Scribd
Upload
24 views3 pages

BigFix CyberFOCUS Security Analytics

HCL BigFix CyberFOCUS Security Analytics enhances collaboration between IT and Security Operations to expedite vulnerability remediation and improve cyber resilience. It provides tools to simulate remediation strategies, immediately patch vulnerabilities, and measure cyber risk reduction against business-defined targets. This solution integrates with leading vulnerability scanners to prioritize and manage vulnerabilities effectively, ultimately reducing cyber risk for organizations.

Uploaded by

Aditya Vaje
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
24 views3 pages

BigFix CyberFOCUS Security Analytics

HCL BigFix CyberFOCUS Security Analytics enhances collaboration between IT and Security Operations to expedite vulnerability remediation and improve cyber resilience. It provides tools to simulate remediation strategies, immediately patch vulnerabilities, and measure cyber risk reduction against business-defined targets. This solution integrates with leading vulnerability scanners to prioritize and manage vulnerabilities effectively, ultimately reducing cyber risk for organizations.

Uploaded by

Aditya Vaje
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 3

HCL BigFix

CyberFOCUS Security Analytics


Significantly reduce cyber risk and improve resilience through
prioritized vulnerability remediation

Organizations struggle to remediate vulnerabilities fast. The gap in objectives, tools and processes
of security and IT operations results in critical vulnerabilities not being remediated quickly enough
to protect the enterprise. BigFix CyberFOCUS Security Analytics helps IT Operations collaborate
with Security Operations to PRESCRIBE the most effective remediation strategies, PROTECT against
exploits and PROVE better cyber security outcomes in real time.

Prescribe Protect Prove


Simulate the best vulnerability Immediately patch exploitable Use Protection Level Agreement (PLA)
remediation strategies against vulnerabilities within BigFix that are Analyzer so you can measure and
exploits used by APT groups and show discovered by scanning tools and track actual cyber risk reduction using
remediation status to the CISA Known correlated with available fixes. agree-upon targets defined by business
Exploited Vulnerabilities catalog. stakeholders and IT Operations.

Advanced Persistent Threat (APT)


Mapping and the Vulnerability
Remediation Simulator

The Vulnerability Remediation


Simulator displays your recorded,
unremediated vulnerabilities, grouped
by the most critical exploits used by
MITRE APTs. Simulation shows you
which remediations will reduce the
APT exploit attack surface the most.

Assume a BigFix administrator wants


to identify one or more vulnerabilities
that, when remediated, will reduce the BEFORE

exploitable attack surface the most. Figure 1 - Current APT Exposure


In Figure 1, the administrator sees
all the attack groups present in the
environment are shown as well as the
number of exposures in each group.
Additionally, the administrator sees
all the CVEs that are applicable to
the environment, represented by the
different colored bars.

By selecting CVE-2017-0199,
the administrator simulates the
remediation of that vulnerability and
sees the number of exposures are
reduced in five different attack groups
as shown in Figure 2.
AFTER
Figure 2 - Simulated APT Exposure AFTER remediation

Copyright © 2023 HCLTechnologies Limited.


Prescriptive Remediate Guidance

The Vulnerability Remediation


Simulator also recommends the
most impactful CVE remediations.
Figure 3 depicts a pop-up which
appears in the upper right corner
of the Vulnerability Remediation
Simulator.

Figure 3 is an example of prescriptive


remediation guidance suggesting
that remediating CVE-2020-1472 will
remediate eight exposures and result
in the greatest overall risk reduction.
It also shows the total number of
exposures. Figure 3 - Example of Prescriptive Remediation Guidance

Remediation of Vulnerabilites
Discovered by Industry-leading
Scanners

BigFix Insights for Vulnerability


Remediation integrates BigFix with
vulnerability scan data. We can
inject data from Tenable, Qualys,
and Rapid7 using APIs as well as
ingest vulnerabilities exported from
another Vulnerability Manager or
any vulnerability data provided in
a comma-separated values (CSV)
file. BigFix Insights for Vulnerability
Remediation guides BigFix users
on how to apply the best patch and
configuration settings to remediate
discovered vulnerabilities, and thus
reduce risk and improve security.

The report shown in Figure 4 shows


the most critical CVE exposures,
enabling users to easily prioritize
BigFix remediations. It shows critical
exposures sorted by the user’s choice
of filter and sort criteria, overall
distribution of exposures by criticality Figure 4 - Example Report of Tenable-discovered vulnerabilities
ratings and grouped by priority.
Tenable-discovered vulnerabilities have been correlated with vulnerabilities with
Advanced correlation algorithms available fixes enabling IT to select which remediations to immediately deploy.
aggregate and process the
vulnerability data with information With BigFix Insights for Vulnerability Remediation, organizations can reduce
from BigFix to drive analytics and vulnerability risk by substantially reducing the time between discovery and
reports. At the bottom of Figure 5, remediation.

"The APT CVE Analyzer is very "I love the CISA KEV Analyzer - it’s "Protection Level Agreements
useful for us to understand perfect for our executives to are now a Key Risk Indicator
what CVEs are available to the understand. All they need to know (KRI) for us. These are outcome
attackers. The remediation is if there are a bunch of bubbles, driven metrics on how much
guidance in particular is really we have a problem.” risk the business is willing to
valuable and is really different take, and I urge everyone here
from anything we have seen - Sr. Security Director,
to adopt this KRI as well. It’s
before.” Manufacturing Sector
helped us a lot.

- Sec Ops Director, - BISO/CISO
Government Sector Finance Sector

Copyright © 2023 HCLTechnologies Limited.


BigFix CISA Known Exploited
Vulnerability Exposure Analyzer

The BigFix CISA Known Exploited


Vulnerability Exposure Analyzer
maps your remediation history to the
constantly updated Known Exploited
Vulnerabilities Catalog published by
CISA which defines the most critical
threats in the world.

Using the Analyzer, IT teams can identify


the most urgent and significant security
issues. For instance, in Figure 5, the
darker the circle, the more severe the
vulnerability, and the larger the circle,
the more devices are impacted. The
dates on the horizontal axis indicate
when CISA requires federal agencies to
have completed remediation. Access
to the detection and remediation Figure 5 - A CISA Known Exploited Vulnerability Report
content requires the Known Exploited
Vulnerabilities Content Pack Add On.

Define and Manage your Protection


Level Agreements (PLAs)

BigFix CyberFOCUS Security Analytics


introduces a new concept we call
Protection Level Agreements. These
are a set of baselines that combine
asset criticality, CVE criticality, desired
patch levels, and compliance standards
against agreed-upon service levels
defined by business stakeholders and IT
Operations.

A Protection Level Agreement report


shows defined targets and performance
against those targets. Figure 6 shows
performance against 10 critical areas
of vulnerability patching. The blue
dots indicate the agreed upon (target)
service levels. Gray bars show targets
that have been met; purple bars show Figure 6 - Example PLA report showing defined targets and patching performance
missed targets.

Summary

With BigFix CyberFOCUS Security Analytics, IT and Security Operations have a set of powerful tools that enables them to align
their efforts to remediate vulnerabilities fast. IT Operations can, for the first time, simulate the business impact of remediation
actions to focus on the highest exposure threats; Security Operations using leading vulnerability management tools supercharge
their effectiveness by more quickly correlating discovered vulnerabilities with available remediations; and IT Operations can also
take a more active role in Enterprise Security by defining and measuring their performance to agreed-to business objectives.
BigFix CyberFOCUS Security Analytics supercharges vulnerability management and reduces cyber risk.

BigFix CyberFOCUS Security Analytics is included with BigFix Lifecycle, BigFix Compliance and BigFix Remediate. For more
information or to request a demonstration, visit www.BigFix.com or contact us.

About HCLSoftware

HCLSoftware develops, markets, sells, and supports product families in the areas of Digital Transformation, Data, Analytics &
Insights, AI & Automation and Enterprise Security platforms. HCLSoftware is the cloud-native solution factory for enterprise
software and powers millions of apps at more than 20,000 organizations, including more than half of the Fortune 1000 and
Global 2000 companies. HCLSoftware’s mission is to drive ultimate customer success with its IT investments through relentless
product innovation.

hcl-software.com

You might also like