CISOs Differ on Security Solutions But Put Quality on Top

Indian CISOs give an insight on pros and cons of both best-of-breed and single vendor security solutions.

Security officers do not seem to agree on any one approach of buying a security solution. Some are of the opinion that a single vendor approach is better while some feel that it not at all possible for one single vendor to provide all security solutions.

Best-of-breed is an ideal solution. It is not possible for one single vendor to cover all aspects of security. One needs to have checks and balances and from that perspective it is better to go for best-of-breed security solutions, said Parag Deodhar, chief risk officer, CISO, VP-Process Excellence & Program Mgmt. at Bharti AXA General Insurance, India.

Expecting a complete end-to-end security solution from one single vendor may not look realistic. Security has many aspects, and it is difficult for one vendor to master them all.

I am yet to come across a single vendor who covers all aspects of security. Talking about security, right from identity management, to firewalls, to anti-versus, to SIEM, to encryption, the entire gambit, I do not think one single vendor can provide all, Deodhar said.

But Mannan Godil, vice president & head-information security, CISO, Edelweiss Financial Services doesnt agree. He believes that buying security solutions from a single vendor may prove to be better.

If a vendor offers a high quality solution on one single platform and if the vendor is somebody I would love to work with because of high quality delivery, then I will go for that one vendor, Godil said.

Single vendor has advantages too important to be ignored. One advantage of single vendor solution is that it will be a complete story. One does not have to look for adaptors which will translate one vendor log into another. Single vendor solutions are known to be more in tune with each other. Ashish Chandra Mishra, CISO, TESCO, said.

Mishra also said that integration is better when it comes to single vendor product but best-of-breed provides more intelligence. Risk can be more in multi-vendor products.

Amid all these differences, there is one thing all CISO seem to agree on. Be it best-of-breed security solution or provided by a single vendor, quality cannot be compromised.

Quality is of paramount importance, but it cant be compromised. If it so happens that best in class is far more superior, then I would definitely go for it. Godil said.

But it is important to decide what addresses and meets the business risk of an organization and then decide whether to go for best-of-breed or single vendor security solution.

Join the CSO newsletter!

Error: Please check your email address.

Tags security

More about

Show Comments

Featured Whitepapers

Editor's Recommendations

Solution Centres

Stories by Ishan Bhattacharya

Latest Videos

  • 150x50

    CSO Webinar: The Human Factor - Your people are your biggest security weakness

    ​Speakers: David Lacey, Researcher and former CISO Royal Mail David Turner - Global Risk Management Expert Mark Guntrip - Group Manager, Email Protection, Proofpoint

    Play Video

  • 150x50

    CSO Webinar: Current ransomware defences are failing – but machine learning can drive a more proactive solution

    Speakers • Ty Miller, Director, Threat Intelligence • Mark Gregory, Leader, Network Engineering Research Group, RMIT • Jeff Lanza, Retired FBI Agent (USA) • Andy Solterbeck, VP Asia Pacific, Cylance • David Braue, CSO MC/Moderator What to expect: ​Hear from industry experts on the local and global ransomware threat landscape. Explore a new approach to dealing with ransomware using machine-learning techniques and by thinking about the problem in a fundamentally different way. Apply techniques for gathering insight into ransomware behaviour and find out what elements must go into a truly effective ransomware defence. Get a first-hand look at how ransomware actually works in practice, and how machine-learning techniques can pick up on its activities long before your employees do.

    Play Video

  • 150x50

    CSO Webinar: Get real about metadata to avoid a false sense of security

    Speakers: • Anthony Caruana – CSO MC and moderator • Ian Farquhar, Worldwide Virtual Security Team Lead, Gigamon • John Lindsay, Former CTO, iiNet • Skeeve Stevens, Futurist, Future Sumo • David Vaile - Vice chair of APF, Co-Convenor of the Cyberspace Law And Policy Community, UNSW Law Faculty This webinar covers: - A 101 on metadata - what it is and how to use it - Insight into a typical attack, what happens and what we would find when looking into the metadata - How to collect metadata, use this to detect attacks and get greater insight into how you can use this to protect your organisation - Learn how much raw data and metadata to retain and how long for - Get a reality check on how you're using your metadata and if this is enough to secure your organisation

    Play Video

  • 150x50

    CSO Webinar: How banking trojans work and how you can stop them

    CSO Webinar: How banking trojans work and how you can stop them Featuring: • John Baird, Director of Global Technology Production, Deutsche Bank • Samantha Macleod, GM Cyber Security, ME Bank • Sherrod DeGrippo, Director of Emerging Threats, Proofpoint (USA)

    Play Video

  • 150x50

    IDG Live Webinar:The right collaboration strategy will help your business take flight

    Speakers - Mike Harris, Engineering Services Manager, Jetstar - Christopher Johnson, IT Director APAC, 20th Century Fox - Brent Maxwell, Director of Information Systems, THE ICONIC - IDG MC/Moderator Anthony Caruana

    Play Video

More videos

Blog Posts

Market Place