Bad actors go to great lengths to evade detection and gain access to your network. Once attackers establish a foothold on the endpoint, they can persist on the endpoint, even if some of the… Read more on Cisco Blogs

​

Bad actors go to great lengths to evade detection and gain access to your network. Once attackers establish a foothold on the endpoint, they can persist on the endpoint, even if some of the attacker’s artifacts are blocked by a security tool. Incident responders have long struggled to fully revert all persistent mechanisms, leading to reoccurring malware on the endpoints, with potential lateral movement and exfiltration to follow.

With the introduction of Remote Scripts powered by Orbital, a search and response feature of Cisco Secure Endpoint in either the Advantage or the Premier tier, incident responders can respond to sophisticated threats with minimal business disruption, and administrators can provide an overall safer and better user experience.

Remote scripts harness the power of Orbital Advanced Search capabilities, which provides hundreds of prepared queries curated by Cisco’s Talos threat intelligence group, allowing you to quickly run complex queries on any endpoint.

Consider the Talos Incident Response Trends Report for Q2 2023, which states the top persistence mechanism observed was the abuse of Windows Task Scheduler to create scheduled tasks, allowing adversaries to execute programs or commands at scheduled times or at system startup.

The release of Remote Scripts can help with exactly this kind of threat, by allowing you to eliminate persistent threats while avoiding business disruption. For instance, re-imaging an infected workstation takes time and costs organizations valuable resources; remote scripts provide granular response actions needed to eliminate persistence (such as removing scheduled Windows tasks) so that the endpoint can be brought back to a known good state.

Secure Endpoint and Remote Scripts stand above the rest of the pack

You don’t need to be a scripting expert to use this new feature. Remote Scripts offers a unique catalog-based approach curated by Talos, which makes scripting easy to use for every level of practitioner. Talos maintains a catalog of hundreds of script actions that are easy to choose from and can be run across multiple endpoints with a few clicks. Examples of catalog scripts include removing Windows start up items, terminating a process, or even mitigating a Windows Search Remote Code Execution Vulnerability (CVE-2023-36884).

For an experienced incident responder, there is freedom to run or schedule your own custom scripts, with minimal to no restrictions on what can be done. This approach allows incident responders to create sophisticated incident response (IR) playbooks and powerful automation workflows. Remote Scripts can be used in combination with Secure Endpoint’s isolation feature, which cuts off lateral movement and exfiltration by only allowing an endpoint to communicate with Secure Endpoint and blocking all other traffic. Remote Scripts can also be used in combination with Cisco’s XDR for extensive Security Orchestration, Automation, and Response (SOAR) workflows, allowing for much shorter incident response times.

Prevent and respond to attackers before they gain access or move laterally

The current threat landscape emboldens bad actors to use weapons that have a diverse set of capabilities to achieve their goals. With this new feature, Cisco provides a scripting environment that security operations centers (SOC) can use to craft countermeasures to respond to different actions based on the tactics, techniques, and procedures (TTP) associated to the malicious activity seen.

Remote Scripts reduces incident response times and allows the creation of countermeasures tailored to the specific endpoint ecosystem, based on the type of business the incident responder is acting upon. Having targeted countermeasures tied to response playbooks increase the probability of defeating the attacker’s operation.

Bad actors also frequently use tools that persist in the system and leverage remote desktop protocol (RDP) connections for lateral movement. Such attacks can be counteracted with Remote Scripts by executing a script to ‘Remove a Registry key’ or ‘Disable RDP’ for the suspicious machine, and shutdown the endpoint remotely until the it can be analyzed properly.

Remote Scripts delivers on Cisco Security Cloud drivers that focus on protecting security ecosystems

Organizations continue to migrate applications to the cloud, which has increased the number of targeted attacks on those devices and applications. This expanded threat landscape has added pressure on SOC analysts to monitor not only on-premises devices, but cloud stored devices and applications as well.

This feature enhancement to Secure Endpoint and our Security Cloud feature will provide practitioners the ability to:

Reduce friction by placing security closer to users, their data, and their applications — and simplify how they interact with all these things.
Improve visibility and threat protection with actionable insights across networks, clouds, endpoints, and applications to help SecOps teams hunt, investigate and remediate threats.
Provide single-pane-of-glass visibility, monitoring, and reporting: Unified management will enable policy to be set in one place and replicated to all networks, end points, and systems — even third-party.

Where to get Remote Scripts powered by Orbital?

Remote scripts are available if you currently have Cisco Secure Endpoint in either the Advantage or the Premier tier. If you do not currently have either of those packages, you can speak with your account representative to discuss the best option to upgrade your Cisco Secure Endpoint instance to gain access to this robust feature.

We’d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social!

Cisco Secure Social Channels

InstagramFacebookTwitterLinkedIn

  Remote Scripts powered by Orbital, a search and response feature of Cisco Secure Endpoint incident responders.  Read More Cisco Blogs 

In the rapidly evolving automotive landscape, vehicles are no longer just machines that move us from point A to point B; they have transformed into complex, interconnected systems on wheels. With this… Read more on Cisco Blogs

​

In the rapidly evolving automotive landscape, vehicles are no longer just machines that move us from point A to point B; they have transformed into complex, interconnected systems on wheels. With this transformation, API (Application Programming Interface) security has surged to the forefront of automotive design and engineering. APIs serve as critical gatekeepers, managing the flow of data between the vehicle’s Electronic Control Units (ECUs), external devices, and the cloud. But with great power comes great responsibility. If an API is compromised, the implications can range from privacy breaches to threats to passenger safety. Automotive API security, therefore, is not just a technological challenge, it’s a safety imperative. It’s a thrilling yet daunting frontier, where the lines between software engineering, cybersecurity, and automotive design blur, and where the stakes are high— ensuring the safe and secure transportation of millions, if not billions, of people around the world.

In parallel, the Internet of Vehicles (IoV) and Vehicle-to-Everything (V2X) continue to evolve. The IoV encompasses a range of technologies and applications, including connected cars with internet access, Vehicle-to-Vehicle (V2V) and Vehicle-to-Cloud (V2C) communication, autonomous vehicles, and advanced traffic management systems. The timeline for widespread adoption of these technologies is presently unclear and will depend on a variety of factors; however, adoption will likely be a gradual process.

Over time, the number of Electronic Control Units (ECUs) in vehicles has seen a significant increase, transforming modern vehicles into complex networks on wheels. This surge is attributed to advancements in vehicle technology and the increasing demand for innovative features. Today, luxury passenger vehicles may contain 100 or more ECUs. Another growing trend is the virtualization of ECUs, where a single physical ECU can run multiple virtual ECUs, each with its own operating system. This development is driven by the need for cost efficiency, consolidation, and the desire to isolate systems for safety and security purposes. For instance, a single ECU could host both an infotainment system running QNX and a telematics unit running on Linux.

ECUs run a variety of operating systems depending on the complexity of the tasks they perform. For tasks requiring real-time processing, such as engine control or ABS (anti-lock braking system) control, Real-Time Operating Systems (RTOS) built on AUTOSAR (Automotive Open System Architecture) standards are popular. These systems can handle strict timing constraints and guarantee the execution of tasks within a specific time frame. On the other hand, for infotainment systems and more complex systems requiring advanced user interfaces and connectivity, Linux-based operating systems like Automotive Grade Linux (AGL) or Android Automotive are common due to their flexibility, rich feature sets, and robust developer ecosystems. QNX, a commercial Unix-like real-time operating system, is also widely used in the automotive industry, notably for digital instrument clusters and infotainment systems due to its stability, reliability, and strong support for graphical interfaces.

The unique context of ECUs present several distinct challenges regarding API security. Unlike traditional IT systems, many ECUs have to function in a highly constrained environment with limited computational resources and power, and often have to adhere to strict real-time requirements. This can make it difficult to implement robust security mechanisms, such as strong encryption or complex authentication protocols, which are computationally intensive. Furthermore, ECUs need to communicate with each other and external devices or services securely. This often leads to compromises in vehicle network architecture where a highcomplexity ECU acts as an Internet gateway that provides desirable properties such as communications security. On the other hand, in-vehicle components situated behind the gateway may communicate using methods that lack privacy, authentication, or integrity.

Modern Vehicle Architecture

ECUs, or Electronic Control Units, are embedded systems in automotive electronics that control one or more of the electrical systems or subsystems in a vehicle. These can include systems related to engine control, transmission control, braking, power steering, and others. ECUs are responsible for receiving data from various sensors, processing this data, and triggering the appropriate response, such as adjusting engine timing or deploying airbags.

DCUs, or Domain Control Units, are a relatively new development in automotive electronics, driven by the increasing complexity and interconnectivity of modern vehicles. A DCU controls a domain, which is a group of functions in a vehicle, such as the drivetrain, body electronics, or infotainment system. A DCU integrates several functions that were previously managed by individual ECUs. A DCU collects, processes, and disseminates data within its domain, serving as a central hub.

The shift towards DCUs can reduce the number of separate ECUs required, simplifying vehicle architecture and improving efficiency. However, it also necessitates more powerful and sophisticated hardware and software, as the DCU needs to manage multiple complex functions concurrently. This centralization can also increase the potential impact of any failures or security breaches, underscoring the importance of robust design, testing, and security measures.

Direct internet connectivity is usually restricted to only one or two Electronic Control Units (ECUs). These ECUs are typically part of the infotainment system or the telematics control unit, which require internet access to function. The internet connection is shared among these systems and possibly extended to other ECUs. The remaining ECUs typically communicate via an internal network like the CAN (Controller Area Network) bus or automotive ethernet, without requiring direct internet access.

The increasing complexity of vehicle systems, the growing number of ECUs, and pressure to bring cutting edge consumer features to market have led to an explosion in the number of APIs that need to be secured. This complexity is compounded by the long lifecycle of vehicles, requiring security to be maintained and updated over a decade or more, often without the regular connectivity that traditional IT systems enjoy. Finally, the critical safety implications of many ECU functions mean that API security issues can have direct and severe consequences for vehicle operation and passenger safety.

ECUs interact with cloud-hosted APIs to enable a variety of functionalities, such as real-time traffic updates, streaming entertainment, finding suitable charging stations and service centers, over-the-air software updates, remote diagnostics, telematics, usage based insurance, and infotainment services.

Open Season

In the fall of 2022, security researchers discovered and disclosed vulnerabilities affecting the APIs of a number of leading car manufacturers. The researchers were able to remotely access and control vehicle functions, including locking and unlocking, starting and stopping the engine, honking the horn and flashing the headlights. They were also able to locate vehicles using just the vehicle identification number or an email address. Other vulnerabilities included being able to access internal applications and execute code, as well as perform account takeovers and access sensitive customer data.

The research is historically significant because security researches would traditionally avoid targeting production infrastructure without authorization (e.g., as part of a bug bounty program). Most researchers would also hesitate to make sweeping disclosures that do not pull punches, albeit responsibly. It seems the researchers were emboldened by recent revisions to the CFAA and this activity may represent a new era of Open Season Bug Hunting.

The revised CFAA, announced in May of 2022, directs that good-faith security research should not be prosecuted. Further, “Computer security research is a key driver of improved cybersecurity,” and “The department has never been interested in prosecuting good-faith computer security research as a crime, and today’s announcement promotes cybersecurity by providing clarity for good-faith security researchers who root out vulnerabilities for the common good.”

These vulnerability classes would not surprise your typical cybersecurity professional, they are fairly pedestrian. Anyone familiar with the OWASP API Security Project will recognize the core issues at play. What may be surprising is how prevalent they are across different automotive organizations. It can be tempting to chalk this up to a lack of awareness or poor development practices, but the root causes are likely much more nuanced and not at all obvious.

Root Causes

Despite the considerable experience and skills possessed by Automotive OEMs, basic API security mistakes can still occur. This might seem counterintuitive given the advanced technical aptitude of their developers and their awareness of the associated risks. However, it’s essential to understand that, in complex and rapidly evolving technological environments, errors can easily creep in. In the whirlwind of innovation, deadlines, and productivity pressures, even seasoned developers might overlook some aspects of API security. Such issues can be compounded by factors like communication gaps, unclear responsibilities, or simply human error.

Development at scale can significantly amplify the risks associated with API security. As organizations grow, different teams and individuals often work concurrently on various aspects of an application, which can lead to a lack of uniformity in implementing security standards. Miscommunication or confusion about roles and responsibilities can result in security loopholes. For instance, one team may assume that another is responsible for implementing authentication or input validation, leading to vulnerabilities. Additionally, the context of service exposure, whether on the public internet or within a Virtual Private Cloud (VPC), necessitates different security controls and considerations. Yet, these nuances can be overlooked in large-scale operations. Moreover, the modern shift towards microservices architecture can also introduce API security issues. While microservices provide flexibility and scalability, they also increase the number of inter-service communication points. If these communication points, or APIs, are not adequately secured, the system’s trust boundaries can be breached, leading to unauthorized access or data breaches.

Automotive supply chains are incredibly complex. This is a result of the intricate network of suppliers involved in providing components and supporting infrastructure to OEMs. OEMs typically rely on tier-1 suppliers, who directly provide major components or systems, such as engines, transmissions, or electronics. However, tier-1 suppliers themselves depend on tier-2 suppliers for a wide range of smaller components and subsystems. This multi-tiered structure is necessary to meet the diverse requirements of modern vehicles. Each tier-1 supplier may have numerous tier-2 suppliers, leading to a vast and interconnected web of suppliers. This complexity can make it difficult to manage the cybersecurity requirements of APIs.

While leading vehicle cybersecurity standards like ISO/SAE 21434, UN ECE R155 and R156 cover a wide range of aspects related to securing vehicles, they do not specifically provide comprehensive guidance on securing vehicle APIs. These standards primarily focus on broader cybersecurity principles, risk management, secure development practices, and vehicle-level security measures. The absence of specific guidance on securing vehicle APIs can potentially lead to the introduction of vulnerabilities in vehicle APIs, as the focus may primarily be on broader vehicle security aspects rather than the specific challenges associated with API integration and communication.

Things to Avoid

Darren Shelcusky of Ford Motor Company explains that while many approaches to API security exist, not all prove to be effective within the context of a large multinational manufacturing company. For instance, playing cybersecurity “whack-a-mole,” where individual security threats are addressed as they pop up, is far from optimal. It can lead to inconsistent security posture and might miss systemic issues. Similarly, the “monitor everything” strategy can drown the security team in data, leading to signal-to-noise issues and an overwhelming number of false positives, making it challenging to identify genuine threats. Relying solely on policies and standards for API security, while important, is not sufficient unless these guidelines are seamlessly integrated into the development pipelines and workflows, ensuring their consistent application.

A strictly top-down approach, with stringent rules and fear of reprisal for non-compliance, may indeed ensure adherence to security protocols. However, this could alienate employees, stifle creativity, and lose valuable lessons learned from the ground-up. Additionally, over-reliance on governance for API security can prove to be inflexible and often incompatible with agile development methodologies, hindering rapid adaptation to evolving threats. Thus, an effective API security strategy requires a balanced, comprehensive, and integrated approach, combining the strengths of various methods and adapting them to the organization’s specific needs and context.

Winning Strategies

Cloud Gateways

Today, Cloud API Gateways play a vital role in securing APIs, acting as a protective barrier and control point for API-based communication. These gateways manage and control traffic between applications and their back-end services, performing functions such as request routing, composition, and protocol translation. From a security perspective, API Gateways often handle important tasks such as authentication and authorization, ensuring that only legitimate users or services can access the APIs. They can implement various authentication protocols like OAuth, OpenID Connect, or JWT (JSON Web Tokens). They can enforce rate limiting and throttling policies to protect against Denial-of-Service (DoS) attacks or excessive usage. API Gateways also typically provide basic communications security, ensuring the confidentiality and integrity of API calls. They can help detect and block malicious requests, such as SQL injection or Cross-Site Scripting (XSS) attacks. By centralizing these security mechanisms in the gateway, organizations can ensure a consistent security posture across all their APIs.

Cloud API gateways also assist organizations with API management, inventory, and documentation. These gateways provide a centralized platform for managing and securing APIs, allowing organizations to enforce authentication, authorization, rate limiting, and other security measures. They offer features for tracking and maintaining an inventory of all hosted APIs, providing a comprehensive view of the API landscape and facilitating better control over security measures, monitoring, and updates. Additionally, cloud API gateways often include built-in tools for generating and hosting API documentation, ensuring that developers and consumers have access to up-to-date and comprehensive information about API functionality, inputs, outputs, and security requirements. Some notable examples of cloud API gateways include Amazon API Gateway, Google Cloud Endpoints, and Azure API Management.

Authentication

In best-case scenarios, vehicles and cloud services mutually authenticate each other using robust methods that include some combination of digital certificates, token-based authentication, or challenge-response mechanisms. In the worst-case, they don’t perform any authentication at all. Unfortunately, in many cases, vehicle APIs rely on weak authentication mechanisms, such as a serial number being used to identify the vehicle.

Certificates

In certificate-based authentication, the vehicle presents a unique digital certificate issued by a trusted Certificate Authority (CA) to verify its identity to the cloud service. While certificate-based authentication provides robust security, it does come with a few drawbacks. Firstly, certificate management can be complex and cumbersome, especially in large-scale environments like fleets of vehicles, as it involves issuing, renewing, and revoking certificates, often for thousands of devices. Finally, setting up a secure and trusted Certificate Authority (CA) to issue and validate certificates requires significant effort and expertise, and any compromise of the CA can have serious security implications.

Tokens

In token-based authentication, the vehicle includes a token (such as a JWT or OAuth token) in its requests once its identity has been confirmed by the cloud service. Token-based authentication, while beneficial in many ways, also comes with certain disadvantages. First, tokens, if not properly secured, can be intercepted during transmission or stolen from insecure storage, leading to unauthorized access. Second, tokens often have a set expiration time for security purposes, which means systems need to handle token refreshes, adding extra complexity. Lastly, token validation requires a connection to the authentication server, which could potentially impact system performance or lead to access issues if the server is unavailable or experiencing high traffic.

mTLS

For further security, these methods can be used in conjunction with Mutual TLS (mTLS) where both the client (vehicle) and server (cloud) authenticate each other. These authentication mechanisms ensure secure, identity-verified communication between the vehicle and the cloud, a crucial aspect of modern connected vehicle technology.

Challenge / Response

Challenge-response authentication mechanisms are best implemented with the aid of a Hardware Security Module (HSM). This approach provides notable advantages including heightened security: the HSM provides a secure, tamper-resistant environment for storing the vehicle’s private keys, drastically reducing the risk of key exposure. In addition, the HSM can perform cryptographic operations internally, adding another layer of security by ensuring sensitive data is never exposed. Sadly, there are also potential downsides to this approach. HSMs can increase complexity throughout the vehicle lifecycle. Furthermore, HSMs also have to be properly managed and updated, requiring additional resources. Lastly, in a scenario where the HSM malfunctions or fails, the vehicle may be unable to authenticate, potentially leading to loss of access to essential services.

Hybrid Approaches

Hybrid approaches to authentication can also be effective in securing vehicle-to-cloud communications. For instance, a server could verify the authenticity of the client’s JSON Web Token (JWT), ensuring the identity and claims of the client. Simultaneously, the client can verify the server’s TLS certificate, providing assurance that it’s communicating with the genuine server and not a malicious entity. This multi-layered approach strengthens the security of the communication channel.

Another example hybrid approach could leverage an HSM-based challenge-response mechanism combined with JWTs. Initially, the vehicle uses its HSM to securely generate a response to a challenge from the cloud server, providing a high level of assurance for the initial authentication process. Once the vehicle is authenticated, the server issues a JWT, which the vehicle can use for subsequent authentication requests. This token-based approach is lightweight and scalable, making it efficient for ongoing communications. The combination of the high-security HSM challenge-response with the efficient JWT mechanism provides both strong security and operational efficiency.

JWTs (JSON Web Tokens) are highly convenient when considering ECUs coming off the manufacturing production line. They provide a scalable and efficient method of assigning unique, verifiable identities to each ECU. Given that JWTs are lightweight and easily generated, they are particularly suitable for mass production environments. Furthermore, JWTs can be issued with specific expiration times, allowing for better management and control of ECU access to various services during initial testing, shipping, or post-manufacturing stages. This means ECUs can be configured with secure access controls right from the moment they leave the production line, streamlining the process of integrating these units into vehicles while maintaining high security standards.

Conclusion

The complexity of vehicle development underlines the importance of not just individual awareness, but also of robust organizational processes, clear guidelines, and continuous emphasis on security in every aspect of the development lifecycle. Cisco works with over 32,000 transportation organizations in 169 countries worldwide and has 25,000 patents in the transportation space. Cisco also partners with automotive OEMs to deliver unparalleled in-vehicle experiences like Webex in Audi Vehicles.

Cisco offers a range of offensive security services that can help automotive OEMs ensure the secure deployment of APIs. Services such as threat modeling and penetration testing involve simulating real-world attacks on APIs to identify vulnerabilities and weaknesses. Cisco’s offensive security experts use sophisticated techniques to evaluate the security of API implementations, assess potential risks, and provide actionable recommendations for mitigation. By proactively testing the security of APIs, organizations can identify and address vulnerabilities before they are exploited by malicious actors.

Cisco’s offensive security services help organizations strengthen their API security posture, enhance their overall cybersecurity defenses, and protect sensitive data and systems from potential breaches or unauthorized access.

  In the rapidly evolving automotive landscape, vehicles are no longer just machines that move us from point A to point B; they have transformed into complex, interconnected systems on wheels. With this transformation, API (Application Programming Interface) security has surged to the forefront of automotive design and engineering. APIs serve as critical gatekeepers, managing the flow of data between the vehicle's Electronic Control Units (ECUs), external devices, and the cloud. But with great power comes great responsibility. If an API is compromised, the implications can range from privacy breaches to threats to passenger safety. Automotive API security, therefore, is not just a technological challenge, it's a safety imperative. It's a thrilling yet daunting frontier, where the lines between software engineering, cybersecurity, and automotive design blur, and where the stakes are high— ensuring the safe and secure transportation of millions, if not billions, of people around the world.  Read More Cisco Blogs 

Telephony is a foundational capability for any healthcare organization. And while the primary purpose of telephony hasn’t changed in more than 100 years, the ways in which we enhance the connection h… Read more on Cisco Blogs

​

Telephony is a foundational capability for any healthcare organization. And while the primary purpose of telephony hasn’t changed in more than 100 years, the ways in which we enhance the connection has.

Telephony in healthcare has always been about connecting two people, for example patient and provider. But providing quality clinical care has moved beyond a simple phone call and writing notes on a clipboard.

Today, telephony in healthcare is about the entire platform that serves the patients’ and providers’ digital communication needs. Identifying and connecting the needs of the patient to the provider with context is critical to driving better patient engagement and care.

Integration drives significant impact

Digital transformation facilitates enhanced data collection and knowledge in the pursuit of better and more informed patient care. But the greater volume of information can pose a challenge for the workforce trying to manage the information and effectively use it in care delivery. Having multiple systems that a healthcare worker must interact with and transfer information to and from is already a burden.

That’s why it is critical for healthcare organizations to ensure that every new capability platform investment reduces the digital burden for the workforce, rather than adding to it.

The value of linking clinical systems with voice conversations is powerful. Adding context to a conversation helps drive purpose, moving the interaction beyond a call to an integrated and enhanced communication experience for both the patient and provider.

Imagine a patient and provider interaction that goes like this:

The provider can log into their digital patient record platform and place an audio or video call to the patient directly from within the clinical system. Because the clinical system is linked with the communication platform, the provider has patient information on hand, driving greater context within the conversation. Documentation in the clinical system post-call is easy, and the provider remains in the platform once the call has concluded, simplifying workflow.
The patient doesn’t get frustrated being redirected or reexplaining their concern or health history to provider after provider. The provider and patient can have an educated and informed conversation – which ultimately leads to better outcomes for the patient.

Strengthening the ability of your clinicians and support teams to communicate and collaborate with timely and relevant health information is critical to driving more effective workflow and better patient experience.

Cisco is well-positioned to cover the foundational and functional telephony needs within healthcare (through Webex Contact Center or Webex calling) but can also help organizations move beyond calling to an integrated communication platform through tools like Webex CPaaS, call escalation and Webex Instant Connect.

As you think about the way patients interact with your providers and providers interact with each other, it’s time to evaluate whether your communication platform is simply driving telephony or if it’s helping drive efficient, contextual connection.

  Is your communication platform simply driving telephony or is it helping drive efficient, contextual connection for patients and providers?  Read More Cisco Blogs 

What does revolutionizing applications really mean?

Revolutionizing your applications means many things to different people. It can mean moving the critical applications that support your business to… Read more on Cisco Blogs

​

What does revolutionizing applications really mean?

Revolutionizing your applications means many things to different people. It can mean moving the critical applications that support your business to the cloud so they’re scalable and less costly to support. It can mean creating flawless digital experiences for your customers so that they become brand loyal to your products and increase your net promoter score. It can mean relying on your applications to enable 24/7 business operations and form a robust, integrated automated machine that supports rapid business growth. Or in the case of Carhartt, it can be all of these.  

Applications are the front door to virtually every business and essential to driving revenue and business growth. Experience is a top priority and business KPI – customers need fantastic experience every time. But application environments are increasingly complex, rely on multiple clouds, and teams are siloed. And with sprawling monitoring tools that aren’t integrated, it’s difficult to identify, prioritize, and address issues. Seventy-five percent (75%) of technologists say they’re facing more IT complexity than ever before – without a way to cut through the noise and prioritize efforts.

Companies want to focus on what matters most – revenue, user experience, risk, and costs. In their journey to full-stack observability with Cisco, Carhartt has done exactly that. While this 134 years old company is steeped in the tradition of making premium workwear for hard-working people, they’re at the forefront of digital transformation for manufacturing, retail and e-commerce.  

Managing 24/7 business operations in the cloud

Carhartt runs many modern applications. One of their critical applications is SAP.  They use SAP to manage operations for everything from sewing workwear, to operating their distribution centers, to maintaining their 24/7 global e-commerce site. Moving to the cloud gave Carhartt improved availability along with flexibility, scalability, and reliability required by their 24/7 business operations. And by migrating applications to the cloud, they could move investment from data centers, hardware, and staff to build and run them – to opening new retail stores and innovating with new B2B business models.   

On November 16th, Ronak Desai, Senior Vice President and GM of Cisco AppDynamics and Full-Stack Observability will join Katrina Agusti, Chief Information Officer of Carhartt on LinkedIn Live to talk about Carhartt’s journey with Cisco FSO solutions and how they’ve enabled them to drive their digital transformation and operational excellence which provided the foundation for driving their business growth – even during the pandemic. During this conversation you’ll learn: 

How and why Carhartt moved 96% of their operations to the cloud 
How Carhartt uses Cisco FSO solutions to manage multi-cloud environment  
How Carhartt uses FSO to monitor their 24/7 business operations because there’s no time for downtime  
How customer experience is tantamount to Carhartt’s exponential growth 
How focusing on the performance and visibility of their business-critical applications drove their rapid growth  

We’re looking forward to this conversation that will connect the dots on how reimagining your applications with Cisco Full-Stack Observability solutions enables operational excellence that drives impactful business results.  

Sign up for the November 16th LinkedIn Live here. 

  Revolutionizing your applications can mean different things to different people. Learn from Carhartt's CIO about migrating business operations to the cloud, delivering great customer experiences and driving business growth with the help of Cisco Full-Stack Observability.  Read More Cisco Blogs 

Andrew: Cisco has made sustainability a priority for many years, and we recently launched Cisco’s next generation environmental sustainability strategy. As a part of that, we have also set a goal to r… Read more on Cisco Blogs

​

Andrew: Cisco has made sustainability a priority for many years, and we recently launched Cisco’s next generation environmental sustainability strategy. As a part of that, we have also set a goal to reach net-zero greenhouse gas (GHG) emissions across our value chain by 2040. And now our customers are increasingly making it a priority. In fact, as we announced in June in a keynote in Las Vegas, sustainability is now among the company’s top five customer priorities. This was also reflected in last year’s elevation of sustainability to a senior leadership role at Cisco, with Mary de Wysocki named the company’s first chief sustainability officer (CSO). Furthermore, over two years, there has been a three-fold increase across industries in CSOs.

I am here with Denise Lee, Vice President of the Cisco Engineering Sustainability Office (ESO) to share with you why this should also be a priority for you, our Cisco Partners. Denise, can you share with us what is driving this to Board Room discussions and to the C-Suite?

Denise: Sure, there are key drivers in play that are making sustainability in solutions and business models a priority for our customers.

First, stakeholder demands are rapidly increasing. To cite an example, reporting requirements continue to evolve rapidly; we’re seeing some investment analysts preferentially rate the stocks of companies that prioritize compliance with them.  Second, the cost savings from reducing energy consumption are driving customers to build sustainability in business models, and to prioritize investment in modernizing their IT infrastructure. When we think of how much we are paying per kilowatt hour of energy consumed and the fact that, for example, the price has tripled in the United Kingdom in the past year, imagine what that means for businesses, data centers and driving energy efficiency on the campus. Many customers have set sustainability goals, but few have operationalized their plans. They are looking for help.

Andrew: My entire time at Cisco, we have talked about opening doors to new lines of business, talking to someone outside of IT. Interestingly, talking sustainability can help you to do just that with those CSOs, heads of facilities, and other C-Suite members.

Denise:  Governments around the world are setting aside large amounts of public funding to support customers’ key IT initiatives, particularly in the areas of community development, digital transformation, emerging technologies, and sustainability. Cisco estimates a $44B USD opportunity globally over the next 3 years, based on last day of service (LDOS) information, for customers to refresh and modernize their current install base to new Cisco solutions built with sustainability in mind.[1]

Andrew: That spells an enormous opportunity for you, our partners. And Cisco can arm you with the tools and the training to start having those conversations with your customers. Your first step will be to get your Cisco Environmental Sustainability Specialization (ESS). The ESS will equip you with the information you need to educate your customers on the benefits of migrating to cloud-enabled solutions while updating used technologies. You will also be able to share with customers the impact they can have on the environment by participating in circular economy programs.

Once accredited with the ESS, if residing in one of the participating countries, you are eligible to participate in Cisco’s Takeback Incentive. The Incentive offers incremental discounts of up to seven percent on new products registered as part of Takeback Incentive deals on refresh or migration opportunities. By replacing used hardware with new, energy-efficient Cisco equipment, customers can reduce their carbon footprint.  Partners can then take advantage of Cisco’s free takeback services, so the used hardware can be responsibly recycled or repurposed.

Finally, take advantage of the Cisco Black Belt Academy Sustainability training. This will provide the skills and knowledge to work with your customers to build sustainability in data centers and smart buildings that can reduce and optimize energy consumption.

Denise: There is so much more!  Join Andrew and me at Cisco Partner Summit 2023 this November in-person in Miami Beach or via the Cisco Partner Summit Live Digital Broadcast to learn more about how you can build your sustainability practice and support increased profitability at the same time. We will share new sustainability program initiatives and showcase Cisco customer sustainability stories and our Cisco Innovation Challenge Sustainability winners!

Register for session BIS10: Grow with Green – Sustainability as a Competitive Differentiator today.  We are looking forward to seeing you there and online!

Register for the Cisco Partner Summit 2023 Live Digital Broadcast here!

[1] Based on Cisco Ready Data, Last Day of Support (LDoS) FY24-26, as of June 13, 2023. Includes hardware, software and services spending for selected sub-use cases directly driving sustainability outcomes in targeted area.

We’d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with #CiscoPartners on social!

Cisco Partners Facebook  |  @CiscoPartners Twitter  |  Cisco Partners LinkedIn

  Cisco has made sustainability a priority for many years, and we recently launched Cisco’s next generation environmental sustainability strategy. As a part of that, we have also set a goal to reach net-zero greenhouse gas (GHG) emissions across our value chain by 2040.  Read More Cisco Blogs 

Leaders at most modern organizations would readily agree that data is critical to today’s digital-first businesses. Maybe that’s why there are so many metaphors about data with comparisons to oil and … Read more on Cisco Blogs

​

Leaders at most modern organizations would readily agree that data is critical to today’s digital-first businesses. Maybe that’s why there are so many metaphors about data with comparisons to oil and currency—it’s even described as a lifeblood.

However, the most useful metaphor of all might be seeing data as a key. One that unlocks insights businesses can use to improve customer experience, reduce sales friction, and promote brand loyalty in a hypercompetitive landscape.

Data is so vital, you might think that the adoption of technologies and processes that can help protect, monitor, and detect possible threats—and also be able to recover it from catastrophic events—would be a priority. But according to the latest Cisco Cybersecurity Readiness Index, many companies believe they are falling woefully short of the mark. Consider these stats:

Almost 60% of companies surveyed said they had experienced some kind of cybersecurity incident, such as a ransomware attack, in the last 12 months. The incidents cost at least US$100,000 for 71% of organizations affected, with 41% saying the overall cost was US$500,000 or more.
Just 15% of organizations globally deem themselves to have a mature level of preparedness to handle the security risks of a hybrid and multicloud world, while 47% of organizations fall in the formative category, the lowest level of preparedness.

FlexPod cybersecure architecture

To help our customers build and deploy a robust and secure infrastructure, Cisco and NetApp partnered to develop the FlexPod cybersecure architecture to protect apps and data from unauthorized access, detect threats early to keep data safe, and recover data quickly to reduce downtime. Existing FlexPod customers can use this reference architecture to strengthen the security of their FlexPod infrastructures. New FlexPod customers can deploy a more secure solution immediately.

This is the latest achievement that builds on the decade-plus success of Cisco and NetApp delivering compelling innovations for converged infrastructure. This is a validated approach (see below) for deploying tightly integrated compute, networking, storage, and management technologies from Cisco and NetApp for hybrid and multicloud environments.

The latest generation of FlexPod is powered by Cisco Unified Computing System (UCS) servers, including the award-winning Cisco UCS X-Series Modular System. The server is managed by Cisco Intersight, which enables IT leaders to easily adapt to the unpredictable needs of modern applications. Combined with NetApp innovations, the FlexPod cybersecure architecture empowers organizations with a strong foundation to maintain the integrity, confidentiality, and availability of their apps and data, ensuring long-term success and resilience in an ever-changing cybersecurity landscape. This proactive approach is further defined by the three cybersecurity pillars of protect, detect, and recover. Here is a brief technical overview:

Protect

Applies a holistic approach to safeguarding systems, management, data, and applications via a zero-trust model and architecture. This includes:

Built-in security at the server hardware level (such as secure boot and anti-counterfeit protection) to prevent attackers from gaining access to the platform, installing malicious code, and exploiting data
Hardening of devices, logic, and information—including Cisco’s industry-leading firewall protection
Secure microsegmentation across networks, servers, and storage into smaller, isolated zones to limit lateral movement of threats
Multifactor authentication to verify users and devices before granting access
The power and flexibility of a SaaS operations platform to manage assets and users from anywhere
A validated FlexPod foundation with a growing portfolio of tested, documented, and secure solutions

Detect

Quickly detects, analyzes, and responds to threats, preventing loss and corruption of data via:

Integration with security information and event management (SIEM) platforms like Splunk through the Intersight API for advanced incident analysis and response
End-to-end FlexPod security with threat visibility across the entire network, compute, and storage platforms through extended detection and response (XDR) technology
Preemptive risk mitigation through comprehensive analysis of telemetry data with immediate notification of potential security issues and infrastructure vulnerabilities
Machine learning to automatically discover, classify, catalog, and securely retain data and apps to simplify data governance
Continuity of service from first call to resolution from an architecture expert who is accountable for your case, no matter where the issue resides

Recover

Swiftly addresses data protection and recovery in the unlikely event of data breaches and ransomware attacks. User access is quickly blocked upon detecting anomalies, with detailed forensic analysis conducted for future prevention. With policy-based server profiles and data recovery capabilities, FlexPod can restore an environment in minutes to ensure a fast resumption of operations, mitigating the cost of downtime through:

Stateless server architecture with policy-based profiles enabling rapid configuration of servers and restoration of virtual machines (VMs) to accelerate recovery and meet service level agreements
Immutable copies that can be used for secure data retention and as a logical air gap for quick recovery from ransomware
Reduction of backup windows by combining space-efficient snapshot technology with block-based data replication

 Cisco Validated Design for FlexPod

We are diligently working on our latest Cisco Validated Design (CVD), which will show customers how to confidently deploy a FlexPod cybersecure architecture for their specific environments. We stand behind every FlexPod solution with our experience, resources, and technical expertise to deliver full solution support to our customers. We are excited to be incorporating many technical design elements into this CVD, such as the following:

Secure segmentation

Enables segmentation by tenants (such as application tiers, business units, and managed services) through virtual routing and forwarding (VRF) and virtual LAN concepts within Cisco Nexus switches and Cisco Unified Computing System (UCS) servers—and further protection using Cisco Secure Firewall. The goal is to provide better control and protection of external (“north-south”) traffic among tenants.

Secure workload

For additional protection of internal lateral traffic within a data center (“east-west” traffic), the CVD will leverage workload security through microsegmentation, proactive identification of security incidents using behavior analysis, and reduction of the attack surface by identifying software-related vulnerabilities.

Secure analytics

Addressing the concept that you can’t protect what you can’t see, the CVD will use analytical tools and concepts like NetFlow and logs at various points in the network to create a baseline to detect and root out anomalous actions.

Ransomware protection

Malicious security attacks via ransomware already cost companies billions of dollars a year to recover their data. Cisco and NetApp are planning to integrate our respective ransomware protection capabilities, which will be available through a joint external data representation (XDR) solution.

Learn more at NetApp INSIGHT 2023

More information about the FlexPod cybersecurity architecture will be available at the NetApp INSIGHT 2023 event in Las Vegas. Featured sessions include:

Simplify your infrastructure and ops with Cisco computeSimplify your infrastructure and ops with Cisco compute
Protect your apps and data with FlexPod security framework

We hope to see you there.

Read more about FlexPod and Cisco at NetApp INSIGHT 

  FlexPod provides a secure IT infrastructure to protect apps and data from unauthorized access, detect threats early to keep data safe, and recover data quickly to eliminate downtime.  Read More Cisco Blogs 

Free training. Live webinars. Brand-new tutorials. A tech learning experience, unlike anything you’ve seen. Updated Cisco Security certification blueprints. All-new Cisco Multicloud Specialist… Read more on Cisco Blogs

​

Free training. Live webinars. Brand-new tutorials. A tech learning experience, unlike anything you’ve seen. Updated Cisco Security certification blueprints. All-new Cisco Multicloud Specialist Certifications. Sure, I’m probably biased (since I’m part of the marketing team behind the scenes), but you’ll be hard-pressed to find tech learning offers more exciting than those from Cisco Learning & Certifications—especially during Cybersecurity Awareness Month.

This year’s Cybersecurity Awareness Month has been our busiest one yet, with more offers and more opportunities than ever before. If you haven’t had the chance to indulge just yet, there is still time to refresh your knowledge and build new skills to combat the ever-increasing threat of cyber attacks. Here’s a quick rundown of what you need to know to rev up for the last lap of Cybersecurity Awareness Month. Now, get on track and finish the month strong.

Let’s do this!

Enter to win a free Cisco training and certification exam voucher bundle —OR— Cisco U. Essentials subscription (1-year)

Enter the Cisco CyberOps and Security Training Giveaway by November 15, 2023. If you have been a member of the #CiscoCert community for a while now, then you might recognize this classic. However, this year’s giveaway arrives with a new prize option. Now until November 15, 2023, you can enter the drawing for your chance to win the prize of your choice (one of the following four options).

All you need to do is complete the form on this page and confirm your submission via email, and you could be one of the five lucky winners revealed on November 16, 2023.

CyberOps and Security Training Giveaway

Prize options:

CBROPS E-Learning and Exam Bundle   

CBRCOR E-Learning and Exam Bundle   

SCOR E-Learning and Exam Bundle  

Cisco U. Essential Subscription  

Enter to win the Cisco CyberOps and Security Training Giveaway now!

Once you enter the giveaway, you will receive an email to confirm your entry. If your giveaway submission is not confirmed, you will NOT be entered into the drawing. 

Prep for the CyberOps Associate certification and earn 30 Continuing Education (CE) credits for free

If you are actively Cisco Certified and you don’t know about our Rev Up to Recert program, you are truly missing out. Rev Up to Recert is a free way that you can learn and earn CE credits towards recertifying your Cisco certifications. Rev Up to Recert is dynamic, which means we update the program with specific (free) learning activities based on the tech skills in top demand. In the spirit of Cybersecurity Awareness Month, coupled with the global shortage of IT security expertise, we decided to open up a new chapter: Rev Up to Recert: CyberOps Associate.

Prep for CyberOps Associate certification and earn 30 CE credits—

—free during Rev Up to Recert: CyberOps Associate.

Available until November 17, 2023. Get started now.

If you haven’t already, you’ll need to sign up for a Cisco U. account. Cisco U. is a hyperfocused, personalized learning experience with courses, community, and content for certifications, skills, and job roles. Stop by our Cisco U. Training Playlist on YouTube for short videos designed to help you get familiar, get up to speed, and get to the good stuff: the learning.

About the Rev Up to Recert: CyberOps Associate program

Now until November 17, 2023, everyone gets free access to the CyberOps Associate Learning Path in Cisco U. — regardless of whether you are actively Cisco Certified (you just won’t earn CE credits because, well,  you won’t have a Cisco certification to apply them to).

4 big reasons why Rev Up to Recert: CyberOps Associate is extra special:

You learn real-world skills for one of the most critical hiring areas worldwide. The CyberOps Associate Learning Path prepares you for the front line of defense in a Security Operations Center (SOC). You’ll learn security concepts, common network and application operations and attacks, and the types of data needed to investigate security incidents.
You can earn 30 CE credits for free—which means you also recertify your Associate-level certifications (for free). If you currently have the CCNA, DevNet Associate, or CyberOps Associate certification, you will be able to fulfill your recertification requirement.
You will be ready to earn the Cisco Certified CyberOps Associate certification. The CyberOps Associate Learning Path is designed to guide you all the way through to CyberOps Associate certification. By the end of the Learning Path, you will have completed the knowledge checkpoints you need prior to taking the CyberOps Associate certification exam. Now, whether you’re actually ready or not, well, that’s up to you. Luckily, the Learning Path includes a post-skills assessment to help you determine if you’re exam-ready.
25% off your CyberOps Associate exam. If you finish the Learning Path by November 17, 2023, you will receive a 25% discount on your CyberOps Associate (200-201 CBROPS) Understanding Cisco Cybersecurity Operations Fundamentals exam! That’s the only thing that stands between you and CyberOps Associate certification.

Earning CE credits for free: What you need to know

Make sure you are eligible to earn the 30 CE credits for free. Before you submit your claim for approval, you must:

be actively Cisco Certified.
have completed the CyberOps Associate Learning Path by November 17, 2023.
score 80% or above on your skills assessment taken at the end of the Learning Path.
submit your claim to the CE Portal before November 30, 2023, at 11:59 p.m. Pacific Time.

If you don’t finish the Learning Path by November 17, 2023, you can still finish it and earn 30 CE credits. But here’s the catch: going that route will require a Cisco U. Essentials or Cisco U. All Access subscription.

Rev Up to Recert Community

One of the easiest ways to keep up with the latest Rev Up to Recert program updates is by following the Rev Up to Recert Community on the Cisco Learning Network. If you have questions about the program, need advice from others, or just want to share how much you love ‘revving up’ for free, that’s the place to be.

Find your people, learn together, win together. Jump straight to the Rev Up to Recert – CyberOps Associate discussion here.

Why you need to take cybersecurity action—all year long

Everything we do—from our connections to our clicks, must consider security first. But if the network is not secure, we have no chance. If tools and technologies are not rigorously tested for vulnerabilities throughout lifecycles, we have no chance. And if network professionals are behind on the best practices and skills to defend, protect, and prevent cyber threats, we really have no chance.

In the last decade, cybersecurity job openings have grown by 350%.  As of 2023, 3.5 million cybersecurity jobs worldwide remain vacant. — Cybersecurity Ventures

As an IT professional, you have a significant role to play in ensuring that the networks that keep us connected are secure. No matter where your tech career is headed, cybersecurity knowledge is essential to get there. Take advantage of these exclusive, limited-time offers all month long and take cybersecurity action. Whether you’re actively Cisco Certified or preparing for your first SOC role, these offers will help you build new skills and knowledge to combat the ever-increasing threat of cyber attacks. Remember, security is everyone’s responsibility, and together we can make the digital world a safer place. Take cybersecurity action and protect our organizations now—and into the future— by building and maintaining your cybersecurity skills.

Cyber threats are constantly evolving.

Stay ahead of the curve, and you can become your organization’s greatest security asset.

Explore Cisco CyberOps and Security Certifications now.

Read next: “New Cybersecurity and Cloud Skills to Protect Companies from Cybersecurity Attacks of the Future” by Par Merat, VP of Learning & Certifications. Read now.

Sign up for Cisco U.  Join the Cisco Learning Network.

Follow Cisco Learning & Certifications

Twitter 

In its August 10, 2023, Notice of Proposed Rulemaking (NPRM) on Cybersecurity Labeling for Internet of Things (IoT), the Federal Communications Commission (FCC) asked some intriguing questions about… Read more on Cisco Blogs

​

In its August 10, 2023, Notice of Proposed Rulemaking (NPRM) on Cybersecurity Labeling for Internet of Things (IoT), the Federal Communications Commission (FCC) asked some intriguing questions about how to improve consumer confidence and understanding of the security of IoT devices. The NPRM seeks input on whether and how the FCC should establish a cybersecurity certification and labeling program. According to the NPRM, more than 25 billion connected IoT devices are predicted to be in operation by 2030, including everything from home office routers to personal digital assistants, Internet-connected home security cameras, voice-activated shopping devices, Internet-connected appliances, fitness trackers, GPS trackers, medical devices, garage door openers, and baby monitors. We are all using more of these than we realize.

The FCC’s program is intended to inform consumers about the cybersecurity qualities of the IoT products in the marketplace. In many cases, devices that do not have a good cybersecurity posture are a threat to their owners and others on the network. Cisco established Product Security Incident Response Team (PSIRT) decades ago to protect customers for this very reason, and it is one of the reasons why it is so important to keep software up to date.

As the FCC considers a potential labeling program, we think that there are two critical factors that will determine its success:

A cybersecurity label must demonstrate to the consumer that meaningful measures are being taken by the manufacturer to protect the consumer. This includes providing timely software updates for the supported lifetime of the device, using industry best practices for secure development, and safe operational and manufacturing practices. A cybersecurity label should not be an afterthought.
Consumers must be alerted when a device becomes insecure. For that to happen, automation is required, and the label must be electronically available to that automation. Do you go around the house to check the cybersecurity of all your devices? No? Neither does anyone else. In as much as it is a problem for consumers who may have over 100 devices within their home networks, enterprises, schools, governments, and manufacturers already have tens of thousands of such devices. In these environments, automation is not just an innovative idea. It is essential.

We understand that this is no small task, but we believe that it is the right thing to do – both for the consumer and everyone else. Why should enterprise customers care? What happens in the consumer household does not stay in the household.

Our engineers have worked on this specific issue with the National Institute for Standards and Technology (NIST) and other stakeholders for many years to develop a way to do this that will yield positive results for all players in the IoT landscape. Cisco hopes that it can work with the FCC and other government agencies, industry, and consumers to discuss this issue and to make real progress to build trust and further strengthen the network we all rely on to live, work, and play in today’s interconnected world.

  In its August 10, 2023, Notice of Proposed Rulemaking (NPRM) on Cybersecurity Labeling for Internet of Things (IoT), the Federal Communications Commission (FCC) asked some intriguing questions about how to improve consumer confidence and understanding of the security of IoT devices. The NPRM seeks input on whether and how the FCC should establish a cybersecurity  Read More Cisco Blogs 

The security industry has a long history of innovation and stewardship in technology. However, every time there is a new security problem, a new product arrives on the market to address that specific… Read more on Cisco Blogs

​

The security industry has a long history of innovation and stewardship in technology. However, every time there is a new security problem, a new product arrives on the market to address that specific issue. While these products can be good, they have led to an over-proliferation of point products that don’t completely solve customer needs. They also add costs and complexity.

Moreover, with an ever-increasing number of remote and frontline workers, and more workloads distributed across public clouds and private datacenters, tool and vendor sprawl are getting worse.

To say tool proliferation is a challenge is an understatement. In 2020, enterprise customers on average used 76 security tools. Unsurprisingly, according to Gartner, 75% of organizations are looking to consolidate vendors. That is a jump of 29% in just three years.

This puts much of a burden on the customer to onboard new vendors, adopt multiple tools, and manage solutions that don’t work all that well together and don’t materially improve security.

Raising the bar for security in a thoughtful way

This is where Cisco comes in. We have the network, infrastructure, and experience to make sure organizations are protected from attacks.

We see 550 billion security events, and 2.8 million new samples of malware per day, and discover over 200 vulnerabilities per year. To put this in perspective, this is more than 1 vulnerability for every working day. The scale and depth of these learnings accelerate our ability to find vulnerabilities and help get them fixed before they are exploited.​

We also benefit from this experience by learning more from bad actor’s techniques, and enhancing our security protocols, all without getting in the way of our customer’s business operations. ​

This experience and insights into vulnerabilities help us stay ahead of attackers, adjusting protection when needed to protect our customers. Think of it as a see once, block everywhere approach.

Our vision at Cisco is to bring these capabilities to life with a security platform that we call the Cisco Security Cloud. This cloud-based platform is designed to close the gaps by integrating solutions to achieve a pervasive defense across your entire ecosystem – from the data center, cloud, and edge. Cisco Security Cloud helps unify platforms and solutions that customers rely on to run their business, reducing costs, complexity and improving efficacy.

Cisco Security Cloud helps companies secure their networks in a simple, unified way, with security and operational resilience at the core. Since we know every customer’s journey is different, the platform is designed to be flexible, extensible, and ready to meet each organization where they are.

Simplifying the chaos with outcome-based approaches

Cisco is committed to reducing the complexity of security solutions while continuing to improve our customers’ security posture. We believe security should be reliable, friction free, and easy to buy. The Cisco Security portfolio is powered by Artificial Intelligence (AI) and delivered though the Cisco Security Cloud.

Centered around three use cases, the Cisco Security portfolio is aligning to a suite of products designed to improve security efficacy, enhance the user experience, and boost return on investment. Embedded with zero trust principles throughout, Cisco Security puts the user first without sacrificing protection. Here’s how:

User Protection

User Protection by Cisco is designed to empower users to do their best work securely from anywhere, so organizations can protect what’s now and what’s next, while increasing operational efficiency with better visibility and control. With seamless, fast connections for end users, and a consolidated set of security tools for IT, User Protection delivers advanced frictionless security for everyone.

With User Protection, users gain more productive work experience with seamless access to SaaS (Software as a Service) and private applications, communication tools, and other business resources. This helps protect frequently targeted end users from attacks like phishing, malware, credential compromise, and ransomware.

Cloud Protection

Most organizations deploy applications in multiple on-premises data centers, more colocation provider locations, infrastructure-as-a-service (IaaS) and platform-as-a-service (PaaS) providers – and this can lead to daunting complexity. With Cloud Protection by Cisco, organizations get complete ground-to-cloud protection across hybrid and multicloud environments that consolidates control points, delivers pervasive visibility, and reduces risk.

Within a dynamic framework that works for what’s on-premises and in-cloud, Cloud Protection delivers actionable intelligence to help customers achieve stronger efficacy while continually improving their security posture by reducing attack surfaces and protecting all applications and workloads.

Breach Protection

Threats are not only becoming more prevalent, but they are also becoming increasingly complex. With Breach Protection by Cisco, businesses can address sophisticated threats by accelerating responses and simplifying experiences with data-backed and AI-powered protection. They can gain unified visibility and control across email, endpoints, network, and cloud environments to enhance threat detection and streamline security operations.

Powered by an award-winning security portfolio and integrated with select third-party cybersecurity solutions, Breach Protection empowers SOC (Security Operations Centers) analysts to quickly detect and respond to advanced threats like ransomware, insider threats, unknown malware, and data exfiltration.

Easy to buy, easy to use

All three of the previously mentioned offers are easy to buy and have consistent pricing and licensing. Each one has a unique, consistent, and predictable meter, so every customer can plan and budget according to their specific needs. This removes the complexity of too many price points, too many SLAs and unpredictable licensing.

In addition to the elimination of price complexity, User Protection, Cloud Protection, and Breach Protection offer easy provisioning, and work with a single sign-on and identity access management, further removing administrative and deployment hurdles.

Lastly, with Cisco, customers have a trusted partner to ensure they don’t go through their security journey alone. Each of the three protection offers are supported by our services organization, which provides customers with the support necessary to plan deployment, streamline adoption, and reduce time to value. With Cisco Services customers can integrate modern technology into their current IT environment and optimize usage. Customers can also benefit from proactively updating software, and maintaining performance by predicting, preventing, or recovering from issues.

Interested in learning more? Join us on Tuesday, October 31st to hear security experts discuss ways you can get better efficacy, experiences, and economics. Be the first to know about the latest in ground-to-cloud protection. Save your spot today.

We’d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social!

Cisco Secure Social Channels

InstagramFacebookTwitterLinkedIn

  Centered around three use cases, the Cisco Security portfolio aligns to a suite of products designed to improve security efficacy, user experience, and ROI.  Read More Cisco Blogs 

Do you feel a bit lost when people refer to certain environmental sustainability topics and aren’t sure where to start when it comes to learning more? Sustainability 101 is a blog series that you can … Read more on Cisco Blogs

​

Do you feel a bit lost when people refer to certain environmental sustainability topics and aren’t sure where to start when it comes to learning more? Sustainability 101 is a blog series that you can turn to for information about different environmental terms that may come up at work, during discussions with friends, and even at your annual holiday gathering.

Much of the climate change conversation is focused on the impacts of actions we take every day — choosing vehicles that run on low-carbon electricity or green hydrogen instead of gasoline or diesel, shifting to electricity from less emissions-intensive sources, or using products made of recycled content and/or that are recyclable.

However, shifting to products and services that generate lower emissions while they are in use tackles only part of the greenhouse gas (GHG) emissions puzzle — what’s referred to as operational emissions. The other part of the equation — and one that Cisco has also been working to reduce through how we design, manufacture, ship and manage our products at end of life — is what’s referred to as embodied emissions. 

Embodied emissions are the GHG emissions generated when manufacturing a product (or the components that go into a product), when transporting it and when it is treated at the end of its useful life. These emissions are already part of it before you buy and/or use it [1].

A key focus area for many technology companies is to address the operational emissions of devices in use today by improving the energy efficiency of these products. However, where companies have the greatest ability to affect emissions is through the design, manufacturing, transportation (including reverse logistics) and reusability/recyclability of products. To make a product with a lower carbon impact over its lifecycle, we have to understand what makes up the embodied emissions in a product and how we can design or adjust the ways we make and transport it to reduce emissions.

A not-so-small step for humankind: quantifying a product’s embodied carbon emissions.

The full scope of emissions generated by the production, transportation, use and end of life of a product can be quantified through a lifecycle assessment (LCA). This involves assessing what emissions resulted from manufacturing a product: from extracting or manufacturing its base materials (e.g., plastic for computer cases, battery materials like lithium), to the share of energy used in factories to transform materials into components and then assemble components into that single product. Emissions can also be generated when producing packaging for a product, when transporting it to the end-user and from treatment at the end of its useful life.

In a way, measuring operational carbon is likely more straightforward — based on measurable metrics such as source and quantity of electricity used, gallons of fuel consumed, and the emission factors associated with them. By comparison, assessing embodied carbon of a product requires a range of activities:

Defining the system boundaries, i.e., which process steps are included and excluded;
Using a recognized methodology for the collection of data and emissions quantification — for example, guidance from the Greenhouse Gas Protocol (i.e., Product Lifecycle Accounting and Reporting Standard), Publicly Available Specification (PAS) 2050, the ISO14040-44 standards or the ISO14067 standard;
Collecting data on the quantity of materials used and energy consumption at each lifecycle stage, as well as the carbon dioxide equivalent (CO2e) emission factor for each material and process to quantify total CO2e emissions; and
Making sure the data for the chosen assessment is consistent (e.g., functional unit, timescale).

Once you have that information, you can quantify the embodied carbon emissions in a product and start the real work — using that information to identify ways to reduce these emissions.

The right data can point the way to targeted emissions reductions.

With a rich understanding of a product’s embodied carbon emissions, product designers can then potentially make choices that reduce that product’s embodied emissions moving forward. During product design, companies can consider substituting lower-carbon materials into products. That substitution can take the form of using the same material(s) produced in a less emissions-intensive manner (i.e., by using recycled material, more energy efficient industrial processes and/or lower-carbon energy at the factory level) or by using an alternate material that is less emissions intensive to produce.

In addition, manufacturers can optimize processes and implement design changes to reduce the overall use of materials and the amount of waste generated during manufacturing. Embodied emissions can also be reduced by using more energy efficient manufacturing processes and technologies, and using low-carbon sources of energy for these processes. The impact of transportation too can be reduced by implementing changes such as using low-carbon modes of transport and fuel types.

Closing the loop.

Cisco’s team has been hard at work performing its own lifecycle assessments and product carbon footprints assessments to account for the greenhouse gas emissions from its manufacturing, transportation, and end-of-life treatment for its products. Information about these processes can be found on Cisco’s ESG Hub.

Manufacturing, transport, and end-of-life emissions can make up roughly a quarter of total emissions in Cisco products [2], which is why it’s critical to account for and work to reduce emissions not resulting from product use. Calculating the impacts of Cisco products enables our teams to not only understand the lifecycle carbon impacts of our products, but to model the impacts of various design, material and process changes that can be made to our products.

Cisco has a public goal for 100% of new Cisco products and packaging to incorporate Circular Design Principles by FY25. Cisco has identified 25 Circular Design Principles, organized across the 5 focus areas below. These Principles play a pivotal role in enabling the reduction of GHG emissions across the lifecycles of Cisco products, especially their embodied carbon emissions. Visit the ESG Hub for more details on Cisco’s goal and its Circular Design Principles.

Cisco also has programs to encourage product returns, reuse, and recycling to reduce emissions from product end of use. When products are returned to Cisco, we evaluate their condition and eligibility for reuse. If the product is in usable condition or repairable and there is demand for the product, it undergoes a testing and/or repair process to meet Cisco’s quality standards. One of the primary goals of product return process is to redeploy as much material as possible, thus reducing the production of virgin materials and subsequent emissions.

Product returns: Various programs offered for customers to return products back to Cisco to ensure that they follow the highest value end of use pathway.
Product reuse: Reuse is always a top priority. Returned devices that can be reused are remanufactured, refurbished, or repaired, and resold by Cisco Refresh, or used by Cisco service operations or our internal labs.
Product recycling: Any products that are not reusable are harvested for components that can be reused, and remaining materials are recycled where possible by one of our authorized recyclers. We currently have two contracted e-scrap recyclers. Each recycler uses both company-owned facilities and subcontracted recyclers to provide global recycling coverage.

Please visit the ESG Hub for details on the various returns and reuse programs offered.

Calculating product embodied carbon emissions is critical for Cisco to support our customers in quantifying the carbon impact of the products they purchase, and it also provides Cisco with information that is important in our efforts to reduce the GHG emissions associated with our products.

[1] Carbon Herald, https://carbonherald.com/what-is-embodied-carbon-and-why-does-it-matter/

[2]This is based on lifecycle greenhouse gas emissions quantified for Cisco ICT products using global electricity-use emission factors. Visit the ESG Hub (“Environmental Footprint of our Products”) for more details.

  Curious about embodied carbon? Learn the basics from one of our subject matter experts in Cisco's Chief Sustainability Office.  Read More Cisco Blogs