Mitigate Threats with Actionable Threat Intelligence Sharing

Cyware Situational Awareness Platform (CSAP) version 2.1 comes with a new ‘Action’ feature that allows users to create Actions from the CSAP web portal and assign it to other users within their organizations or their vendors, thereby kickstarting a collaboration-driven approach in countering threats.

The feature comes with the following capabilities:

Assign Actions directly from threat alerts: This feature can be used by:

Users in an Enterprise can assign Actions to themselves, other security teams in their organization, or to their vendors whom they share vulnerability or malware advisories with.
ISACs/ISAOs can suggest recommended Actions to member organizations, assisting them in taking quick remediation steps before they start their assessment and investigation.
MSSPs can assign Actions to their Clients or their internal response teams based on who handles the incident response.
CERTs can assign Actions to federal, state, local agencies, or their internal security teams on related threats

Manage daily security tasks with free-flowing Actions: CSAP users can now also create and assign independent, free-flowing actions that are not linked to any particular threat alert. The feature has been included in the latest release to streamline and standardize day-to-day mitigation tasks.

Track all Actions from a single-window web portal:CSAP version 2.1 allows web portal users to view and track all actions created by them, assigned to them or their recipient groups from a single dashboard.

Close Actions once mitigation is completed: The Action feature allows CSAP users to close Actions once the task is successfully completed.

Initiate discussions on Actions through integrated comment board: The Action feature comes integrated with a comment board where the CSAP Users from the assigned recipient groups can initiate discussions related to the threat and share progress updates.

Summary: The Action feature enables organizations to operationalize strategic threat intelligence sharing. With CSAP version 2.1, now organizations can move away from the slow, delayed, incomplete, and reactive strategies towards a proactive, efficient, streamlined, and result-oriented strategy.

INTERVIEW: A Q&A with Jason Keirstead

I started working deeply with technology in middle school, after we got our first PC. I think it was less than a year before I started learning about things like the open-source movement and had installed FreeBSD on it. While going through university, although I was trying to focus on programming, I still ended up with a number of internships in the networking and network security spaces as well as working in open-source communities like the KDE project. After I graduated, I joined a start-up called Q1 Labs that had a product in the network security space (that IBM ended up acquiring in 2011 after we had assumed a leadership position in the SIEM market). Over the two decades at Q1 Labs/IBM I had a number of different roles, from UI Architect, to product owner, to Chief Architect, eventually the CTO of Threat Management.