Goodbye Spreadsheets – Hello Unified Risk Management

How the Data Fabric Drives Zscaler Advantages

The data fabric for security ingests, correlates, and enriches Zscaler and third-party data sources to inform exposure assessment. The data fabric and the AI/ML technologies it feeds provide security insights harnessed from 500 billion daily transactions on the Zscaler Zero Trust Exchange^TM platform and from more than 150 third-party security and business applications.

Risk360 debuted a bit more than a year ago, providing insights into misconfigurations and other security gaps in the Zscaler zero trust platform and delivering cyber risk quantification (CRQ). The platform leverages cyber insurance data to accurately reflect risk in financial terms, and the platform captures high-level risk scoring, executive reporting, and compliance mapping.

Now Risk360 has been rebuilt to run on the data fabric for security - a mere eight months after the Avalor acquisition. The most immediate advantage is that Risk360 now incorporates third-party data into its risk posture findings, giving customers a more holistic and therefore more accurate assessment of risk in their environments. (Read on to see additional new capabilities now available in Risk360.)

Today's news also highlights innovations in the data fabric that unlock new capabilities in UVM:

• Visual Explorer - this visual representation of the data fabric's security knowledge graph displays entity relationships, enabling customers to see the impact of connected findings, such as all the assets impacted by a given CVE, accelerating risk insights.
• Risk Mass Score - this new calculation makes clear the relative impact of focusing on one fix vs. another, by providing the accumulated weight of a given vulnerability based on aspects such as the number of assets that have that vulnerability, the business criticality of those assets, and other factors that constitute overall impact.
• Customizable Remediation Details - this enhancement lets customers directly define the information that UVM sends in the remediation tickets it generates into ITSM systems such as Jira and ServiceNow to, for example, share comments, add attachments, or include descriptions, using different templates for different remediation teams.

These new capabilities enhance the three core advantages of UVM: contextualized and customizable risk scoring, automated workflows for remediation with two-way ticketing reconciliation, and dynamic reports and dashboards that draw on always up-to-date data on exposures and mitigating controls.