//////////////////////////////////////////////////////////////////// t cht lk
ADR platform, the security operations team
is able to demonstrate agility and increased
response capacity without adding scarce
people resources.
Remediation response
vs reimage
This metric measures business disruption.
Disrupted business means substantially
higher cost from delays, lost productivity
or even liability to third parties. The more
surgical and remote responses that are
enabled by the ADR platform, the fewer ‘big
hammer’ fixes of reimaging an end-user’s
endpoint have to happen. That means
less business disruption and inconvenience
for employees. Business disruption can be
quantified based on the staff role, affected
device role and length of time for a response.
www.intelligentcio.com
“
DISRUPTED
BUSINESS MEANS
SUBSTANTIALLY
HIGHER
COST FROM
DELAYS, LOST
PRODUCTIVITY
OR EVEN
LIABILITY TO
THIRD PARTIES.
Taking someone’s laptop for a day to
reimage it is an inconvenience. Taking down
a payment processing server is a substantial
disruption, even when hot backups and
clustered failovers are part of the solution.
The ADR approach thinks differently
about security operations. ADR is based
on a purpose-built platform designed to
deliver validated conclusions about attacks,
intrusions and compromises at any stage of
the attack lifecycle while also automating
the response capability to those attacks.
This transformation enables new metrics
that impact the organisations’ business and
bottom line. Each of these metrics point
to the potential and necessity of adopting
an ADR approach and making it the
cornerstone of your cybersecurity strategy in
2018 and beyond. n
INTELLIGENTCIO
97