Automation + Orchestration

Orchestration

Coordination of automated tasks for a specific outcome or workflow

SOAR (Security Orchestration. Automation and Response)

Is a SIEM with automation capabilities that help with incident response.

SOAR + SIEM = Next-Gen SIEM

Playbook

Checklist of actions for specific incident responses

Runbook

Automated versions of playbooks with human interaction points

Complexity

Works best in repetitive tasks, ensuring a better return on investment

Cost

Requires a large upfront initial investment to hire a service provider or a team of developers for implementation

Single Points of Failure

Identify during automation or orchestration implementation in the network.

Inadequately designed automation can disrupt critical business processes if issues arise

Technical Debt

Cost + Complexity of poorly implemented software needing future adjustments.

Can accumulate if not regularly maintained or updated (Need Regular reviews and updates to reduce technical debt)

Ongoing Supportability

Long-term supportability is crucial for adapting automation to evolving tech.

Increased Efficiency + Time savings

Automating tasks frees up employee time

Enforced Baselines

You can enforce industry standards through automated polices.

Streamlined security and compliance through automation

Implementing standard infrastructure configurations

Standardized configurations for security and stability

Scaling in a secure manner

Dynamic resource scaling with security complicance

Increasing Employee Retention

Automating tasks unlocks job fulfillment

Decrease reaction time

Respond more quickly to security incidents and anomalies through automation

Workforce Multiplier

Amplifying staff capabilities with automation

Automation

Process of using tech and machinery to perform tasks or processes with minimal human intervention

Ticket Creation

Automatic generation of tickets when users or customers report issues or requests

Ticket Escalation

Critical aspect of support ticket management that ensures that complex or high-priority issues are addressed promptly and by the appropriate personnel

User Provisioning

The creation and management of user accounts and access rights to internal systems

Resource Provisioning

Allocating the necessary tools and resources that new employees need to perform their jobs

Automating Provsioning

• Speeds up process

• Reduce Errors

• Ensure Compliance

Security Automation

Involves use of technology to handle repititive securitiy tasks and maintain consistent defenses

Guardrails

Automated safety controls to protect against insecure infrastucture configs

They:

• Security policies

• Monitor infrastructure

• Automatically act on security violations

Security Groups

Cloud-based server firewalls that control incoming and outgoing network traffic

Service Access Management

Risk Reduction and operational efficiency

Automatic:

• Access Review

• Monitoring for unusual activity

• Restrictions

• Enabling/Disabling Services

Managing Permissions

Ensuring that individuals have the correct access level depending on their rols

This helps:

• Manage Users for (Onboarding, Transfers, and Departures)

• Protection of sensitive information

• Automated compliance checks

Continuous Integration (CI)

Practice in software development where developers merge code change frequently in one place.

Followed by automated tests, for software quality.

Release

Process of finalizing and preparing new software or updates.

Deployment

Involves automated process of software releases to users.

Installing software to a new environment

Continuous Delivery

Maintains deployable code with automation.

The full deployment process is automated only up to a certain stage. (Will not deploy into live production environment, that is a manual step)

Continuous Deployment

Automata the process of deploying code changes from testing to production after completion of the build stage

Integration

Process of combining different subsystems or components into one comprehensive system to ensure that they function properly together

API

Set of rules and protocols that are used for building and integrating application software.

Thus allow for integration between different services

Representational State Transfer (REST)

Architectural style that uses standard HTTP methods and status codes, uniform resource identifiers, and MIME types

(JSON format)

Is more adaptable and straight forward

Simple Object Access Protocol (SOAP)

Protocol that defines a strict standard with a set structure for the message, usually in XML.

Had higher level security features and provides transaction compliance

CURL

Tool to transfer data to or from a serve using one of the supported protocols