing

Challenge: Inconsistent performance of incumbent web security service, large number of policies, poor reporting

Details• Need to help secure globally distributed

employees without need to backhaul to HQ

• Cloud-based security service without an on-premises appliance or IT support

• Need for mobile functionality

Solutions• AT&T Cloud Web Security

Benefits• Consistent performance

• Reduced policy from 40+ rules to 14; integrated user and group policy

• Powerful reporting

• Roaming & Mobile User Support© 2016 AT&T Intellectual Property. All rights reserved. AT&T, Globe logo, Mobilizing Your World and DIRECTV are registered trademarks and service marks of AT&T Intellectual Property










It’s our business, to help protect your business

41








Contact AT&T

For more information on AT&T Managed Security Solutions call:

877.542.8666

Visit us at www.att.com/security

42

http://www.att.com/security





43

Technology trends and security challenges

Risks

Cybercrime

Breaches

Mobile& BYOD Big Data

Cloud

ExtendedEnterprise

Virtualization

Content

ApplicationsAdvancedAttacks

SocialMedia








Network slides

44





45

We do extraordinary things to help protect your network

Malware Analysis & ForensicsBotnet TeamsVulnerability AssessmentsSandboxingKnown ThreatsBotnet Command & Control Detection

Network OperationsAPT DetectionVolumetric AlertingMalicious Entity DatabaseHoneypotsUnknown Threats

Exfiltration ReportingEnterprise Algorithm DevelopmentMalware TeamsFlood AnalysisResearchIncident Response





ServerPool

46

Legacy Security Model Transformed Security Model

Comprehensive Threat Management

Premises

Intense Maintenance/Cost

Hardware Centric

Capital Intensive

Premises, Cloud and Network

Scaled/Multi-Tenant

Software/Cloud Centric

Consumption Based

Cloud Computing

Internet

Multiple, dedicated security devices at perimeter

Emailscan / filter

Cloud-based Security Services

Enterprise network and compute assets

IDS





47

Legacy Security Model Transformed Security Model

Comprehensive Threat Management

Fragmented support

Lack of centralized policy management

Difficult to correlate events

Integrated support

Holistic ID, access, and policy mgmt.

Correlated events/security Big Data

Network Security Ops Center

Enterprise Network &

Compute Assets

MDM Provider

App Services security

……

Data ingested & analyzed to provide 360 degree view; Consistent security policies; 24x7 monitoring and response

EmailScan / Filter

Corporate Network

Internet

Cloud-Based Security Services





48

Putting this to use for Customers

Visibility

• Actionable intelligence• Identify and track evolving threats• Manage services to block threats• Expert threat response & mitigation

A unique global view of the security threat-scape








Product slides

49





50

AT&T Managed Security Portfolio | Threat Management

Security Event and Threat AnalysisUtilizes AT&T expertise in security analysis and operations to correlate information from multiple devices and device types, regardless of who manages them, both on premises and embedded in the AT&T Network. This service provides a broad view of the customer network by correlating alerts from these devices across the entire organization and prioritizes security events based on threat and risk management methodologies.

Token Authentication ServiceProvides enhanced access security for a wide range of customer applications ranging from enabling stronger authentication for a Virtual Private Network to enabling highly secure access across an entire enterprise. It provides automated provisioning and management, with a flexible policy management approach that allows you to specify blanket definitions combined with highly granular policy options. Pre-defined best-practice security policies are offered based on roles and delegation rights that can be fully customized.

Managed Intrusion Detection and Prevention ServicesMonitors customers networking infrastructure for potential misuse from internal and external sources. When a pattern of misuse is detected, the system automatically responds according to customer’s predefined policies helping contain and neutralizing or blocking threats.

Threat Manager with Advanced Log ManagementIs an advanced analytics platform that collects, correlates, and analyzes log data from devices across a customer’s environment of any size to help address compliance requirements and provide 24x7 threat monitoring coverage from attackers, cyberhackers, and organized crime.

Distributed Denial of ServiceProvides DDoS (Distributed Denial of Service) attack identification and mitigation within the AT&T backbone providing increased protection from malicious traffic before it reaches customer’s network. Sold as a feature of Internet Protect.

Private Intranet ProtectProvides traffic analysis tools and alerts on potential threats from inside and outside of customer VPNs. Threats may include worms, scanning, zero day events, DDoS attacks, protocol misuse, network protocol distribution, dark address space scanning, global security threats, and ability to detect known phishing sites.





51

AT&T Managed Security Portfolio | Firewall Security

Network-Based Firewall Service

A network-based security service that helps protect customers' WANs by providing secure inbound and outbound internet access helping to ensure a consistent enforcement of security policies to all customer locations.

Premised-Based Firewall Service

Provides firewall/unified threat management protection at the perimeter of the customer’s premises, and enforcement of location specific security policies. Configurations include:

• Juniper® unified threat management appliances

• Fortinet® unified threat management appliances

• Check Point® firewall appliances

• Palo Alto Networks® firewall appliances

• Cisco® ASA firewall appliances

Proxy Services

Enhance AT&T Premises-Based Firewall service delivering fine-grained management and prioritization of browser-based traffic. Proxy services can help prevent recreational traffic taking priority over critical business traffic and can help block access to certain Web sites such as malware distribution sites or spyware collector sites.

Web Application Firewall Service

Is a fully managed security service that combines Web Application Firewall technology with expert management and monitoring to help protect Web applications and their underlying systems. It is targeted towards customers with an internet connection to an e-Commerce or e-Tail web application that have a need to meet Payment Card Industry (PCI) and regulatory compliance.





52

AT&T Managed Security Portfolio | Web Security

Cloud Web Security Services

Is designed to provide comprehensive Web security including real-time protection against viruses and malware, protection against compromised/hacked web sites and granular control of Web applications. In addition to real-time content security, AT&T Cloud WSS includes proactive security which can help secure your organization from attacks that have not yet occurred.





53

AT&T Mobile Security Portfolio | Email Security

Secure Email Gateway

Provides customer with anti-virus, anti-spam, and content filtering services for inbound and outbound email messages. Also provides message archiving and encryption options.

Enhanced Cybersecurity Service

Is a managed security service that employs custom algorithms, malware signatures, email filters, DNS blacklists, and countermeasures to help protect your enterprise from Advanced Persistent Threats (ATPs)





54

AT&T Mobile Security Portfolio | Mobility

Enterprise Mobility Management

Provides centralized enforcement of corporate security policies across wireless, both AT&T and non-AT&T wireless customers, and wireline assets to help extend, protect and synchronize security controls beyond the network into the device.





55

AT&T Mobile Security Portfolio | Security Consulting

Security Consulting

Provides comprehensive services ranging from security strategy development that help align security with business objectives, assessments that help evaluate security posture and meet compliance requirements and technical security assessments from a network and application perspective to keep abreast of the threat environment. These services help address unique customer security challenges by helping to ensure a strong security foundation necessary for an agile, trusted and innovative business using industry best practices. Available: US & Global.








Security Consulting slides

56





57


Recover• Security and Compliance

program enhancement• Strategic consulting services• Incident response retainer

services

Respond• Forensics Investigation• Incident Management• Malware Code Analysis• Post-Incident Response Activities• Mobile Forensics

Detect• AT&T Security Event and

Threat Analysis (SETA)• AT&T Intrusion Prevention /

Detection Service• AT&T Secure Email Gateway

Plan• Information security and compliance

program creation/optimization• Strategy and Roadmap• Architecture Design • Data and Asset Classification Services

Identify• Risk and Compliance assessments• Mobile and Cloud Security assessments• Application Security assessments and Code

level reviews• Vulnerability assessment and penetration

Testing, Firewall rules review

Protect• AT&T Secure Network Gateway (SNG)

Service• AT&T Network and Premise Based Firewall• AT&T Distributed Denial of Service (DDOS)

Defense• AT&T Web Application Firewall

Integrated, global, end-to-end security portfolio

Recover Plan

Identify

ProtectDetect

RespondCriticalAssets





58

AT&T Security Consulting Practice Towers

Security Strategy & Roadmap

Advisory and development services providing programmatic frameworks for operational alignment, advanced technology deployments (mobility and cloud) and a life cycle approach to security and risk management.

Governance, Risk & Compliance

Security assessment services that address regulatory requirements and/or industry standards. Also includes security program development with an emphasis on frameworks for policy and security management that align with the adoption of emerging technologies such as mobility and cloud.

Payment Card Industry Solutions

A range of comprehensive PCI compliance services that objectively help achieve and maintain PCI compliance including PCI assessments, readiness assessments and remediation assistance.

Vulnerability & Threat ManagementServices designed to provide an independent baseline and validation of the overall security posture from within or outside the organization.

Application Security Services

Strategic and tactical security services focused on the applications supporting critical business processes. Includes technical assessments, secure development life cyclereviews and program management consulting.

Security Infrastructure Services

A suite of life cycle offerings that include planning, architecting, integrating, and optimizing a highly secure network and infrastructure to help achieve business and security goals.

Protecting business assets and enhancing enterprise governance








Financial Services slides

59





60

Financial Services

Common security challenges in financial services industry • Third Party Risks

• Electronic Wireless Payment

• Cyber Attacks

• Compliance mandates

• Lack of a holistic solution

Sources:1. ThinkAdvisor, November 2014

2. Source: BoozAllen, March 2015

3. Source: Christina Richmond, Program Director Infrastructure Security Services, IDC-2014





61

Breaches in Financial Services Industry

In 2015, there were 1,966,324 registered notifications about attempted malware infections that aimed to steal money via online access to bank accounts.”

– Securelist, Dec. 2015

“U.S. financial services companies lost an average of $23.6 million from cyber-security breaches in 2013 – the highest average loss across the 26 industries that cyber-criminals target most often.”

– Baseline, Sept 2014








62

All organizations should take and maintain inventories of all their assets on the network and should assess the risks that different classes of assets face. They should also ensure employees are adequately trained in security awareness since they are on the front line and can be helpful in spotting potential vulnerabilities before they become a major problem.

No financial institution can afford to be complacent because any organization can be the victim of a costly security breach, regardless of size. Security is too important not to be given due consideration, and the threats against the financial sector look like they will only continue to escalate.

Source: Security Intelligence April 30, 2015





63

Are you protected?

Email security

Internet security threats

Remote Access

Traditional security concerns

Emerging security concerns

Security device lifecycle management

Identity Management

Electronic Wireless Payments

Third Party Vendors

Security in the Cloud

Cyber Attacks

at&t security solutions overview€¦ · presentation title here—edit on slide master © 2016...

Documents