Selling Security to the Business Peter Frøkjær ADP Global Security Organization @: peter.froekjaer@adp.com In: dk.linkedin.com/in/froekjaer/ : +45 6155 2021 / +1 530 683 5388 How Security communicate with the Business How to add value to the business How to build a Global Security Organization What is ADP? Payroll Services, Human Resource Management & Benefits Administration Automotive Dealer Management System & Digital Marketing Solutions ADP, Inc. [NASDAQ: ADP] Outsourced Human Resources, payroll, tax and benefits administration · · · · · · · Began in1949 as a Payroll Company $9 billion in revenue Over 550,000 clients 55,000 associates worldwide Fortune 300 company One of Fortune’s “Most Admired” AAA-ratings from both Moody’s and Standard & Poor’s ADP Dealer Services (Division of ADP, Inc.) Global technology solutions and business partner dedicated to helping dealers drive measurable results across every area of their operation ADP CORP Roseland, NJ, USA · · · · · ADP - ... (other dev.) ADP - ES (Employer Services) Roseland, NJ, USA ADP ADP –– DS DS (Dealer (Dealer Services) Services) Hoffman Estates, Hoffman Estates, IL, IL, USA USA ADP - ESI (Employer Services International) Paris, France ADP ADP –– DSI DSI (Dealer (Dealer Services Services International) International) Hungerford, Hungerford, UK UK Founded in 1972 $1.3 billion in revenue Over 30 years of experience 25,000+ clients 7,500 associates worldwide ADP – ESI - ... (Employer Services International) ADP – ESI - ASIAPAC (Employer Services International) ADP ADP –– DSI DSI -- CEur/SA/Nord CEur/SA/Nord (Dealer (Dealer Services Services International) International) Vigonza, Vigonza, Italy Italy ADP – DSI - ... (Dealer Services International) ADP – ESI - ... (Employer Services International) ADP – ESI – China (Employer Services International) ADP ADP –– DSI DSI -- Norddic Norddic (Dealer (Dealer Services Services International) International) Vantaa, Vantaa, Finland Finland ADP – DSI - …. (Dealer Services International) ADP – DSI - Denmark (Dealer Services International) Vejle, Denmark 2 About ADP ADP Inc. [NASDAQ: ADP] Outsourced Human Resources, payroll, tax and benefits administration Began in 1949 as a Payroll Company Over $10 billion in revenue Approximately 600,000 clients 57,000 associates worldwide Fortune 500® company, ranked 269 AAA-ratings from both Moody ® and Standard & Poor ® ADP Dealer Services (a division of ADP Inc.) Global technology solutions partner dedicated to helping dealers drive measurable results across every area of their operation 3 Founded in 1972 $1.8 billion in revenue for Fiscal 2012 Over 26,500 clients worldwide Who are we – Maturing the Security org. CEH MBA CISM CCNP MSCP CISSP CEH CCNP MSCP 4 CISSP CISM Where do we come from? Where are we going Communicating with stakeholders • Vendors • IT • Business MBA How should Security navigate in a global Enterprise? Communicate with the business? – Security need to learn the language of Business (RI$K) – Articulate RISK, not “SQL Injection” and “Buffer Overflow” etc. Build a Global Security Organization? – Integrate into the Business – Integrate into IT Add value to the Business? – Minimize the impact of security incidents Don’t Argue. Debate! Take it off line – Demonstrate how to - Securely implement Business Enabling technologies 5 Build a Global Security Organization 6 Communicating with the Business BU Requests and Consumes Consulting & Services GSO Provides Consulting & Services GSO Drives Projects, Program & Policies 7 Communicate with the business The Language Of The Boardroom: RI$K!! Security MUST learn the language of the Business. http://www.cxoware.com 8 Add value to the Business: Monitor RSA and other AntiFraud Command Centers 9 PDAN – Passive Data Access Network Fiber connections - input Tx Rx Tx Rx Tx Rx 1x1 Fiber Tap Network A Tx Network B Rx Tx Monitoring Ports Rx A B www.vssmonitoring.com Tx Rx Tx Rx Tx Tx Rx Tx Rx Rx vStack Aggregation layer and Monitoring equipment DLP NetWitness Network DPI Sensor vStack 10/100/1000 1X1 Copper Tap Network Ports Power A Copper connections - input 10 B Activity A LinkSafe Activity B Error Link Speed A Link Speed 1 Link Speed B Link Speed 2 Monitoring Ports A B www.vssmonitoring.com IDS Add value to the Business: Securely implement Business Enabling technologies Internet Firewall PDAN F5 PDAN Firewall Web Firewall PDAN App Firewall PDAN DB 11 • • • • SSL Offload Adoptive Authentication Web Application Firewall Load Balancing Thank You – Q&A @: peter.froekjaer@adp.com In: dk.linkedin.com/in/froekjaer/ : +45 6155 2021 / +1 530 683 5388 12