1. The State of Network Security 2012: Attitudes and Opinions

2. The network environment continues to grow in complexity as firewall policies expand over time and as new technologies such as next-generation firewalls are adopted. This survey analyzes network security risks and operational challenges of managing network security policies. Additionally, it gauges the effect of next- generation firewalls on ITs workload. Introduction 2

3. This survey was conducted at RSA 2012. 182 respondents are deeply involved in their organizations IT function and have at least a moderate involvement in network operations. 68 percent are Information Security professionals. 32 percent are Network Operations professionals. No AlgoSec employees, customers or partners are counted in the results. Methodology 3

4. Network security processes need improvement. From reducing system outages to improving business efficiency. Next-generation firewalls address threats - at a cost. Improved security, but increased administrative workload. Security is an inside job. Visibility of applications and networks, improving processes and defending against insider threats all rank as key concerns. Key Findings 4

5. The majority (55.6%) of top challenges lie with problematic internal processes. 5 Network Security Challenges

6. 77% of respondents noted that out-of-process changes caused either a system outage, a data breach an audit failure or more than one of these. 6 Out-of-Process Changes Cause Major Problems

7. 84% of respondents said NGFWs provided them with better security BUT… 7 Next-Generation Firewalls: Better Security…

8. 76% of respondents said that NGFWs increased their administrative burden due to added policy complexity 8 Next-Generation Firewalls: … at a Cost

9. External attackers are well down the list of concerns… The greatest risks noted are poor internal security management processes and insider threats 9 Greatest Risk? More Management than Malice

10. 10 Key Recommendations Clearly define internal processes, ensure they are communicated to all stakeholders and above all else, make sure they are enforceable. Leverage automation to facilitate process improvement and to improve business efficiency and agility. Look to implement NGFWs, but understand the impact of policy decisions and plan accordingly to gain the security benefits without the cost of higher administrative burden. Clearly define internal processes, ensure they are communicated to all stakeholders and above all else, make sure they are enforceable. Leverage automation to facilitate process improvement and to improve business efficiency and agility. Look to implement NGFWs, but understand the impact of policy decisions and plan accordingly to gain the security benefits without the cost of higher administrative burden.

11. Here are additional resources to help you further research automating network security policy optimization and change management: 11 Educational Resources Webinar: 5 Strategies to Improve Firewall Management eBook: The Big Collection of Firewall Management Tips Video Testimonial: BT Free 30 Day Trial of AlgoSec Security Management Suite Webinar: 5 Strategies to Improve Firewall Management eBook: The Big Collection of Firewall Management Tips Video Testimonial: BT Free 30 Day Trial of AlgoSec Security Management Suite

12. Security Management. Made Smarter. www.AlgoSec.com Connect with AlgoSec on: