A primary challenge for any Managed Security Service Provider (MSSP) is being able to accommodate a wide range of customers while maintaining high standards — “to ensure we deliver superior cybersecurity outcomes for our customers,” says Arno Robbertse, CEO of ITC Secure. This global MSSP serves organizations in more than 180 countries and strives to create greater efficiencies, automation, and effectiveness in its 24/7 security operations center.
As part of C5 Capital’s Cyber Alliance to Defend Our Healthcare, ITC Secure stood up an IronNet IronDome for healthcare in the U.K. specifically designed to provide a service that benefits multiple customers while still offering each customer individual protection and a level of monitoring and assurance that is tailored to their organization. In response to a significant increase of both the volume and the sophistication of attacks faced by healthcare organizations, “We simply had to do something to help these organizations stay protected, continue their operations, and keep communities safe,” notes Robbertse.
Protecting healthcare, including hospitals and life sciences organizations, is crucial for many reasons as they progress along the same digital transformation journey as many other industries. They are adopting new technologies, using the cloud to increase their processing capabilities, and using AI to come up with new ways of delivering healthcare and new medicines as the sciences evolve. The use of increasingly sophisticated technologies increases the complexity of protecting these organizations. “This is where the creation of the IronNet Dome specifically for healthcare can benefit organizations," says Robbertse, "by allowing them to learn what attacks other peers in their industry are facing and defend better.”
As the sophistication of cyber attacks continues to increase across the threat landscape, “one cannot simply rely on traditional monitoring tools and security defense in order to stay completely secure,” says Robertsse. IronNet’s network detection and response capabilities fill a gap in threat visibility through early detection of unknown threats. “IronNet’s behavioral analytics offer organizations the ability to monitor for those unknown unknowns. By looking at the behaviors and identifying anomalies that way, we are able to detect very sophisticated attacks without ever having seen them in the past.”
Behavioral analytics round out the SOC Visibility Triad and offer firms such as ITC Secure greater detection capabilities. Organizations and industries cannot simply rely on traditional signature-based detection. These methods have their value and have their place in an organization’s cyber defense, but MSSPs and end-users need to see more. “Our adversaries don’t come from the same place every time. They don’t use the same techniques. They are continuously trying to adapt,” says Robbertse. “No SOC team can ignore the network. IronNet observes traffic flowing on the networks in order to identify changes in that behavior and, ultimately, to give us much richer information than we previously would have from only log sources and the end points.”
Collective threat intelligence goes beyond sector-specific defense. The need for private-public collaboration is clear, as defending in isolation no longer works. Although the cooperation between public and private sectors to share information and drive superior cybersecurity outcomes for both sectors is something that has been talked about for years, it has been difficult to implement. The current threat sharing methods, while effective, are very manual, meaning that there is a time lag between the critical cyber threat information being shared into these manual platforms and then, on the other side, the information shared out.
Resolving this challenge with IronNet’s help, Robbertse notes that, “IronNet’s IronDome not only automates the sharing of this information but does it in a way that the anonymity and privacy of all the organizations participating in the IronDome is fully protected and compliant with GDPR and other regulations.” In this way, all participants can fully benefit from the cybersecurity intelligence that IronDome gathers.
.png)
