Security Is a Process, Not a Product: onShore Video

onShore Security’s CEO Stel Valavanis explains what we mean when we at onShore say “Security is a Process, not a Product”.

Transcript:
“Hi, I’m Stel Valavanis, CEO of onShore Security. We say “Security is Process, not a Product” and I want to explain that a bit. When you buy a product, a security product, it has certain capabilities. That doesn’t magically mean you can plug it in and you’re done. You have to think about what kind of procedure am I going to follow here? How’s it going to be configured? What goals do I accomplish here? What kind of output am I going to get? How am I going to be monitoring that? How am I going to be auditing that? And, more importantly, what policy do I put in place that it’s helping adhere to? So, it’s not a product. It’s not set and forget. You need to put process in place.

Then there’s the process of security itself. It’s about collecting data on the network, whether it’s log files from your AD or firewall, or threat data from your IDS. You have to look at that data, analyze it, make some decisions, report on it, have an audit trail and, guess what? That comes back and informs your policy. You may make policy changes about how that should be configured, what results to expect, what kind of privileges to change. It’s an on-going cycle. We like to say “Security is a Process, not a Product”. Thank you.