BrainBlog for Evolven by Eric Newcomer
This content is brought to you by Evolven. Evolven Change Analytics is a unique AIOps solution that tracks and analyzes all actual changes carried out in the enterprise cloud environment. Evolven helps leading enterprises cut the number of incidents, slash troubleshoot time, and eliminate unauthorized changes. Learn more
They say the only constant is change, but for IT the pace of change is not just constant: it’s constantly accelerating. This puts a ton of pressure on IT dev, sec, and ops teams because change is the primary cause of failure.
Business goals frequently conflict with security and risk mitigation controls, and it’s hard to maintain the balance between rapidly improving an app’s user experience and keeping systems compliant, available, and safe. The result is often security and compliance gaps, despite the best of intentions.
Compliance systems struggle to keep pace as more and more business and government services go online, and as more and more sensitive data is put at risk.
The need for security policy and procedures earlier in the development process – known as shift left – is no longer a desire but a must as enterprises balance agility with quality delivery and the ultimate user experience.
In the end, constant change and increasing complexity drive the need for updated security, risk, and compliance processes that can keep up, and not impede the inevitable march toward digital progress. Evolven’s framework meets this need.
The challenge of usability
Unlike internally focused IT systems for employees, it’s impossible to predict in advance how an external customer will respond to a user interface.
Best-in-class digital apps, such as you find in retail, push changes to production multiple times a day and rely on continuously collecting and analyzing user interactions and feedback to fix and improve the apps.
However, gathering feedback based on personal data for usability improvements can cross the line into privacy violations and can trigger a compliance review or legal action.
This use of personal data results in increased regulation, risk mitigation, and compliance with a range of legal and social requirements to protect such personal data and individual privacy, while keeping systems running 24×7.
The Evolven solution provides organizations with essential visibility into the ever-changing configuration state of its IT environment, showcasing risks, enabling necessary safeguards, and eliminating the fear of rapid change by providing the needed safety rails.
Modern compliance requirements are also changing rapidly
An increase in the number and scope of certification standards and regulations governing security controls and system configurations has been a natural result of the increasing digital presence in our lives.
Continuously emerging regulations and compliance frameworks such as CIS, PCI, NIST, OCC, and others, specifically identify change and configuration management requirements that IT teams must decide how to implement.
IT risk and compliance managers must therefore continuously monitor the impact of configuration change due to various external regulatory compliance mandates.
A good example is the recently-issued SEC mandate called “T+1” which requires financial institutions to settle trades within one day instead of the current two days – all by May 2024. This will greatly impact IT systems, including configuration, in order to achieve compliance.
Evolven provides a “single pane of glass” interface for IT, risk, and compliance management staff to assess the impact of such change and support the work of auditors.
Read the entire BrainBlog here.
