Earning the currency of trust

1. Earning the Currency of
Trust
Drew Morefield
New York, September 25th
#CWIN17

2. Session’s Title | Date
Copyright © 2017 Capgemini and Sogeti. All rights reserved. 2Copyright © Capgemini 2017. All Rights Reserved
Evolving Risk Landscape
29% of organizations
have both strong data
privacy policies and
sound security
frameworks3
>20% of organizations
have real time insight on
cyber risks. Malicious
attacks can take up to
256 days to identify.1
46% of organizations
state they have a
‘problematic shortage’ of
cybersecurity skills
in-house2
Move to a outsourced
SOC model is growing,
expected by Gartner to
equal 50% of security
operations
by 2019
1) Source: IBM 2015 commissioned research, Cost Of Data Breach Study, May 2015
2) Source: ESG Brief: Cybersecurity Skills Shortage: A State of Emergency, February 2016
3) Source- Currency of Trust Whitepaper- Capgemini August 2018

3. Session’s Title | Date
Copyright © 2017 Capgemini and Sogeti. All rights reserved. 3Copyright © Capgemini 2017. All Rights Reserved
Trends in Cybersecurity: A Fundamental Change

4. Session’s Title | Date
Copyright © 2017 Capgemini and Sogeti. All rights reserved. 4Copyright © Capgemini 2017. All Rights Reserved
Endangering the Modern Enterprise-
Evolving Business, Regulatory Requirements, and Cyber Threats
Risks and challenges to consider
Digital new requirements and trends
Regulatory
pressure and
new laws
Business
demanding
higher flexibility
Complex
ecosystem
Trends from Digital Transformation
Mobility Cloud Big
Data
Social IoT
Cybersecurity maturity
Limited cybersecurity
resources and
competences
Low cybersecurity
awareness amongst
managers and
employees
Threats from Hacktivists, organized crime, intelligence agencies
Employees
threatened
by phishing,
social
engineering …
More and
more
sophisticated
attacks by
cyber criminals
National
intelligence
agencies
with
unlimited
resources

5. Session’s Title | Date
Copyright © 2017 Capgemini and Sogeti. All rights reserved. 5Copyright © Capgemini 2017. All Rights Reserved
CSO Concerns- 2017

6. Session’s Title | Date
Copyright © 2017 Capgemini and Sogeti. All rights reserved. 6Copyright © Capgemini 2017. All Rights Reserved
Cybersecurity Portfolio
4 families of
Cybersecurity
1 Cybersecurity
framework
Consulting
&
Assessment
Services
Protection
Services
Monitoring
Services
IT
systems
OT & IoT
Systems &
Products
Cloud
Gartner >“Operational Technology (OT): industrial systems and
manufacturing IT systems
Threat
Hunting
Services

7. Session’s Title | Date
Copyright © 2017 Capgemini and Sogeti. All rights reserved. 7Copyright © Capgemini 2017. All Rights Reserved
Capgemini Service Managed SOC
Deployment & Service Delivery Options
 Tailored and exclusively designed SOC to suit a client’s security
needs & individual risk profile; operated out of Capgemini or in-
house
 Protects sensitive data
 Comply with local legal & regulatory mandates
Dedicated (managed) SOC
 Multiple customers on a SINGLE interface, while maintaining
protection of individual tenant policies
 Allows easy & quick access to comprehensive security solutions
 Local language support & local presence
 Industrialized SOC services capability through the GSOC
Multi-Tenant / Client managed SOC
Strategically located 7 Managed SOC Centers designed to remotely manage,
support and respond to our client’s security issues
Madrid
Client DClient A
Client B
Client C
Luxembourg
Belgium
GSOC Bangalore &
Mumbai
Toulouse
Inverness
Client E, F & G
ServiceDelivery
Option1: Fully Featured managed SOC
 Industrialized managed SOC solution, fully managed and hosted
by Capgemini, purchased through a tiered service model
 Features: Low CAPEX; Flexibility of solution, Reduced cost
Option 2: Service Wrap managed SOC
 SOC operational services fully managed by Capgemini while the
SOC tools and infrastructure continued to be customer owned
 Set up of logistics, interim processes required to enable the
changeover
 Features: Fast to deploy and implement; Low cost
Adding Kansas City

8. Session’s Title | Date
Copyright © 2017 Capgemini and Sogeti. All rights reserved. 8Copyright © Capgemini 2017. All Rights Reserved
GDPR and Data Protection: What You Need to Know
 In May 2018 the General Data Protection
Regulation (2016/679, known as GDPR) will be
enforced
 The GDPR is EU regulation related to the
protection of personal data and free movement of
such data
 Organizations will be held more accountable for
their data collection and use than ever before
 Risk evaluation is key and mitigation measures
may include encryption etc.
 Although many organizations have already
adopted processes consistent with GDPR, the
new regulation will impact most organizations on
all levels
 Failing to comply with the GDPR can lead to a
fine up to 4 percent of the worldwide turnover or
20 million euro
Key points of the GDPR Key points for data protection
Assessment
Protection
Data subject
rights
Controls
A
B
C
D
E Consulting
Data Protection

9. Session’s Title | Date
Copyright © 2017 Capgemini and Sogeti. All rights reserved. 9Copyright © Capgemini 2017. All Rights Reserved
Security and Privacy Principles
• Align data practices with consumers’
expectations- TRUST
• Understand where the data is- at rest or in
motion/structured or unstructured
• Classify criticality of data constructs (risk) and
implement appropriate security controls and
privacy policy
• Maintain strong data governance model
• Develop innovative ways of providing effective
and agile yet non-intrusive security to consumers
• Build out capabilities to monitor cyber risks on a
real-time basis- SOC (prevent/detect/respond)
• Strong brand around data privacy AND security
will earn trust of current customers and will yield
additional market capture

10. Session’s Title | Date
Copyright © 2017 Capgemini and Sogeti. All rights reserved. 10
Thank You!