Jack Henry & Associates, Inc. · NASDAQ:JKHY
Jack Henry & Associates — Cyber Warfare Webinar Series (May 2023)
28 slides from Jack Henry & Associates's conference presentation, May 11, 2023
Slide 1: Cyber Toolkit: Modern Defenses for Modern Cyber Warfare
Cyber Toolkit: Modern Defenses for Modern Cyber Warfare Eric Gravett, InfoSec & GRC Specialist cyber warfare webinar series 05/11/2023
Slide 2: Cyber Warfare Webinar Series
Cyber Warfare Webinar Series Ransomware: The Attack You See Coming but Still Aren’t Preventing Improve Compliance by Modernizing User Access Reviews Start Planning Now: Cyber Threats and Trends for 2023 Cyber Warfare: Achieving Resiliency Through the Cloud Avoid Landmines with Your Backup and Recove
Slide 3: "Modern"
“Modern”
Slide 4: Not this kind of "modern"
a en = Not this kind of “modern”
Slide 5: Modernize defenses based on changing threats
Modernize defenses based on changing threats
Slide 6: Modernize Your Defenses
Modernize Your Defenses
Slide 7: Security information & event management (SIEM)
security information & event management (SIEM)
Slide 8: Monitor Everything, Use Modern SIEM
Monitor Everything Use Modern SIEM Basic Log Monitoring
Slide 9: Monitor Everything
Monitor Everything Every device and platform Cloud services All security logs Health & performance data Use 1 SIEM / SIEM provider
Slide 10: Use Modern SIEM
Use Modern SIEM
Slide 11: Use Modern SIEM
Use Modern SIEM SOC Team Public & Private Servers and Cloud Infrastructure Endpoints Telemetry Monitoring Notifications User Other UTM Financial Monitoring Authentication Institutions Reports FS-ISAC iSIGHT Real-Time & & US-CERT Threat Intel NCFTA ✓ Cross-Correlation ✓ Machine Learning ✓ Constant Tu
Slide 12: Internet perimeter
internet perimeter
Slide 13: SSL/TLS Deep Inspection, Sandboxing, Data Leak Prevention
SSL/TLS Deep Inspection Sandboxing Data Leak Prevention
Slide 14: SSL/TLS Deep Inspection
SSL/TLS Deep Inspection l38$@*e8pao&#Q^€R*0T*:SOE&FJA(vba1@aiu(*@^7) *0T*:SOE&FJA(vba1@afu *0T*:SOE&FJA(vba1@a UTM
Slide 15: Sandboxing
Sandboxing Unknown file ? Internet Copy sent for UTM × Block and create an sandboxing alert Sandbox Detonate Threat detected
Slide 16: Data Leak Prevention
Data Leak Prevention X File with UTM Sensitive Data DLP Profile (file criteria) SSN or CC Numbers Watermarked Files
Slide 17: Endpoint protection using no TLAs
endpoint protection using no TLAs (you’re welcome)
Slide 18: Modern Features
Modern Features * Logging to SIEM * Please don’t use this one Managed 24/7
Slide 19: Modern Features
Modern Features Behavioral Application Breach Analysis Control Containment
Slide 20: Logging to SIEM
Logging to SIEM SOC Team Notifications Reports Automation
Slide 21: Managed 24/7
Managed 24/7 Managed 24/7 by Experts Alert Procedures response internal team or use MSSP containment recovery
Slide 22: Vulnerability scanning
vulnerability scanning
Slide 23: Frequency, Usable Reports, Mitigation Procedures
Frequency Usable Reports Mitigation Procedures
Slide 24: Frequency
Frequency Quarterly / Monthly Weekly (at minimum)
Slide 25: Usable Reports
Usable Reports Static reports Can’t filter Can’t export Can’t notate Can’t perform rescans
Slide 26: Mitigation Procedures
Mitigation Procedures
Slide 27: Thank You! Questions?
Thank You! Questions?
Slide 28: Eric Gravett contact details
Eric Gravett egravett@jackhenry.com jackhenry.com © 2022 Jack Henry & Associates, Inc.®
Jack Henry & Associates — Cyber Warfare Webinar Series (May 2023) on 6ix