The service prioritises current and emerging threats, allowing enterprises to more effectively and efficiently remediate high risk vulnerabilities, better plan their security strategies and allocate security-related spending.
“In today’s economy, businesses are working hard to accomplish even more with less,” said Michael Marcellin, vice-president of global managed solutions at Verizon. “The beauty of the Risk Correlation Service is that it empowers customers to focus their security efforts on what’s most critical to the business. Now, enterprises only need to react to true threats.”
The global service is immediately available to managed security services customers throughout the US, Europe and the Asia Pacific region.
Need for risk-based correlation
An important component of managing any corporate IT environment is understanding the risk that security incidents present. Verizon’s managed security service identifies and evaluates security risk by combining two factors: the likelihood that an attack will be successful, and the adverse impact of an attack on a business (including the financial, reputational and regulatory-compliance costs).
The Risk Correlation Service uses the Common Vulnerability Scoring System (CVSS), the industry standard that enables enterprises to rate IT vulnerabilities (among them whether an attack is aiming to compromise a device’s confidentiality, integrity or availability).
Determining whether the intent of an attack is to cause a system-wide outage or steal confidential customer information affords valuable insight that helps identify the best remediation approach.
“With the Risk Correlation Service added to its Managed Security Services suite, Verizon is offering customers a solution that encompasses security monitoring and addresses risk understandable to business,” said Counse Broders, senior research director at Current Analysis. “The company is bringing together all the pieces of the security puzzle with an approach for customers that will help them better deal with the ever-changing security landscape.”
Taking account of threats and vulnerabilities
Verizon helps determine risk and its impact by taking into account the threat, the vulnerability of the device and the impact of successful attacks. Using an online risk-intelligence scorecard, Verizon synthesizes this information and presents it in an at-a-glance view with text and graphical images.
The scorecard provides ‘likelihood’ and ‘impact’ scores, so customers can see the likelihood of a threat occurring and the risk to their business if the attack is successful. Additionally, the scorecard includes a confidence score. The higher the confidence score, the more information Verizon has obtained about the asset and threat, allowing it to make intuitive threat forecasts for customers.
Based on these insights, customers can determie the best way forward to reduce the vulnerability and its impact on an organisation.
Managed Security Services
The addition of the Risk Correlation Service continues to fill out Verizon’s Managed Security Services suite, one part of the company’s security portfolio that includes governance risk and compliance solutions, data loss and prevention solutions, identity management solutions and managed security services.
EBOOK: Lessons from IFSEC 2023 – Big Tech, Martyn’s Law and Drone Threats
Read IFSEC Insider’s exclusive IFSEC eBook and explore the key takeaways from the 2023 show!
Navigate the impact of Big Tech on access control, gain insights from Omdia’s analysts on video surveillance trends, and explore sessions covering topics like futureproofing CCTV networks, addressing the rising drone threat, and the crucial role of user proficiency in security technology.
There's also an exclusive interview with Figen Murray, the driver behind Martyn's Law legislation.
