{"id":39697,"date":"2020-07-08T08:00:42","date_gmt":"2020-07-08T07:00:42","guid":{"rendered":"https:\/\/www.intelligentcio.com\/eu\/?p=39697"},"modified":"2020-07-07T11:01:41","modified_gmt":"2020-07-07T10:01:41","slug":"levi-strauss-co-utilises-exabeam-platform-to-bolster-security-operations","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/eu\/2020\/07\/08\/levi-strauss-co-utilises-exabeam-platform-to-bolster-security-operations\/","title":{"rendered":"Levi Strauss &amp; Co. utilises Exabeam platform to bolster security operations"},"content":{"rendered":"\n<p><em>Data security is paramount to operations during the rapidly transforming cybersecurity landscape. Colin Anderson, Chief Information Security Officer at Levi Strauss &amp; Co., explains why it selected Exabeam to protect its corporate brand as well as consumer trust.<\/em> <\/p>\n\n\n\n<p>Founded in 1853, Levi Strauss opened a wholesale dry goods business in San Francisco that became known as Levi Strauss &amp; Co. (LS&amp;Co.). Today, LS&amp;Co. is one of the world\u2019s largest and most recognisable brand-name apparel companies and a global leader in jeanswear. The company designs and markets jeans, casual wear and related accessories for men, women and children under the Levi\u2019s, Dockers, Signature by Levi Strauss &amp; Co. and Denizen brands.<\/p>\n\n\n\n<p><strong>Challenge <\/strong><strong><\/strong><\/p>\n\n\n\n<p>As one of the world\u2019s most recognised apparel companies, Levi Strauss &amp; Co. operates a globally dispersed team. With the threat landscape changing, traditional systems based on an EPS model were falling short. LS&amp;Co was looking for a security partner that could scope a solution to meet its needs. The company sought a team that was fast-moving and whose skills could be augmented by a SIEM that incorporates automation into its tools.<\/p>\n\n\n\n<p>\u201cLooking at the landscape of SIEM products out there, we were searching for underlying technology and architecture that lends itself to meeting the needs of a more agile security team,\u201d said Colin Anderson, Chief Information Security Officer at Levi\u2019s.<\/p>\n\n\n\n<p>\u201cOne of the big challenges a lot of us are facing is that we want to try to automate and orchestrate more,\u201d said Anderson. \u201cWe\u2019re trying to leverage technology to help manage the growing amount of data and the growing number of attacks that we\u2019re dealing with. Exabeam is one piece of that puzzle.<\/p>\n\n\n\n<p>\u201cExabeam is a great detection and response tool, but it\u2019s not necessarily a prevention tool. So, Exabeam came out with this orchestration case management solution that allows you to take action with what you\u2019re finding. This is an area I\u2019m hoping to grow in in the next year or two,\u201d said Anderson.<\/p>\n\n\n\n<p><strong>Vendor selection and proof of concept<\/strong><\/p>\n\n\n\n<p>Knowing that automation would be a key factor in driving business forward, LS&amp;Co. had to evaluate whether a new SIEM configuration would better serve its unique business needs. Cost also played a role in the decision-making process. LS&amp;Co. asked questions around cost efficiency, operational experience under pressure and the ability to adapt in changing conditions.<\/p>\n\n\n\n<p>\u201cSince we wanted better visibility in our environment, we needed to bring in more data. Legacy licensing models and others that focus on event per second are not scalable in today\u2019s data-driven security teams,\u201d said Anderson.<\/p>\n\n\n\n<p><strong>Use cases <\/strong><strong><\/strong><\/p>\n\n\n\n<p>Having already used Exabeam products, the LS&amp;Co. team decided to migrate to using a full Exabeam Security Management Platform.<\/p>\n\n\n\n<p>\u201cWhen looking at new platforms to support our detection and response cybersecurity teams and functions, we knew we wanted new architectures and leading-edge technologies. These elements best position us for the future,\u201d said Anderson.<\/p>\n\n\n\n<p>By using Advanced Analytics paired with Smart Timelines, the LS&amp;Co. team can see exactly what is going on, from a timing perspective, in terms of incidents. Through this process, investigations become quicker and efficient, thus increasing resolvability. Embracing automation with Exabeam ultimately strengthened the LS&amp;Co. team\u2019s speed of manoeuvre \u2013 how fast you move from finding a vulnerability to mitigating the threat.<\/p>\n\n\n\n<p><strong>Partnering with Exabeam for a tailored solution <\/strong><strong><\/strong><\/p>\n\n\n\n<p>A major factor in deciding on a new SIEM, and ultimately sticking with Exabeam, was the need to find a partner that understood the exact and unique needs of the LS&amp;Co. team.<\/p>\n\n\n\n<p>\u201cOur Exabeam partnership helped to make our team more efficient and has been a core building block within our cybersecurity programme,\u201d said Anderson.<\/p>\n\n\n\n<p>Often, when tools change, processes have to follow suit. But for LS&amp;Co., an Exabeam partnership allowed for the development of a product that truly aligns with the way LS&amp;Co. wants to work.<\/p>\n\n\n\n<p>\u201cOne of the key reasons we chose Exabeam was the company\u2019s willingness to adapt, rethink things and go the extra mile. There\u2019s a lot of value there that I can\u2019t put a dollar next to,\u201d said Ryan Clarque, Senior Global Cybersecurity Manager, Levi Strauss &amp; Co.<\/p>\n\n\n\n<p><em>Intelligent CISO caught up with Colin Anderson, Chief Information Security Officer at Levi\u2019s, to discover more about the Exabeam solution and why the company decided to work with this particular vendor.<\/em><\/p>\n\n\n\n<p><strong>What does your role as Chief Information Security Officer look like day to day?<\/strong><\/p>\n\n\n\n<p>I\u2019m responsible for information security for Levi Strauss, globally. My role includes managing the risks to information on-prem, against our employees, in the cloud. These days, it\u2019s a challenging task for sure as attacks are at an all-time high as well as dealing with the pandemic issues that are challenging industries globally. So, the role is changing as one might expect and it\u2019s one that I\u2019ve enjoyed for many years now.<\/p>\n\n\n\n<p><strong>How important is visibility to your security strategy?<\/strong><\/p>\n\n\n\n<p>The Levi\u2019s brand is 160 years old so brand protection, brand reputation and consumer trust are paramount. As a result, information security is very important to the organisation so we\u2019ve made some significant investments such as this one with Exabeam, to really help us protect that corporate brand and protect our consumers\u2019 trust.<\/p>\n\n\n\n<p><strong>Why did you select Exabeam as the vendor?<\/strong><\/p>\n\n\n\n<p>I have experience with many other tools and many of Exabeam\u2019s competitors and the challenge I kept running into was that, in regard to a lot of other competitors, you find what you\u2019re looking for and with information security, it\u2019s usually what you\u2019re not looking for or what you don\u2019t know about that burns you. So, what I loved about Exabeam was that it looks for the anomalies in your environment, the outliers. It helps you to understand what \u2018normal\u2019 looks like, but it also helps you identify abnormal events \u2013 what those things are in the environment that require further investigation. So, Exabeam was one of the first tools many years ago that was very analytics-based \u2013 it compiled a lot of data, it looked to establish baselines, and it helped you to alert on outliers.<\/p>\n\n\n\n<p><strong>What benefits have you seen since the implementation a couple of years ago?<\/strong><\/p>\n\n\n\n<p>First and foremost; visibility. These days, environments are so large and you\u2019re having to deal with so much data to monitor and alert on, as well as dealing with billions of events. To really be able to harness and understand what\u2019s happening in your environment, you need technology and Exabeam gave me that technology and visibility to help make sense of all the events that were happening in my environment. It helped me zero-in on what\u2019s most important to me in my organisation.<\/p>\n\n\n\n<p><strong>How far has the solution future-proofed operations and how important is this for the company?<\/strong><\/p>\n\n\n\n<p>What I\u2019ve seen over the years is that security is becoming a data challenge. We\u2019re bringing in more and more data and it\u2019s becoming more and more challenging to analyse that data. There are skills shortages and dynamic attacks, so what Exabeam has helped us do is to grow with the changing dynamics, changing attacks, changing data volumes and changing types. So, in that sense, it\u2019s grown with my security organisation and has scaled up over time \u2013 when I first installed Exabeam, we were capturing around 5,000 events per second and now I\u2019m close to 30,000 events per second.<\/p>\n\n\n\n<p><strong>Where do you think companies will invest in security in the next five years?<\/strong><\/p>\n\n\n\n<p>Everything is moving to the cloud, including Exabeam so what we\u2019re going to see is more and more enterprises have a very heterogeneous environment where you\u2019ve got some on-prem systems and some in the cloud, you\u2019re looking at data in multiple locations and are supporting users working from anywhere. To do that, you need really good analytics and a really good handle on what\u2019s happening in your environment and that\u2019s where Exabeam comes into play.<\/p>\n\n\n\n<p>As enterprises evolve and they\u2019re dealing with more data and moving to the cloud, the attack surface becomes more complicated. This is because you\u2019re protecting corporate assets in multiple locations and protecting corporate assets that are being used by individuals in many more locations. Typically, complexity is the enemy of security, in most cases. You want simple, you want a very basic footprint which makes it much easier to protect your enterprise and right now, we\u2019re dealing with a lot more complexity. Exabeam has shown that it is able to grow with us, handle that complexity and handle that data growth.&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Data security is paramount to operations during the rapidly transforming cybersecurity landscape. Colin Anderson, Chief Information Security Officer at Levi Strauss &amp; Co., explains why it selected Exabeam to protect its corporate brand as well as consumer trust. Founded in 1853, Levi Strauss opened a wholesale dry goods business in San Francisco that became known [&hellip;]<\/p>\n","protected":false},"author":21,"featured_media":39700,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[205,57,1735,93],"tags":[14911],"class_list":["post-39697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-case-studies","category-enterprise-security","category-retail","category-top-stories","tag-levi-strauss-co-2"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/39697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/comments?post=39697"}],"version-history":[{"count":1,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/39697\/revisions"}],"predecessor-version":[{"id":39699,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/39697\/revisions\/39699"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media\/39700"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media?parent=39697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/categories?post=39697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/tags?post=39697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}