ServiceNow beefs up ServiceNow Security Operations

Source: ServiceNow.
Dashboard for ServiceNow
Security Operations.

ServiceNow, the enterprise cloud company, has announced new integrations with cybersecurity companies and the ServiceNow Security Operations solution. With ServiceNow, customers can prioritise threats and use a structured response engine to resolve real security threats quickly. This in turn enables security analysts to enrich threat information, map those threats to the underlying business service at risk, and collaborate with IT to resolve them.

ServiceNow explains that while enterprises have invested heavily in protection and detection tools, security response is often left unaddressed. Determining whether an alert constitutes an actual threat can take hours, the company said. Security analysts typically use email, phone calls and spreadsheets to coordinate remediation with IT teams, which are error-prone and unwieldy methods.

ServiceNow Security Operations adds new automation integrations from security vendors that can automatically enriches a security incident with threat intelligence, including information from potentially affected endpoints, in as little as 20 seconds. This allows security analysts to spend less time on researching problems and to get to resolution faster. In addition, ServiceNow Security Operations eliminates the need for manual data collection by automatically generating a post-incident report for later analysis, reporting or audit.

“As an industry, we can't hire our way out of this problem,” said Sean Convery, GM of Security, ServiceNow. “ServiceNow Security Operations makes the most of a company’s security talent. It automates busy work so analysts can concentrate on stopping cyberattacks rather than filling out forms.”

With the latest ServiceNow product release, customers gain built-in integrations for:

Palo Alto Networks

ServiceNow Security Operations can use threat intelligence data provided by the Palo Alto Networks Next-Generation Security Platform via its AutoFocus contextual threat intelligence and WildFire cloud-based threat analysis offerings to automatically enrich the context around a security incident. If remediation requires a change to the Palo Alto Networks Next-Generation Firewall, the change can be orchestrated directly from within Security Operations, including routing permission to the firewall administrator to ensure he/she is aware of the change.

“By integrating with the Palo Alto Networks Next-Generation Security Platform, ServiceNow is able to leverage the wealth of our offerings for the benefit of our joint customers,” said Chad Kinzelberg, Senior VP of Business and Corporate Development, Palo Alto Networks. “The ability to automate what are typically manual processes accelerates response times and eliminates tedious efforts that so often hinder effective prevention of cyber breaches.” 

Tanium

Further integration with Tanium Core Platform allows ServiceNow to enrich cases with live process data directly from an affected endpoint. 

“You can't be successful in security without knowing what's happening in every corner of your environment," said Orion Hindawi, co-founder and CEO, Tanium. "The integration of Tanium's Core Platform into ServiceNow's Security Operations will ensure customers get a full and complete picture of all their endpoints and be able to move quickly when an incident happens.”

Interested?

View a current list of integrations

Watch a video on how businesses can resolve real security threats fast, based on business impact