outsourcing it security yes, it’s still your problem

33
The views and opinions expressed within this presentation are solely my own and do not necessarily reflect the position of my employer, nor are they intended to be taken as business, security, financial or legal advice. Outsourcing IT Security: Yes, it’s still YOUR problem Jay Leek

Upload: interop

Post on 18-Nov-2014

607 views

Category:

Education


0 download

DESCRIPTION

 

TRANSCRIPT

Page 1: Outsourcing it security yes, it’s still your problem

The views and opinions expressed within this presentation are solely my own and do not necessarily reflect the position of my employer, nor are they intended to be

taken as business, security, financial or legal advice.

Outsourcing IT Security:Yes, it’s still YOUR problem

Jay Leek

Page 2: Outsourcing it security yes, it’s still your problem

A history of hi-techand innovation

• 1865: Founded• 1898: Finnish Rubber Works Ltd. • 1967: began electronics• 1992: Launch 1st GSM device• 1999: World’s #1 manufacturer of

mobile devices • 2009: World’s 5th most valued brand with ~38%

global market share

Page 3: Outsourcing it security yes, it’s still your problem

Our global footprintis a key strength for Nokia ensuring that we retain an

international perspective

Over 1000 Collaborators worldwide

Device manufacturing in 9 countries

Over 125,000 employees

Page 4: Outsourcing it security yes, it’s still your problem

Europe

North AmericaLatin America

Asia-Pacific

Middle East & Africa

Greater China37%

22%14%

13%10% 4%

Nokia sales BreakdownOver $70 Billion

Page 5: Outsourcing it security yes, it’s still your problem

Ask theaudience

Page 6: Outsourcing it security yes, it’s still your problem

Outsourcing is nothing new…

Page 7: Outsourcing it security yes, it’s still your problem
Page 8: Outsourcing it security yes, it’s still your problem
Page 9: Outsourcing it security yes, it’s still your problem
Page 10: Outsourcing it security yes, it’s still your problem

Maturity ofIT Security Outsourcing

Page 11: Outsourcing it security yes, it’s still your problem

The question is not if, but when… Embrace it while you still have an option

Page 12: Outsourcing it security yes, it’s still your problem
Page 13: Outsourcing it security yes, it’s still your problem

Getting there will not be easy

Page 14: Outsourcing it security yes, it’s still your problem

Good days…

Page 15: Outsourcing it security yes, it’s still your problem

Normal days…

Page 16: Outsourcing it security yes, it’s still your problem

Challenging days…

Page 17: Outsourcing it security yes, it’s still your problem

The key is to notjust take a plunge

Page 18: Outsourcing it security yes, it’s still your problem

Must select the

right provider

Page 19: Outsourcing it security yes, it’s still your problem

Know who is in control

Page 20: Outsourcing it security yes, it’s still your problem

Owning risks

Page 21: Outsourcing it security yes, it’s still your problem

Architecting the right solution for YOUR company

Architect:Antoni GaudíFacts and storiesVisitor tours

Page 22: Outsourcing it security yes, it’s still your problem

Flexibility

Page 23: Outsourcing it security yes, it’s still your problem
Page 24: Outsourcing it security yes, it’s still your problem

DISCLAIMER: Because safety is a priority, "You Got 30 Minutes™" is not a guarantee, but an estimate.

30 minute guarantee?

Manage your SLAs

Page 25: Outsourcing it security yes, it’s still your problem

Balance

Page 26: Outsourcing it security yes, it’s still your problem

Establishing a partnership via collaboration governance

Page 27: Outsourcing it security yes, it’s still your problem

ExampleGovernance Model Strategic

Tactical

Operational

Your company

Service Provider

Executive Board

Operational Management Board

Business LevelManagement Board

Page 28: Outsourcing it security yes, it’s still your problem

Opportunity

Page 29: Outsourcing it security yes, it’s still your problem

Meet with your vendor regularly

Page 30: Outsourcing it security yes, it’s still your problem

You must consider them part of YOUR team to achieve success

Page 31: Outsourcing it security yes, it’s still your problem

Governance is not free

Page 32: Outsourcing it security yes, it’s still your problem

Getting the deal done

Page 33: Outsourcing it security yes, it’s still your problem

Take away:•Industry has changed

•Threat landscape has evolved more quickly than most companies can manage

•As IT Security professionals, we must evolve our mindset

•Reward vs. Risk