Cybersecurity tool sprawl has become a pressing concern as companies grapple with expanding data resources. Wrangling several disparate tools and platforms created exploitable cracks for cyber attackers to exploit.<\/p>\n
![\"Managing](\"https:\/\/d15shllkswkct0.cloudfront.net\/wp-content\/blogs.dir\/1\/files\/2024\/08\/IMG_9850-300x200.jpg\")
<\/p>\nDiscussing cybersecurity tooling strategy with ICE\u2019s Ryan Hebert.<\/p>\n<\/div>\n
Dealing with tool sprawl, while aligning business and technical objectives, is a crucial responsibility for today\u2019s business information security officers.<\/p>\n
\u201cAbout four years ago, we knew we had a pretty bad sprawl problem because we were building and buying things like crazy,\u201d said\u00a0Ryan Hebert<\/a> (pictured), business information security officer of the Clear Credit business units of the New York Stock Exchange, Fixed Income & Data Services and Intercontinental Exchange Inc. \u201cWe\u2019ve got 40 different major business units spanning a lot of different things. All essentially the same, trying to give transparency to our customers across markets of different instruments. We\u2019re different in a lot of cases to most people in the fact that we have to secure on-prem and data centers we own, some places that we silo information but also in the cloud across all three major providers.\u201d<\/p>\n Hebert spoke with theCUBE Research\u2019s John Furrier<\/a>\u00a0and\u00a0Savannah Peterson<\/a> at the <\/span>Black Hat USA event<\/span><\/a>, during an exclusive broadcast on Media\u2019s livestreaming studio. They discussed strategies for companies to streamline and optimize tools to reduce complexity and stay ahead of emerging threats through a combination of in-house innovation and strategic vendor partnerships. <\/span><\/p>\n Despite a trend toward consolidation in the industry, the reality for many enterprises is an ever-growing array of tools and solutions. At ICE, this has led to a concerted effort to streamline and optimize the security infrastructure, according to Hebert.<\/p>\n \u201cWhat we\u2019re doing is, I\u2019m building an internal tool \u2014 I\u2019m working with our procurement team,\u201d he said. \u201cAnd my replacement who now runs GRC in the group, he\u2019s an amazing practitioner, we\u2019re locking together everything that shows what tool affects what risk, if we built it or if we bought it, and then stacking them up against our threats. So in places where we\u2019ve got six belts and suspenders, probably don\u2019t need to do anything there.\u201d<\/p>\n By mapping each tool against the specific risks it addresses and tying this to contract expirations, the BISO can make informed decisions about whether to build in-house solutions or continue relying on external vendors. This approach not only reduces unnecessary complexity but also ensures that the organization remains agile in responding to new threats.<\/p>\n ICE has a cohesive engineering team dedicated to cybersecurity, allowing the organization to take a \u201cbuild versus buy\u201d approach to many of its security needs. ICE has encouraged the building of in-house solutions when possible, directing the expertise of internal teams to develop tools tailored to its specific requirements, according to Hebert.<\/p>\n \u201cThese folks are building stuff that we\u2019re using on a day-to-day basis for root cause analysis, for threat intelligence,\u201d he said. \u201cAnd piping all of that together through a SIEM or a data lake and identifying and automatically categorizing all cyber incidents, it\u2019s fantastic. To that end, I want to use that ability and span out and sprawl out and see if we\u2019re doing something that we can make ourselves or if we need to work with the subject matter experts in this space and buy this product.\u201d<\/p>\n Here\u2019s the complete video interview, part of SiliconANGLE\u2019s and theCUBE Research\u2019s coverage of the <\/span>Black Hat USA event<\/span><\/a>:\u00a0<\/span><\/p>\nBuilding vs. buying: A strategic approach to tackling tool sprawl<\/h3>\n