Executive Insights | The C3 Suite: Jason Ingalls

Discover insights from Jason Ingalls on how the C3 Suite's in-house SOC enhances security with integrated IT and risk management, excelling in rapid incident response and compliance. This interview highlights what make the C3 Security Operations Center unique.

 

 

Q&A with Jason Ingalls

How does having an in-house SOC contribute to our client security?

The C3 Suite of services includes both cybersecurity, risk management and managed IT services bundled together. And what that means is that our IT services team and our Security Operations Center are working hand-in-hand. They’re familiar with each other’s business processes. They’re able to quickly identify suspicious or malicious activity, trace it down to the actions necessary to eradicate it so that our clients are secure and are able to accomplish their objectives.

 

What makes the C3 Security Operations Center unique?

The C3 Security Operations Center actually grew out of an incident response capability, where we had a team of people and the kind of tooling that could be deployed into very large environments in a really quick timeframe in order to investigate, contain attacker activity, eradicate their presence, and then report on what we found fairly quickly.

This is what built the Security Operations Center. And so not only do we have the advanced incident response and forensics capability that comes with C3 SOC, but we also have that CMMC focused compliance capability so that we can help organizations report to authorities when there’s unauthorized access within the timeframes that are necessary. We bring that capability to our clients.

 

What is segregation of duties and why is it important?

It’s incredibly important whenever you’ve got both IT services and cyber risk management operating under the same roof, that you can demonstrate segregation of duties. And one of the most important reasons why is because the IT services team has a specific mission objective, which is to align information technology to business objectives.

Whereas the SOC, the Security Operations Center, has a different mindset and a different objective. And that is to understand the risk profile and understand where risk may be getting realized, and to make sure that risk management is in accordance with the client’s risk appetite. So you’ve got an IT team that is busy trying to make sure technology solves the business’s productivity needs.

And you’ve got a Security Operation Center that’s providing overwatch and risk management as the right team is functioning.

And that’s what you get whenever you get the C3 Suite of services.

 

What are the advantages of the reference architecture in a Security Operation Center?

With the C3 CMMC Reference Architecture environment, our Security Operations Center is able to get a very high-fidelity baseline of activity that occurs across the entire range of our clients that enables us to see deviations from that baseline with a fidelity that is just not possible with legacy IT environments or other environments that haven’t been built to spec for the CMMC control requirements.