October 3, 2016
Booz Allen and Phantom Deliver Intelligent Automation to Help Federal and Commercial Clients Combat Threats, Empowering Security Pros to Focus on the Most Critical Issues
McLean, VA — Picture this: cyber teams defending today’s businesses identify and manage as many as 17,000 malware alerts every week, according to the Ponemon Institute. And with the remediation of each incident requiring hours of analysts’ time – on teams already strapped for talent and resources – organizations are falling behind adversaries lurking online.
Faced with this increasing volume and severity of cyber security incidents, and a growing shortage of cyber trained workforce to handle these incidents, commercial and government enterprises are struggling to find ways to increase response effectiveness and control costs. To address this, Booz Allen Hamilton (NYSE:BAH) and Phantom announced today a new strategic alliance, fusing Booz Allen’s decades of mission intelligence and deep expertise architecting and implementing cyber solutions, with Phantom’s leading security automation and orchestration technology platform. Together, the firms will deliver new automation and orchestration solutions for incident response and threat defense operations that will assist organizations in achieving cyber resiliency.
Clients will see improvements via:
- Automatic prioritization and remediation of threat alerts. In a survey by Phantom, nearly 75 percent of organizations said that they routinely ignore security alerts due to challenges handling the volume of threats. Phantom’s platform, now informed by Booz Allen’s decades of accumulated cyber intelligence, helps automate and orchestrate the process from the initial alert to prioritizing, investigating and remediating threats. Booz Allen will further help clients build new value by integrating this updated platform into their existing, interconnected systems.
- Improved resistance to cyber attacks. Automating the detection and investigation into cyber events improves organizations’ abilities to withstand the onslaught of attacks. While a threat may go unnoticed by manually tracking, Booz Allen and Phantom can find and quarantine issues at machine speed, stopping them from becoming outsized events.
- Greater focus on the most critical issues. When the deluge of security alerts is automatically prioritized, security professionals no longer need to spend hours examining anomalies to identify critical issues. By integrating Booz Allen’s deep expertise in cyber intelligence with Phantom’s advanced technology, security staff will have a platform that empowers them to focus the most important cyber events, reducing the burden companies confront when competing for new, expensive cyber talent.
“Organizations are faced with an increased volume and sophistication of cyber threats putting significant pressure on cyber security professionals,” said Angela Messer, Booz Allen Hamilton Executive Vice President and leader of the firm’s Cyber innovation business. “Booz Allen’s accumulated cyber intelligence, and machine intelligence integration expertise paired with Phantom’s cutting-edge platform will together empower organizations to battle cyber threats in new ways, with surgical precision and at machine speed.”
Booz Allen will deliver its significant cyber knowledge and proven security operations plans by crafting new “playbooks” for use on Phantom’s platform, incorporating best practices in Cyber Threat Intelligence, Incident Response, and Security Operations. These playbooks, which codify security and business processes, help leaders break down common organizational siloes that inhibit collaboration and prevent rapid containment and resolution of cyber events. The playbooks are based on Booz Allen’s commercial expertise and decades of defense and intelligence work with the federal government. The firm’s cyber insights are rooted in deep technical, analytic, engineering, and cyber mission experience.
Oliver Friedrichs, CEO & Founder of Phantom, said, “Knowing how you will respond in an attack and automating that plan consistently with proven playbooks is the only way to keep pace with today’s rapidly changing threat environment. Booz Allen’s deep security solution expertise combined with Phantom’s industry leading technology is the combination clients need to move at the speed of the threat.”
Additionally, this platform will provide organizations with a new level of insight into cyber events that further bolsters resiliency. Each time Phantom handles an event, information is logged describing the attack vector and other critical metadata. Booz Allen and clients can then analyze this descriptive data to uncover threat vector trends and integrate new actionable intelligence that helps security teams improve their defenses against similar future attacks.
BAHPR-CO
###
