Mandiant Attack Surface Management + Google Security Command Center Enterprise

[andras]

Google Cloud is taking a massive leap forward in cloud security by integrating Mandiant's Attack Surface Management (ASM) capabilities into the Enterprise Tier of its Security Command Center (SCC). Let's explore what this means for anyone seeking to fortify their cloud environments.

What is Mandiant Attack Surface Management?

Mandiant Attack Surface Management is a cybersecurity solution that continuously discovers, analyzes, and prioritizes an organization's internet-facing vulnerabilities from the attacker's point of view, helping to reduce the risk of breaches. Think of it as your digital perimeter's vigilant watchdog:

• Continuous Discovery: It relentlessly scans your entire Cloud Asset Inventory.
• Exposure Quantification: ASM goes beyond simple identification. It analyzes and prioritizes discovered vulnerabilities based on their potential severity and ease of exploitation, giving you a data-driven roadmap for remediation.
• Risk-Based Prioritization: Mandiant's ASM guides you to focus your efforts on the most critical threats to your organization's specific environment.

The integration of Mandiant ASM into SCC Enterprise Tier creates a true powerhouse for risk management and vulnerability mitigation:

• Unified Visibility: SCC's existing centralized view of your cloud security now seamlessly includes your external attack surface, eliminating blind spots.
• AI-Powered Insights: Mandiant's threat intelligence and Google's vast security knowledge are harnessed to provide actionable insights, driving faster remediation with less guesswork.
• Cross-Cloud Security: Extend the power of ASM and SCC Enterprise beyond Google Cloud to hybrid and multi-cloud environments, ensuring consistent security posture.

Let's look at some practical use cases where the combination of Mandiant ASM and SCC Enterprise shines:

• Proactive Defense: Continuously reduce your attack surface by identifying and addressing vulnerabilities before attackers can exploit them.
• Mergers and Acquisitions: Accelerate secure integration of newly acquired companies by rapidly mapping their attack surface and uncovering risks.
• Third-Party Risk Management: Monitor the attack surfaces of vendors and partners. Enforce security standards within your digital supply chain.
• Compliance: Demonstrate adherence to regulations like PCI DSS, HIPAA, and GDPR with comprehensive vulnerability reporting and audit trails.

Mandiant Attack Surface Management is automatically enabled when you activate the Security Command Center Enterprise tier and findings are available in the Google Cloud console.

1. Open you Security Findings within SCC
2. In the Quick filters section, in the Source display name subsection, select Mandiant Attack Surface Management.
   The table is populated with Mandiant Attack Surface Management findings.
3. To view details of a specific finding, click the finding name under Category. The details panel for the finding opens and displays the Summary tab.
4. On the Summary tab, review the information about the finding, including information about what was detected, the resource that was affected, and more.

By bringing Mandiant's attack surface expertise into the fold, Google Security Command Center Enterprise sets a new benchmark for cloud-native security. Organizations can now leverage an integrated platform to monitor, manage, and optimize their cloud security posture both internally and externally. This integration  empowers security teams to stay one step ahead of evolving threats and keep their digital assets safe.