CISOs and their teams are inundated with claims about how artificial intelligence will change the cybersecurity landscape, and there is certainly a lot of potential. Recent reports found that 95% of respondents view AI models as vital for the success of their business, and 55% of organizations plan to adopt GenAI solutions within the next year.

Ontinue announced it now offers Microsoft Copilot for Security Readiness workshops to help organizations understand how they can unlock the power of AI and get the most value from their Microsoft Security investments. 

Ontinue specializes in managed security operations tailored for Microsoft customers and its AI-powered MXDR service, ION, was built on the backbone of the Microsoft security and collaboration product portfolio. Ontinue aims to instill confidence in every organization by serving as an extension of their team, enhancing efficiencies, optimizing their investments, while strengthening their security postures. Earlier this year, Microsoft launched Microsoft Copilot for Security, a generative AI-powered assistant that empowers in-house security and IT teams to respond quickly to threats and upskill security practitioners. To help Microsoft Security customers understand how to get the most value out of Copilot for Security, Ontinue is offering Microsoft Copilot for Security Readiness workshops.  

“When an organization decides to implement AI-based technologies and services, most lack the expertise and therefore struggle to develop strategies and governance for the effective, safe implementation and usage of these offerings,” said Dave Gruber, Principal Analyst at ESG. “This is why finding the right Managed Security partner is so important, as they can help accelerate development and implementation of governance and security controls needed to ensure AI investments are secured and operationalized effectively.”  

The Microsoft Copilot for Security Readiness workshop is designed for Security Operations teams who are looking for guidance on implementing Copilot for Security securely and responsibly within their organization. The workshop offers:

• A definitive understanding of whether Copilot for Security is right for your organization 
• A solid understanding of how to use Copilot for Security to address your core use cases  
• Copilot for Security Ninja certification preparation for all workshop attendees
• A best-practice blueprint for the secure and responsible implementation of Copilot for Security

“Gen-AI is a key consideration for many organizations, and those already invested in Microsoft security are naturally intrigued by the potential benefits of Copilot for Security. At Ontinue, we see ourselves as an extension of our customers’ teams, and we’re happy to now offer this new workshop to help organizations maximize their security investments,” said Daniel Morris, Director of Consulting Services at Ontinue. “Copilot for Security makes in-house security teams faster and more efficient, and in conjunction with Ontinue’s ION MXDR service, we help organizations ensure around-the-clock protection while also increasing overall security program maturity, efficacy and scalability.” 

For more information about Ontinue’s Microsoft Copilot for Security Readiness workshops, including dates and registration information please visit the website here.

Related News:

Ontinue ION Managed Security Operations Service has New Capabilities

Security Incidents Spotted by Organizations in the Past Year, Up 68%

The post Microsoft Copilot for Security Readiness Workshops Offered by Ontinue appeared first on Digital IT News.

Organizations look to managed detection and response (MDR) providers to fully resolve incidents on their behalf and to do so with great speed and accuracy. This requires more than top-tier analysts; it also requires a high degree of automation. However, when MDR providers leverage automation, they are often limited in how much of the incident investigation and resolution process they can automate because they don’t have a detailed enough model of their customers environment and operational constraints, that automation can leverage. For instance, if an MDR provider detects lateral movement in an environment, but doesn’t know the role of the impacted assets or who is responsible for those assets, the customer is required to step in and continue the investigation and determine the correct response.

“We often hear from frustrated CISOs that their teams had to reinvestigate incidents that their managed security provider claims to have resolved,” said Geoff Haydon, CEO of Ontinue. “Since most MDR services are black boxes, even when they do act on behalf of customers, there’s no way for these teams to verify that the decisions and actions taken by their provider resulted in the right outcome.”

Fast, effective incident resolution demands the implementation of automation tailored to an organization’s unique environment and operational processes, coupled with complete transparency. Ontinue’s ION Managed Security Operations now includes advanced automation capabilities and greater visibility into what the service does on an organization’s behalf. These enhancements not only drive faster incident response, but also offload more of the burden from internal teams so they can refocus their efforts on other business priorities. These new capabilities strengthen existing SecOps workflows and instill deeper trust in Ontinue’s Managed Security Operations service by providing total transparency into how decisions were made.

The new capabilities offered within the Ontinue ION Managed Security Operations include:

· Smart Automation with ION Automate – Organizations can define Rules of Engagement and Escalation Matrices for incident management, considering operational factors like time of day, geography, and asset type or role, in addition to incident severity. ION Automate executes pre-authorized actions for incidents based on these rules. If needed, it can automatically escalate incidents to stakeholders for approval before acting. This integration streamlines incident response by minimizing manual intervention and ensuring efficient handling of security incidents. These smart automation capabilities will be deployed in a phased approach during Q2 of 2024.

· Enhanced Incident Summaries and Closure Comments using AI-generated insights — Any time Ontinue resolves an incident on behalf of customers or closes a ticket, an incident summary and closure comments is provided. With the new enhanced incident summaries and closure comments, Ontinue will use AI to generate these vital readouts for our Cyber Defenders to review before sending to customers. ION IQ, Ontinue’s proprietary AI, will comb through all the notes, impacted assets, and activities for a given incident – including the automated actions – and summarize them in n consistent and easy-to-read, detailed summary.

· Improved Transparency in the ION IQ Chatbot – The ION IQ Chatbot now provides a fast, simple way for customers to get insights about everything from incident trends to SecOps cost optimization guidance to security hardening recommendations. For example, customers can ask “Show Executed Query” to quickly receive the logic behind its responses. This heightened level of transparency fosters greater trust in the responses provided by the ION IQ Chatbot, and gives customers more confidence in their security operations.

“Setting their customers’ escalation policies, and action plans is a common onboarding activity that MDR providers perform. However, this onboarding needs to incorporate the nuances and operational complexities of each unique environment. If this is thought of as a one-time activity rather than something that needs to be regularly updated the outcome can be not ideal when the escalation process breaks down. Consistent reviews, coupled with data science and automation, can help customers get faster, more accurate and higher quality responses. Managed security providers who take a more proactive approach will be able to deliver a stronger security posture for their client, helping to build better trust in their security offering,” said Craig Robinson, Research Vice President, Security Services, IDC Research.

“CISOs are looking to resolve incidents faster, strengthen their security posture, and make their team’s job easier. To achieve these goals, you need not only expertise and the right tools, but also a deep understanding of the environment you’re protecting – something that many managed security providers lack,” said Tom Corn, CPO at Ontinue. “Ontinue has always made it a priority to build a deep understand of our customers’ environments, teams and operations. With smart automation, we have now turned this understanding into a machine-readable format that we can use to drive advanced automation. In the future, we apply AI to this data model to generate insights that will allow us to optimize security operations workflows even further for our customers.

Ontinue specializes in managed security operations tailored for Microsoft customers. Its approach combines 24/7 threat protection through a follow-the-sun Security Operation Centers with ION, an AI-powered platform. ION integrates AI, automation, and human expertise to optimize SecOps costs, leading to greater efficiencies, continuous protection, faster incident response times, and improved ROI for Microsoft investments. These new capabilities underscore Ontinue’s commitment to innovation and customer-centricity.

For more information about Ontinue’s ION managed security operations and its new capabilities, please visit the website here.

Related News:

Expel MDR for Kubernetes Advances Cloud Security

Vectra AI Launches 24×7 Open MXDR Services

The post Ontinue ION Managed Security Operations Service has New Capabilities appeared first on Digital IT News.