iscover
ReporterShare this article on:
Powered by
MOMENTUM
MEDIA
Sophos has unveiled advancements to Sophos Cloud Optix that automate and simplify the detection and response of security incidents across Amazon Web Services (AWS) infrastructure.
The Sophos Cloud Optix cloud security posture management solution is powered by new machine learning models from Sophos AI, and it now continuously analyses AWS CloudTrail to build a picture of individual user activity.
It brings AWS CloudTrail events to life in a clear and detailed timeline view of user activities, high-risk anomalies along with security and compliance incidents across all AWS accounts with remediation guidance for security teams.
Sorting through and making sense of potentially thousands of user activity events to identify suspicious activity used to be near impossible, according to Scott Barlow, Sophos vice-president of global MSP and cloud alliances.
“Sophos is transforming this resource intensive process, giving security teams the answers they need with the click of a button."
"Security teams can instantly pinpoint unusual activity – such as actions not previously taken by a user or actions being performed outside of normal business hours, for example – and focus their investigations on the most high-risk alerts with confidence,” Barlow said.
Sophos Cloud Optix is designed to provide visibility into risky blind spots. It secures AWS and other cloud workloads against advanced threats and cloud environment misconfigurations and is easily managed in the cloud-based Sophos Central platform alongside Sophos’ entire portfolio of next-generation cyber security solutions and services.
It is also designed to offer extensive AWS security service integrations – including integration with the new Amazon Inspector as it integrates with AWS Security Hub, Amazon GuardDuty, AWS CloudTrail, Amazon Macie, AWS Systems Manager and Patch Manager, AWS Firewall Manager, AWS IAM Access Analyzer, Amazon Detective, and Amazon Elastic File System.
As an AWS Level 1 Managed Security Service Provider (MSSP) Competency program partner, Sophos’ unique threat protection, monitoring and response package fulfils a critical market need for managed security services, validated by AWS.
Now available on AWS Marketplace, the package fuses automated protection and 24/7 managed threat response into a single, comprehensive offering. Designed specifically for AWS customers, the offering combines cloud security posture management; endpoint, cloud workload and network security; vulnerability scanning; inventory visibility; and compliance tracking. Organisations further benefit with a dedicated 24/7 Sophos Managed Threat Response security team that monitors AWS environments and responds to neutralise threats and in-progress attacks.
[Related: Akamai predicts edge-based innovation to take centre stage in Asia]
Be the first to hear the latest developments in the cyber industry.
