steve@sjultra.com
September 10, 2024
The challenge is knowing which devices should have the agent, but don’t. The agent tool doesn’t know what it doesn’t know.
Use CAASMCyber Asset Attack Surface Management (CAASM) focuses on man… to understand agent health to find devices that have the right agent installed but aren’t working as expected.
The challenge is knowing which devices should be scanned but are not part of the VA Scan schedule.
Cloud instances can be ephemeral and the environment “chaotic”, where old manual processes don’t work.
Unmanaged devices without an agent or configuration solution installed, not secured, and only found by network scanners.
A device that is on a privileged network unexpectedly and has the potential for malicious intent.
The rise of IoT and cloud devices makes this even more challenging- simply finding devices that may be associated with an incident can be a daunting task.
Ephemeral devices are often authorized and a normal part of operational processes, security, networking, and risk teams are often challenged to identify the presence of these devices in real-time.
Unsanctioned software often includes potentially unwanted software and applications that cause concern for IT, security, and risk teams.
The sheer number of user accounts that exist across an enterprise result in challenges obtaining a single, consolidated inventory for user information.
A credible and comprehensive inventory of all servers in your environment. Whether on-prem or in the cloud, Windows and Linux servers are used for critical business applications and often process sensitive data.
Find legacy or sunsetted devices which have not been removed from the environment, or they may be outdated devices which cannot be upgraded or patched.
Identify, investigate, and prioritize vulnerabilities, improving the accuracy and effectiveness of vulnerability management, more efficiently meeting compliance and policy requirements, and lessening the burden on IT managers
CMDBs rarely provide a complete picture of all assets at any given time – especially with the rise of virtual machines and cloud computing, where devices are created and deprecated in short time periods.
Scope, manage, run CAASM
Build out use case models
Queries, enforcements, dashboard, reports
Troubleshooting
Install API client into tooling
Demonstrate quantifiable ROI and value
