Federal Courts to review endpoint detection and response – Security


The Federal Court of Australia is planning a review of its endpoint detection and response as part of an ongoing cyber security program.



It currently uses BlackBerry Cylance’s EDR solution but is looking to review it against the offerings of other security vendors.

According to documentation, the Federal Court is seeking expertise spanning BlackBerry CylancePROTECT and CylanceGUARD, Microsoft Defender and Splunk’s EDR or XDR.

The call follows the launch of the Federal Court’s cyber security program in 2022, which sets out to “enhance cyber security protection” over four years.

The program aims to cover areas such as endpoint protection, Essential Eight and the management of third-party risks.

“The Federal Courts see management of cyber risk as a high priority and foundational to our ability to operate in a high threat environment,” a spokesperson told iTnews.

“Cyber security controls, including endpoint protection software, are a key component to mitigate risk consistent with the Courts’ ICT strategy.”

According to Federal Courts, the EDR review aims to find “recommendations for additional or alternative solutions that may help strengthen these controls”.

“As solutions evolve and change over time, along with attacks and attackers, any improvements will aim to protect and defend against current and anticipated threats,” the spokesperson added.

According to its 2022-23 corporate plan [pdf], Federal Courts plan to implement endpoint protections and security operations centres across its operations, which includes Federal Circuit and Family Court of Australia and the National Native Title Tribunal.

With targets set until 2026, the security program also aims to reduce “measured vulnerabilities” and mandate that court staff use a single identity and access management solution for all applications.



Source link