Take Action to Correct Process Deviations

Security leaders tell us they have dozens of security tools but still struggle to attain the outcomes they expect. This struggle reflects the reality that security is not just about your tools but about people, processes, and technology. Gutsy provides a process-centric perspective to visualize, analyze, and understand how your organization works. It enables you to embrace a proactive approach, and move away from a reactive one.

With the latest addition of actions, Gutsy automatically takes action when a case goes off course so you can now proactively and continuously identify risk and inefficiencies in your processes. Actions allow you to monitor and push forward your processes to increase efficiency and conformance, and execute the target process.

Take action to bridge process gaps earlier

Action rules leverage Gutsy’s deep filtering to define conditions for evaluating each new case. With every update, the case is reevaluated to check if it meets the conditions and requires action. The action rules run once a day on all new process data from the past 24 hours so alerts are sent on a regular schedule and at a predictable time.

Actions are ideal for staying ahead of the curve by automatically addressing workflow errors such as:

• Not remediated critical vulnerabilities which are out of SLA
• Missing GitHub commits which indicate unfinished assignments
• Reopened cases which may disclose careless or disorganized work

Seeing that every process is unique, each requires its own custom-tailored set of action rules. For example you can decide to trigger an alert if a critical vulnerability takes more than 7 days to fix, or alert when employees have not completed their off boarding after 24 hours.

All action rules are evaluated against each new case, so if the same case happens to meet several conditions, it will trigger multiple alerts. For example, if you want to take action when a case is missing a new VM deployment and when a case is out of SLA, both alerts will trigger when a case exhibits both problems.

Actions are designed to equip security leaders with the tools to proactively intervene and correct workflow errors before they get out of hand and increase risk. No doubt, actions are a functional addition in any managers toolbox, and the point where one moves forward from process mining to process execution and compliance enforcement.

Let us show you these new capabilities in action so you can better understand how applying process mining to cyber will transform your security governance strategy, reduce risk, and speed up your security outcomes.