Enterprise Risk Management: Strategie e Soluzioni a confronto

Transcription

1 Enterprise Risk Management: Strategie e Soluzioni a confronto - Milano 25 Settembre 2008 Fabio Battelli, CISSP, CISA Practice Manager - Advisory Services Symantec Consulting Services

2 Symantec Global Services Advisory Service Overview 2

3 Symantec Global Services Enabling Confidence in a Connected World Global Reach: professionals across Americas, EMEA, APAC, Japan consulting engagements per year Work with 95% of Fortune 500 Real-world implementation experience Deep technology expertise Leveraging industry best practices Advisory & Solutions enablement skills Consulting company acquisition (Company-i) Professioanls certification (ITIL, CISM, CISSP)

4 Symantec Consulting Services in Italia Governance, Risk & Compliance IT Transformation Services Business Continuity Management Information Foundation Data Centre Management Threat Management/IT policy Compliance Backup & Storage Management Operational support Antivirus and Data Protection op. svcs. SOC operational services Brand monitoring and online fraud mgmt.

5 Risk Management: Key Facts Advisory Service Overview 5

6 Il Risk Management è importante per...

7 Risk Management & Compliance La conformità ed i rischi IT sono strettamente legati. Ad un aumento della conformità IT, corrisponde una riduzione dei rischi IT

8 Governance, Risk & Compliance Governance Governance Governance Crea Valore Definisce obiettivi ed aspettative Individua le Regulation Definisce regole e politiche People Processes Technology Risk Risk Management Individua Minacce, Vulnerabilità, Probabilità Seleziona le contromisure Stabilisce l Asset Value Definisce la strategia di minitigazione Risk Compliance Compliance Compliance Definisce i controlli Lega i controlli alle politiche Fornisce evidenze Dimostra la due diligence

9 Risk Management: Metodologie e soluzioni Symantec IT Security Risk Management & Compliance

10 Risk Management Top Issues (Fonte: ENISA) Principali ostacoli alla gestione del rischio secondo ENISA (European Network and Information Security Agency)...

11 Risk Management Quale metodologia scegliere?

12 Risk Management Methodology Soluzioni

13 Risk Analysis Threats vs Control

14 Risk Analysis Threats or Control Disponibilità di dati storici inerenti la probabilità di accadimento Per Industry Specifiche (es. Banking) Prevalenza del metodo Quantitativo (es. Valutazione monetaria) Ottenere risultati con rapidità, soprattutto nelle grandi organizzazioni Valutare conformità a Standard e Regulation Prevalenza del metodo Qualitativo

15 Risk Management Fattori Critici di Successo

16 Governance, Risk & Compliance (GRC) Process Automation Advisory Service Overview 16

17 Symantec s Automated IT Compliance Approach Define Assess Report Remediate Determine Risk and Develop Policies Assess Infrastructure and Processes Monitor and Demonstrate Due Care Assess Risk and Remediate Problems POLICIES and CONTROLS TECHNICAL CONTROLS DASHBOARDS RISK WEIGHTED REMEDIATION AUDIT REPORTS RISK ASSESSMENTS PROCEDURAL CONTROLS

18 Thank You! Fabio Battelli Practice Manager - Advisory Consulting Services fabio_battelli@symantec.com Copyright 2007 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice. 18