Welcome! Mike Howard, Chief Security Officer Microsoft Corporation

Transcription

1 Welcome! Mike Howard, Chief Security Officer Microsoft Corporation

2 The Journey to VSOC Virtual Security Operation Center Transformation: How to Utilize the Cloud, Big Data and Machine Learning

3 GSOC

4 Envisioning the VSOC

5 1980s Mainframes 1990s Personal Computing GGG LSCC GSOC VSOC

6 VSOC Agile, intelligence-driven model Timely communication and improved response times Real-time intelligence monitoring Analysis to Operational Management Incident collaboration

7 People Requirements Operators with different skillsets Intel and Ops closer collaboration

8 Digital Transformation Cloud-enabled edge of devices lets data, applications, and intelligence flow to where people are. Intelligent Cloud Intelligent Edge

9 VSOC Budget Request Initiatives: VSOC Core Components 1. Video Analytics Implementation 2. Incident Management Team (IMT) portal 3. Physical Security Information Management System + 4. White Wall & Single Smart View Platform 5. GSOC to Fusion Center Transformation 6. Systems Center Operations Manager 7. Centralized Reporting & Compliance 8. High Value Asset Upgrade 9. Visitor Management 10. Data Intelligence 11. Alarm Classification and Renaming 12. Notification & Travel Safety Objective: Deliver intelligent cloud, intelligent edge, cloud-first alignment, proactive monitoring and data transformation How: Update staffing models, upgrade tools in physical space, and functional workflows and communications.

10

11 Hurricane Puerto Rico Maria Now High Category Risk 5 6:17 PM Redmond 8:17 PM Dallas 9:17 PM San Juan 9:17 PM Mississauga 2:17 AM London 3:17 AM Paris 3:17 AM Munich 3:17 AM Johannesburg 4:17 AM Herzeliya 6:30 AM Hyderabad 9:17 AM Singapore 9:17 AM Beijing 10:17 AM Tokyo 11:17 AM Sydney Standard Operating Procedure Live News Feed - CNN Live Camera Feed - GUAYNABO-CVP Incident Summary IMT Status Send notification FSCA; W-20-Sep-17 09:02:54 PT Task Task Other POCs EPU RSA RSA; 0:10:38 remaining to meet SLA RSA; 1:42:21 remaining to meet SLA Lead Security POCs on Duty FUSION CENTER SECURITY ADVISOR Onsite Security MSGS Comms Click to call Aggregated Media Feeds Puerto Rico 100% without power (ABCNews) 3.4 Million in Puerto Rico could be without power for 4-6 months, Mayor warns (WNEP-TV) Hurricane Maria slams Dominican Republic (MS Intel) MS Exposure Signals Click for camera Door Forced Open GUAYNABO-CVP (13:47:03 PT) Door Held Open SANTODOMINGO-BM (13:53:29 PT) Stats (event origin, date/time) Impact to MS Potential Impact to MS Potential Impact to Country Risk MS Assets Sites People MS Critical Assets Execs HVA Click for detail Events 2 09:03:26 PT Travelers Puerto Rico Area IMT - Active Activated on: W 20-Sep :01:48 PT Activated by: John Young Dominican Republic Area IMT - Active Activated on: W 20-Sep :03:26 PT Activated by: John Young Jamaica Area IMT - Active Activated on: W 20-Sep :05:13 PT Activated by: John Young US Area IMT - Monitoring Activated on: W 20-Sep :26:37 PT Activated by: Jon Dinsmore Messaging Status PIN: Title Sent on: W 20-Sep :01:48 PT SIA: Title Sent on: W 20-Sep :03:26 PT Click to view RLPM HVA RE&F/Lease Owner Law Enforcement Coordination Efforts Click to chat INV Events Resources First Responders Utility Company Click to view WED AM 150 MPH Accountability Status Safe Unknown 09:03:26 PT At Risk RSM Action taken RSA Action taken.. IMT Portal MS Teams POC Sheets Org Chart Intel Report SitRep THU AM 145 MPH Current View: Situation Management Mode Powered By SSVP from ATL Israel Click to View: Situation Awareness Mode

12 Hurricane Puerto Rico Maria Now High Category Risk 5 6:17 PM Redmond 8:17 PM Dallas 9:17 PM San Juan 9:17 PM Mississauga 2:17 AM London 3:17 AM Paris 3:17 AM Munich 3:17 AM Johannesburg 4:17 AM Herzeliya 6:30 AM Hyderabad 9:17 AM Singapore 9:17 AM Beijing 10:17 AM Tokyo 11:17 AM Sydney Historical Current Next Six Months Geographical Impact Puerto Rico Click for detail Maria was the first Category 4 hurricane to make landfall in Puerto Rico in 85 years. It is the tenth-most intense Atlantic hurricane on record, and the worst to strike Puerto Rico since The last major hurricane (Cat-3 or higher) to hit Puerto Rico was Georges in Georges killed 604 people and caused extensive damage resulting at just under $10 billion (1998 USD, equivalent to $17 billion in 2016). The hurricane has caused at least 56 deaths. Initial assessments indicate catastrophic damage to Dominica. Next Two Weeks Imminent dam failure in Isabela and Quebradillas Puerto Rico power outages will continue Existing resources have been depleted Reliance on imported goods increases Populations in neighboring areas will surge Next Year Unemployment rate will increase by 4% Crime will increase by 10% in Puerto Rico Puerto Rico will become Extreme Risk PRIOR TO INCIDENT 3 MONTH PREDICTION 6 MONTH PREDICTION 12 MONTH PREDICTION COUNTRY RISK TRAVEL RISK NATURAL HAZARDS CULTURAL ISSUES MEDICAL RISK MEDICAL CARE FOOD & WATER Last 10 Years 5-Day Forecast Prediction Model VACCINATIONS ( ) DISEASE RISK CRIME PROTESTS TERRORISM EMPLOYMENT TRANSPORT Suggested Actions Sites Suggested Actions People Suggested Actions Events MS Statistics Historical MS Statistics Prediction Re-evaluate surveillance camera locations Relocate HVA assets.. Send SAT phones to field Temporarily relocate RSA to Florida, US.. Recommend relocation of Ignite 2018 Coordinate with MSTravel.. Time to Recovery 10-days Cost to Recovery - $100,000 USD Time to Recovery 30-days Cost to Recovery - $500,000 USD Current View: Situation Awareness Mode Powered By SSVP from ATL Israel Click to View: Situation Management Mode

13 Case Studies Boston Marathon Bombing Simplified interaction Rapid accountability Proactive emergency response Improved response time Timely communication Chennai Floods Proactive intelligence monitoring Automated accountability Information stored in the Cloud Improved response time Timely communication Active Shooter, Paris, France Improved response time Incident collaboration Simplified accounting GAPs identified Communication clarity

14 Benefits of VSOC over GSOC Interconnected Intelligence Feeds Matured Unified Technology Real Time Analysis & Response More immediate Response More timely Communication

15 What got us here won t get us there.

16 Digital Transformation is NOT just technology Engage your customers Empower your employees Transform your products Optimize your operations

17 Digital Transformation is EVERYWHERE Mobile-first Societies are going Cashless Cities are becoming Smarter Robots are Revolutionizing Service Delivery Cloud-first

18 Digital Transformation affects EVERYONE 9 in 10 American adults use the internet 1/3 of consumer data will be stored and accessed in the Cloud by % of Americans now own a cell phone of some kind, with 77% owning smartphones 7 of 10 Americans use social media to connect with one another, engage with news content, share information and entertain themselves

19 Digital Transformation is a NECESSITY of companies believe that digital 87% transformation is a competitive opportunity of enterprise decision makers feel they have a timeframe of two years before suffering 85% financially and/or falling behind their competitors of executives rate digital transformation as a 27% "matter of survival" 2 in 3 CEOs of Global 2000 companies will have digital transformation at the center of their corporate strategy by the end of 2017

20 How to THRIVE Transform your products Optimize your operations Empower your employees Engage your customers Leaders of winning companies re-envision existing business models and embrace a different way of brining together people, data and processes to create value for their customers and capture new opportunities for their organizations.

21 How to TRANSFORM Envision what s possible Prepare your people Connect your devices Automate your data Analyze your data Visualize your data

22 Step #1: ENVISION Imagine a future built around collaboration, not around devices on a wall.

23 Step #2: PREPARE Engage your customers Empower your employees

24 Step #3: CONNECT Build the platform Leverage the Cloud Connect all endpoints

25 Step #4: AUTOMATE Aggregate your data Mitigate your signals Leverage complex rules engine Enable machine learning Consume internet of things Automation will provide the ability to scale and empowers the users with a self-service model.

26 Step #5: ANALYZE and VISUALIZE Uncover Trends Find Patterns See Correlations

27 Step #6: TRANSFORM Challenge conventional thinking Reinvent productivity Transform processes Build effective budgets Develop lean operating models Lead from the front Leverage your data to challenge conventional thinking, drive business decisions and to demonstrate the true value of your security organization.

28 Digital Transformation will GET US THERE

29 Discussion and Questions

30 2017 Microsoft Corporation. All rights reserved.