Comcast to use ThreatQuotient for cybersecurity operations
Comcast, the parent company of NBC Universal and SKY Group, has chosen ThreatQ Platform and ThreatQ Investigations to meet their cybersecurity needs.
ThreatQuotient says the selection came after an extensive and competitive selection process, including a four-month proof of concept (POC).
The company says its services solved a key challenge of Comcast's cybersecurity operations center (CSOC) - the need to use security data across multiple teams and complex use cases, including priority threat actor risk mitigation, threat hunting, threat detection engineering, incident response and forensics, and risk-based vulnerability management.
Comcast cybersecurity senior director, Haris Shawl, says ThreatQuotient's platform has steadily advanced and rapidly brought in new features as requested by its customers.
"As we came to the decision to reassess our approach to threat intelligence, we included ThreatQuotient in the evaluation process based on their repeated ability to deliver," she says.
"Comcast Cybersecurity selected ThreatQuotient because they have the right technology and skills to support the scale and complexity of cybersecurity operations at Comcast, the largest residential ISP in the U.S."
As a result of using the ThreatQ Platform with the DataLinq Engine and ThreatQ Investigations, Comcast's CSOC has been able to:
Prioritise and collaborate to drive efficiencies
Comcast's cybersecurity teams are now sharing data in a highly efficient, heavily automated manner. ThreatQuotient says sharing contextualised intelligence is a force multiplier. Teams can focus on relevant, high-priority issues, so they can make better decisions and take the right actions faster.
Capture more value from tools and teams
The ThreatQ Platforms support bi-directional integrations with nearly 300 different tools, customised dashboards and integrated views, allowing teams to share data within their workflows using tools they are familiar with. ThreatQuotient says Comcast Cybersecurity gets more value from the existing tools and teams while strengthening security. It says more tools can be added to scale as needed.
Support complex use cases
Comcast teams can address multiple, complex use cases. In addition to sharing data and enabling collaboration, the ThreatQ Platform and ThreatQ Investigations help automate repetitive, low-risk, time-consuming tasks. This empowers analysts, threat hunters and engineers to take the lead on complex, time-sensitive investigations, hunts, forensic analysis and incident response.
ThreatQuotient president and CEO John Czupak says the company aims to provide customers with the best service, experience and technology solutions available to solve their unique needs.
"We are incredibly proud to be selected by Comcast to solve their security operations challenges," he says.
"To know that Haris Shawl asked his team who they believed would be the best company to work with, and their answer was hands down, ThreatQuotient is not something we take lightly. ThreatQuotient is committed to providing that level of certainty and trust for all brands we have the opportunity to work with."
