Published by Gbaf News
Posted on June 8, 2017
Over three-quarters of financial sector organizations rely only on log-files to detect insider threats on the mainframe, exposing themselves to data breaches
Compuware Corporation, the world’s leading mainframe-dedicated software company, today released a survey of financial services CIOs showing that while most (86%) say their mainframe is more secure than other systems, the majority (78%) say they are still exposed to a significant risk of insider threats due to blind-spots in internal data access and controls.
The survey was conducted by independent research company Vanson Bourne, and administered in April to 400 CIOs at large companies (including 66 respondents from the financial services sector) covering a cross-section of vertical markets in France, Germany, Italy, Spain, the UK and the U.S. Key findings include:
“The mainframe has always been the most securable platform in the enterprise; which is why organizations continue to entrust their most sensitive data to it,” said John Crossno, product manager, Compuware. “However, businesses still face the risk that privileged employees, or those who have acquired access illegally, will misuse mainframe data. Organizations must take steps to gain more visibility over who is accessing data and how they are using it.”
The research further revealed that the most common measures being used to overcome insider security risks include:
However, just 2% of financial services organizations monitor user and database activity to tackle insider threats on the mainframe.
“Most enterprises rely solely on disparate logs and SMF data from security products such as RACF to piece together user behaviour,” added Crossno. “Even those who are integrating that data into their SIEM aren’t getting the level of insight needed to identify a malicious insider. Organizations need deep insight into what data was viewed, by whom and which applications were used to access it. This can only be achieved by directly capturing complete, start-to- finish user session activity data in real time, and integrating it into a SIEM platform such as Splunk for deep analysis.”
To help organizations better meet todays’ security challenges, Compuware has published the white paper, “Mainframe Security in a Hybrid/Mobile World: New Best Practices for the New Threat Matrix.” The paper presents six straightforward, non-disruptive measures to help organisations address insider threats on the mainframe.
Compuware Corporation
Compuware empowers the world’s largest companies to excel in the digital economy by fully leveraging their high-value mainframe investments. We do this by delivering highly innovative solutions that uniquely enable IT professionals with mainstream skills to manage mainframe applications, data, and platform operations. Learn more at compuware.com.
Over three-quarters of financial sector organizations rely only on log-files to detect insider threats on the mainframe, exposing themselves to data breaches
Compuware Corporation, the world’s leading mainframe-dedicated software company, today released a survey of financial services CIOs showing that while most (86%) say their mainframe is more secure than other systems, the majority (78%) say they are still exposed to a significant risk of insider threats due to blind-spots in internal data access and controls.
The survey was conducted by independent research company Vanson Bourne, and administered in April to 400 CIOs at large companies (including 66 respondents from the financial services sector) covering a cross-section of vertical markets in France, Germany, Italy, Spain, the UK and the U.S. Key findings include:
“The mainframe has always been the most securable platform in the enterprise; which is why organizations continue to entrust their most sensitive data to it,” said John Crossno, product manager, Compuware. “However, businesses still face the risk that privileged employees, or those who have acquired access illegally, will misuse mainframe data. Organizations must take steps to gain more visibility over who is accessing data and how they are using it.”
The research further revealed that the most common measures being used to overcome insider security risks include:
However, just 2% of financial services organizations monitor user and database activity to tackle insider threats on the mainframe.
“Most enterprises rely solely on disparate logs and SMF data from security products such as RACF to piece together user behaviour,” added Crossno. “Even those who are integrating that data into their SIEM aren’t getting the level of insight needed to identify a malicious insider. Organizations need deep insight into what data was viewed, by whom and which applications were used to access it. This can only be achieved by directly capturing complete, start-to- finish user session activity data in real time, and integrating it into a SIEM platform such as Splunk for deep analysis.”
To help organizations better meet todays’ security challenges, Compuware has published the white paper, “Mainframe Security in a Hybrid/Mobile World: New Best Practices for the New Threat Matrix.” The paper presents six straightforward, non-disruptive measures to help organisations address insider threats on the mainframe.
Compuware Corporation
Compuware empowers the world’s largest companies to excel in the digital economy by fully leveraging their high-value mainframe investments. We do this by delivering highly innovative solutions that uniquely enable IT professionals with mainstream skills to manage mainframe applications, data, and platform operations. Learn more at compuware.com.
