Intelligent CISO Issue 27 | Page 52

COVER STORY that we’re dealing with. Exabeam is one piece of that puzzle. “Exabeam is a great detection and response tool, but it’s not necessarily a prevention tool. So, Exabeam came out with this orchestration case management solution that allows you to take action with what you’re finding. This is an area I’m hoping to grow in in the next year or two,” said Anderson. Vendor selection and proof of concept Knowing that automation would be a key factor in driving business forward, LS&Co. had to evaluate whether a new SIEM configuration would better serve its unique business needs. Cost also played a role in the decision-making process. LS&Co. asked questions around cost efficiency, operational experience under pressure and the ability to adapt in changing conditions. “Since we wanted better visibility in our environment, we needed to bring in more data. Legacy licensing models and others that focus on event per second Embracing automation with Exabeam ultimately strengthened the LS&Co. team’s speed of manoeuvre. are not scalable in today’s data-driven security teams,” said Anderson. Use cases Having already used Exabeam products, the LS&Co. team decided to migrate to using a full Exabeam Security Management Platform. “When looking at new platforms to support our detection and response cybersecurity teams and functions, we knew we wanted new architectures and leading-edge technologies. These elements best position us for the future,” said Anderson. By using Advanced Analytics paired with Smart Timelines, the LS&Co. team can see exactly what is going on, from a timing perspective, in terms of incidents. Through this process, investigations become quicker and efficient, thus increasing resolvability. Embracing automation with Exabeam ultimately strengthened the LS&Co. team’s speed of manoeuvre – how fast you move from finding a vulnerability to mitigating the threat. Partnering with Exabeam for a tailored solution A major factor in deciding on a new SIEM, and ultimately sticking with Exabeam, was the need to find a partner that understood the exact and unique needs of the LS&Co. team. “Our Exabeam partnership helped to make our team more efficient and has been a core building block within our cybersecurity programme,” said Anderson. Often, when tools change, processes have to follow suit. But for LS&Co., an Exabeam partnership allowed for the 52 Issue 27 | www.intelligentciso.com