Auditing IT Management Tools: ITSM, ITOM, APM, and CMDB - Security Considerations

Explore the critical importance of securing and understanding systems management, monitoring, and automation tools in this conference talk. Delve into various categories of tools found throughout organizations, both on-premises and in the cloud. Learn about monitoring systems, including agent and agentless approaches, Application Performance Monitoring (APM), Runtime Application Self-Protection (RASP), and user monitoring techniques. Examine the role of Configuration Management Databases (CMDB) and their limitations. Investigate trouble ticketing systems, focusing on event and incident management, as well as potential security implications. Discover the power of automation in both proactive and reactive scenarios, including batch scheduling and Robotic Process Automation (RPA). Finally, understand how to map these concepts to OWASP SAMM activities and integrate them with other IT Service Management methodologies. Gain valuable insights into securing critical assets and preventing potential vulnerabilities in your organization's management and monitoring infrastructure.