What's New in Security Operations in the Utah Release
foreign [Music] we're going to look at the new Innovations being introduced for servicenow security operations for the Utah release let's start with the security incident response workspace this reimagined workspace is designed with Tier 1 and tier 2 security analysts in mind and offers different touch points of an analyst's user Journey similar to other servicenow workspaces we start with the overview landing page this provides a holistic view of activity assigned to the incident response team or as we see here the analysts themselves when we need to triage or investigate an incident we can start with the overview tab which provides a high level view of the incident in this case we see it's a potential phishing email continuing to the details tab we are shown specifics about the incident in question including a copy of the phishing email for the analyst to review we can also see all of the activity that was automatically initiated before the analyst ever saw the incident including a threat intelligence lookup that determined there is a malicious observable found in this incident based on the tags that were automatically applied we have high confidence that this is a legitimate incident and not a false positive the investigation tab provides details such as Associated observables configuration items or assets impacted by the incident and affected users we can take to direct actions from the incident too for example we can take this malicious observable and using orchestration run citing searches and firewall blocks on it lastly The Playbook tab is where we can view the Playbook and its steps a significant change with this newly designed workspace is the ability to add multiple playbooks so if we start out by responding to a phishing email but the users downloaded the attachment and created a malware incident we can then add that specific malware Playbook to our process more actions are also available to us from this drop down such as linking to or creating a major security incident speaking of playbooks and workflows these have now been moved to the servicenow process automation designer now Playbook designers can more easily create customized playbooks using easy to understand lanes and process steps with the new security incident response workspace security analysts have more visibility and control than ever before over the incidents for which they're responsible all in an elegant workspace designed especially for them now let's switch gears and talk about the updated unified vulnerability manager workspace if you aren't familiar with the vulnerability manager workspace it was introduced in our San Diego release and gives vulnerability managers a way to customize the way they View and manage infrastructure vulnerabilities from a single dashboard with the latest release teams can now View and manage infrastructure application and container vulnerabilities as well as configuration compliance test failures all in one place this provides for improved Integrity reliability and confidentiality of Business Services thanks to a more comprehensive understanding of risk postures and related triage additionally we're now able to create remediation tasks to track the progress for fixing application and Cloud container vulnerabilities in addition to infrastructure host vulnerabilities all of these features still have individual dashboards for their respective business owners but now we have a holistic view of the entire attack surface with the updated vulnerability manager workspace both the security incident response workspace and updated vulnerability manager workspace are now available in the servicenow store and are included as a base capability from a licensing perspective and as always we're leveraging the power of the servicenow platform to help deliver simplified experiences that Empower everyone inside and outside of your organization with a simplified layer of Engagement that unifies data from every system across your organization and presents it with an intuitive UI that makes it easy to learn use and adapt no need to rip and replace and more importantly your customers reap the benefits Downstream next we enable purposeful automation which means we can take the digital sprawl across your Enterprise and deliver an automated AI enabled system of action taking the load and burden off your employees and driving real and measurable business outcomes for every part of your business globally at scale driving efficiency and reducing cost across the organization lastly we provide organizational agility with a low code platform because the only constant today is change and your business needs to be able to Pivot and adapt quickly while continuing to push the boundaries of innovation most importantly our platform connects everyone across your Enterprise and ecosystem pointing everyone in the same direction to solve complex problems together faster if you'd like to learn more please visit us at www.servicenow.com thank you
https://www.youtube.com/watch?v=KSi7V6rBzoE