Intelligent CISO Issue 07 | Page 57

automate in-depth investigations to reduce the tactical strain on security analysts and enables rapid response with direct actions and broader integration to the security ecosystem. The solution delivers: • Cloud-based analytics: Cloud analytics leverage the Mitre ATT&CK framework to uncover and prioritise a broad spectrum of suspicious McAfee is delivering a cloud-native portfolio, designed to protect data and stop threats, from device to cloud. services, employing a combination of API-and proxy-enabled approaches, with DLP policy that can be extended from devices to the cloud. This includes content scanning, logging and activity monitoring and threat and malware detection • Centralised management: Delivers consistent and comprehensive management across public cloud services spanning the SaaS, PaaS and IaaS spectrum, like Microsoft Office 365, Salesforce and Amazon Web Services (AWS) • Advanced threat protection: Protects against malware and external and insider threats through UEBA (user and entity behaviour analytics) driven by Machine Learning built for the scale and elasticity of cloud environments McAfee device-to-cloud unified data protection Chris Young, Chief Executive Officer, McAfee www.intelligentciso.com | Issue 07 McAfee MVISION Cloud As information moves from protected, on-premises corporate networks, to the cloud, it can be very difficult for organisations to ensure its protection. McAfee has solved this problem with MVISION Cloud, which brings together data protection and threat prevention across Software-as-a-Service (SaaS), Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS). The McAfee MVISION Cloud platform enables enterprises to adopt cloud services while securing both sanctioned and unsanctioned cloud services, protect sensitive data across the cloud and stop the most advanced threats. • Visibility into data, context and user behaviour: Provides visibility and control across all cloud “The new MVISION portfolio of enterprise products is designed to help our customers stay on top of the evolving security needs, from device to cloud, with a solution that is simple, flexible, comprehensive and fast, so that our customers can act decisively and mitigate risks,” said Raja Patel, Vice President and General Manager of Corporate Security Products, McAfee. McAfee MVISION ePO, MVISION Endpoint, MVISION Mobile and MVISION Cloud is currently available. McAfee ePO-Unified Data Protection will be available late October and MVISION EDR will be available in Q1 2019. u 57 behaviours, helping analysts quickly understand risk severity and take appropriate next steps: dismiss, respond or investigate • Artificial Intelligence (AI) driven investigation: Accelerates investigation and evidence gathering with dynamic investigation guides that address the cyberskills gap by up-levelling junior analysts and improving senior analyst efficiency. In McAfee’s own internal security operations experience, the company was able to up-skill level-1 operators and achieve up to a 15x reduction in time to investigate • Rapid response: Enables affected systems to be quickly contained with a single click, while ecosystem integrations support security team workflows and processes to increase operational efficiency The latest integration between McAfee Endpoint DLP and Skyhigh Security Cloud DLP offers the same data loss prevention (DLP) policy engine across endpoints, networks and the cloud. McAfee Unified Data Protection offers users a single-pane-of-glass to manage all DLP incidents and reporting via McAfee ePO leading to simplicity, increased business efficiency and improved security.