Automating Harmony: The Key to IT Ops and Security Collaboration

The Need for Collaboration between Security and IT Operations Teams

The collaboration between security and IT operations teams has become increasingly crucial in managing essential business processes. However, conflicting priorities, cultural differences, and process blind spots often hinder their ability to effectively partner. This has led to systemic inefficiencies, increased IT risk, and occasional friction between the two teams. With their shared responsibilities expanding, pointing fingers is no longer an option. Instead, they must foster collaboration and utilize process automation to establish common ground.

The Challenges in Joint Responsibility

The primary source of friction arises due to the different roles and responsibilities of the two teams. Security teams are responsible for setting policies for risk management and compliance, both internally and externally. On the other hand, IT operations teams are tasked with actively managing the IT estate and implementing these policies. As a result, they indirectly bear the responsibility of policy enforcement.

This realization highlights the importance of collaboration, especially in complex use cases that span multiple organizational silos and technology stacks. Examples of such use cases include secure employee offboarding, IT audit and compliance readiness, and SaaS user and lifecycle management.

The Importance of Secure Offboarding

One critical business process that requires collaboration between IT, security, and HR is secure offboarding. This process has faced significant strain since the onset of the pandemic, primarily due to increased employee turnover, layoffs, and dynamic remote work policies. Automation has become imperative in this area to reduce manual overhead, errors, and security gaps, even in companies with robust existing processes.

An example that highlights the consequences of broken offboarding processes is the case of Square, the owner of the Square payments system. They experienced a breach when a former employee used access credentials that were still active to steal data on millions of users. Another example is Morgan Stanley, which paid $60 million to settle a legal claim resulting from improper decommissioning of data center equipment, leading to a major data breach.

These examples underscore how inadequate offboarding processes can have a severe impact on a company’s bottom line. Collaboration is crucial in identifying all the necessary controls during employee departures, such as deprovisioning accounts, applications, and access, as well as managing legal holds and data retention mandates.

The Challenges of IT Audit and Compliance

IT audit and compliance present another area that requires joint processes and collaboration, with potential points of failure throughout. Effective IT audits rely on accurate and efficient asset management, necessitating a current inventory of all hardware and software. This task has become even more challenging given the highly distributed IT footprints of most companies.

For example, imagine a scenario where the security team is responsible for enforcing a policy that requires the installation, activation, and updates of cybersecurity tools like CrowdStrike and Tanium on all remote laptops. However, it is IT operations that must enforce this policy since they manage application deployment and patch management. If IT ops have competing responsibilities, they may not assign the same priority to this policy. Consequently, security teams bear the burden of security incidents resulting from noncompliance.

Managing SaaS Portfolios

An additional challenge relates to the management of growing SaaS (Software-as-a-Service) portfolios. Business units often make quick decisions to invest in SaaS applications without involving IT operations. Consequently, approximately half of all SaaS apps are purchased outside of IT oversight. While this enables faster business advancements, it also creates issues.

Accurately forecasting SaaS renewal costs, identifying unused licenses, and optimizing vendor agreements for cost savings becomes more challenging under these circumstances. Additionally, security considerations arise, such as identifying applications requiring specific compliance or storing sensitive data. Working together, IT and security need to collaborate to enforce appropriate policies for the SaaS portfolio and ensure effective risk management.

The Path to Collaboration and Automation

The reality is that IT ops and security can no longer function in isolation. Their fortunes are intertwined, and collaboration is essential for effective operations. The first step towards improvement lies in aligning on what a specific process should entail and why it is necessary.

Once the alignment is achieved, both teams can work together to co-create and implement automated workflows that benefit both their long-term goals. This collaboration will not only strengthen their individual functions but also improve the enterprise as a whole.

Security and IT Operations: Uniting for a Better Future

In today’s complex and fast-paced digital landscape, the success of an organization relies heavily on the collaboration between security and IT operations teams. By breaking down silos and prioritizing collaboration, businesses can enhance their ability to manage essential processes, mitigate risks, and adapt to evolving technological challenges. The path to a secure and efficient future lies in the hands of these two teams, as they navigate the intersection of security, IT, and organizational strategy.

Advice for Organizations

Organizations seeking to improve the collaboration between their security and IT operations teams should consider the following:

1. Establish shared goals and objectives: Both teams should align on the purpose and significance of critical processes, ensuring that they share a common understanding and are working towards the same objectives.
2. Create a culture of collaboration: Foster an environment that encourages open communication, mutual respect, and a willingness to work together. This can be achieved through joint training programs, shared workshops, and regular cross-team meetings.
3. Invest in automation: Automate processes wherever possible to reduce manual overhead, minimize errors, and improve efficiency. Automation tools can help streamline tasks related to offboarding, compliance, and asset management, enabling both teams to focus on higher-value activities.
4. Prioritize ongoing education: Keep both teams informed about the latest cybersecurity threats, industry trends, and regulatory changes. This will enhance their collective knowledge and enable them to make informed decisions together.
5. Encourage continued learning and professional development: Support team members in acquiring certifications, attending conferences, and participating in relevant training programs. This will enhance their individual skills and contribute to the overall growth of the organization.

By implementing these measures, organizations can establish a strong partnership between their security and IT operations teams, creating a solid foundation for efficient and secure operations.