Suggestions
Christopher Meenan
VP, IBM Security Product Management
Christopher Meenan is the Vice President of Security Product Management at IBM, where he oversees the threat management portfolio, including key products such as QRadar SIEM, Log Manager, Risk Manager, and Vulnerability Manager. He has over 20 years of experience in the software industry, focusing on product development, marketing, and strategy within the cybersecurity domain.
Meenan holds a First Honours degree in Physics and a PhD in Telecommunications. His career at IBM began in 2010, and he has progressively taken on roles of increasing responsibility, including Director of IBM Security Product Management and Strategy prior to his current position. His extensive background includes managing significant product lines and contributing to the development of innovative cybersecurity solutions tailored for enterprise needs.1356
In recent discussions, Meenan has highlighted the evolving challenges faced by Security Operations Center (SOC) teams, particularly in the context of cloud migration and the increasing complexity of IT infrastructures. He emphasizes the role of artificial intelligence and open-source technologies in enhancing cybersecurity measures and improving operational efficiency.234
Highlights
While we still await a full RCA, there have been a lot of interesting perspectives on the root cause of crowdstrike issue over the last couple of days. One of these has been the event is a good data point as to why uber platforms are a bad idea due to wider potential blast area associated with a single vendor stack. That might be true, however just consider that if this issue is down to testing/qa processes the more moving 3rd party parts there are in a security eco system, the (significantly) more QA resource/time is required by vendors and customers to find and remediate issues. While there is always a case for more testing, ultimately economics and risk come into it, and tradeoffs will be made. Unified platforms help, because not only do they reduce the number of 3rd party moving parts, and thus permutations to be tested. They also enable a far higher degree of automation in QA also. Of course still down to the platform vendor to do this diligently but it's easier, cheaper and there is only on vendor to choke (ref also the debate MS vs CS accountability). Still lots of other good reasons for a multivendor vs single vendor/platform approach though.
Very excited about our new partnership with Palo Alto Networks to modernize security operations. Our vision for our customers is so well aligned around accelerating great security outcomes with a single cloud-native security operations platform (inclusive of SIEM, SOAR, EDR, CDR, TI, ASM) , powered by AI and Automation, with a unified analyst experience. The security analytics market is at an inflection point driven by AI and cloud, and through the combination of IBM and Palo Alto people and technology we can deliver phenomenal security to our customers at the scale and speed they need. Read about it here
