1. CIO Perspectives on Security Fabrício Brasileiro Regional Sales Manager

2. Key Perspectives 2 | ©2014, Palo Alto Networks. Confidential and Proprietary. Think Strategically about Security Safely Enable the Business – Safe Enablement Apply Innovative Thinking to Security Challenges

3. 3 | ©2014, Palo Alto Networks. Confidential and Proprietary. Table of Contents CIO Perspectives on Security Changing IT and CIO Role Good/Bad News Story Rethinking Security Strategically CIO Considerations for the Future 1 2 3 4

4. Business Opportunities Security Risks SaaS Mobility + BYOD Social + Consumerization Cloud + Virtualization Opportunity or Challenge? IT Must be a Strategic Business Enabler The Role of IT and the CIO is Changing 4 | ©2014, Palo Alto Networks. Confidential and Proprietary. Tectonic Shifts in Business Give Rise to a New Era of Advanced Cyber Threats

5. Emerging CIO Priorities – Are You Prepared? 5 | ©2014, Palo Alto Networks. Confidential and Proprietary. Service/Performance Traditional Emerging Priorities Cloud/Disintermediation Secure Cloud Visibility – Network and Data Zero Trust Model Disruptive “Kill Chain” Solutions Close Monitoring and Analytics Perimeter Security Application Proliferation Uncontrolled Data Movement Data Center and Endpoint Security Ineffective Endpoint and Silo’d Network Protection

6. 6 | ©2014, Palo Alto Networks. Confidential and Proprietary. Table of Contents CIO Perspectives on Security Changing IT and CIO Role Good/Bad News Story Rethinking Security Strategically CIO Considerations for the Future 1 2 3 4

7. Good News 7 | ©2014, Palo Alto Networks. Confidential and Proprietary. The Basics Are Still Critically Important Governance Security Frameworks PoliciesStandards Risk and Compliance Management Identity and Access SSO Strong Password Multi-Factor Authentication Certificates Data Protection Encryption Key Management Data Leak Protection Backup and Archive Logging and Monitoring Audit LogsMeasurementsCorrelationRetention

8. Bad News – Line of Security Products Anti-APT for Port 80 APTs Anti-APT for Port 25 APTs Endpoint AV DNS Protection Cloud Network AV DNS Protection for Outbound DNS Anti-APT Cloud Internet Enterprise Network UTM/ Blades DNS Alert Endpoint Alert Web Alert SMTP Alert Web Alert DNS Alert SMTP Alert APT Web Alert AV Alert Web Alert DNS Alert SMTP Alert Endpoint Alert Lacks IntegrationAlert OverloadManual Response Vendor 1 Vendor 2 Internet Connection Malware Intelligence Vendor 3 Vendor 4 Limited Visibility AV – Anti Virus APT – Advanced Persistent Threat UTM – Unified Threat Manager Failing Security Architectures Provide a False Sense of Security 8 | ©2014, Palo Alto Networks. Confidential and Proprietary.

9. 9 | ©2014, Palo Alto Networks. Confidential and Proprietary. Table of Contents CIO Perspectives on Security Changing IT and CIO Role Good/Bad News Story Rethinking Security Strategically CIO Considerations for the Future 1 2 3 4

10. New Strategic Approaches to Security Are Needed 10 | ©2014, Palo Alto Networks. Confidential and Proprietary. Security Organizations Are Not Innovating Fast Enough  Existing controls ineffective against new threats  Controls not evolving fast enough Attackers Are Innovating Faster  Sophistication of global attackers  Increasing value of information  Easier targets Vulnerability Gap Continues to Widen  Goal: reduce threat exposure by strengthening controls

11. Requirements for the Future At the Internet Edge Between Employees and Devices within the LAN At the Data Center Edge and between VMs At the Mobile Device Cloud Within Private, Public and Hybrid Clouds Detect AND Prevent Threats at Every Point Across the Organization  Prevent attacks, both known and unknown  Protect all users and applications, in the cloud or virtualized  Integrate network and endpoint security  Analytics that correlate across the cloud 11 | ©2014, Palo Alto Networks. Confidential and Proprietary.

12. Increase Visibility and Reduce Breach Landscape  Identify and define legitimate use with leadership  Align security policies with those legit government and business uses  Isolate critical internal applications  Determine policies that protect cloud and VM use cases  Tie applications to users/groups Allow Relevant Applications Monitor Dangerous Applications Block Unwanted Applications 1 Eliminate Known Threats 2 Eliminate Unknown Threats 3 Focus on Relevant 4 12 | ©2014, Palo Alto Networks. Confidential and Proprietary.

13. 344KB 172.16.1.10 source IP 64.81.2.23 destination IP tcp/443 destination port file-sharing URL category pdf file type roadmap.pdf file name bjacobs user prodmgmt group canada destination country SSL protocol HTTP protocol slideshare application slideshare-uploading application function Complete Context Means Tighter Security Policies 13 | © 2015, Palo Alto Networks. Confidential and Proprietary. bjacobs user slideshare-uploading application function slideshare application

14. 14 | ©2014, Palo Alto Networks. Confidential and Proprietary. Table of Contents CIO Perspectives on Security Changing IT and CIO Role Good/Bad News Story Rethinking Security Strategically CIO Considerations for the Future 1 2 3 4

15. The Future of Cyber Security  Visibility and inspection across entire network and into “the cloud”  Network-segmentation and micro-segmentation  Advanced security that prevents indicators of threats and kill chain in their tracks  Mobile and BYOD security  Internet of things and embedded device endpoint security  Advanced analytics and Big Data for security analytics  Interpol-like exchanges for sharing advanced threats and campaign intelligence 15 | ©2014, Palo Alto Networks. Confidential and Proprietary.

16. 16 | ©2014, Palo Alto Networks. Confidential and Proprietary.