John Pirc, VP and Head of Product Management, Netenrich, explains how the Resolution Intelligence Cloud works in a Cybersecurity Mesh Architecture (CSMA).
John Pirc, VP, Head of Product Management, Netnenrich: The cybersecurity mesh architecture (CSMA), it's an architecture, but essentially it talks about all the security telemetry working together, ideally. It covers all the identity access and everything. The cool thing about it is it feeds up into a SIEM or SOAR, but they're working together. During this time, not too long ago, Google bought Siemplify and Siemplify is a SOAR. It really completed their picture of being a cloud-native SIEM. So, the beautiful thing about this is these two technologies working together in harmony, you have Resolution Intelligence Cloud on top of it. It's the apex of that.
What that allows us to do is do sub-second searches on data through Google Chronicle, being able to use our ML, and parsers, and enrich that information. And with that, we are also able to enrich Siemplify, which is now Google Chronicle SOAR. It's just amazing because they're able to do all these threat detections. We're able to pull that up, throw our IP on it, and enrich the SOAR. And the cool thing about it is you can pivot from RI Cloud, obviously threat hunting and whatnot in Chronicle, but we can also do that with Google Chronicle SOAR. So yeah, it's amazing how the cybersecurity mesh architecture brought all that together.