CyberTrust Consulting vs Wipro

About Wipro

Wipro offers Security Management Center, a security operations and orchestration product that helps deliver managed security services. Wipro's Security Management Center, abbreviated SMC, combines Predictive, Preventive and Proactive activities based on automation and analytics. SMC offers operational insights, prioritization of risks, pre-integrated tools and reusable use cases.^[1][2][5]

SMC translates individual tool views and reports into dashboards for stakeholders within the enterprise hierarchy. An executive view for the CISO shows whether any risks are manifesting due to ineffective or inconsistent application of security controls. Wipro uses Security Management Center to view the security posture of its customers' security infrastructure.^[5]

SMC integrates with security devices using APIs to collect the required information. SMC integrates with orchestrator tools deployed at the customer's premise, which integrate with firewall and load balancer devices to collect configuration and rule bases. A vulnerability management tool deployed at customer infrastructure is integrated to collect information defined by pre-defined use cases. A health monitoring tool hosted in the data center monitors security devices including firewall, load balancer, forward proxy and end point security management servers.^[1][5]

Wipro describes security infrastructure as traditionally managed through a hierarchical support model, with engineers and a service desk team performing a pre-defined set of activities. Wipro states that enterprises face cyber-attacks and malware infections despite the presence of security tools and technologies. Wipro names missing security hygiene of the infrastructure and limited visibility of infrastructure and service effectiveness as the main reason for the security gap.^[5]

Wipro developed a Security Testing Framework for its internal consumption. The Application Security Testing Framework derives its guiding principles from NIST RMF and the Cyber Security Framework. Wipro's framework consists of a classification layer, a baseline layer and a control layer. The security assessment framework applies across all assessment methods, namely examination, interviewing and testing. One objective of the Security Testing Framework is to identify vulnerability and security exposure in applications and underlying infrastructure.^[6]

The control layer of the application security testing framework offers an industry specific basis covering HIPAA, PCI and ICFR, powered by 18 control areas. The 18 controls fall under NIST SP 800-53 and are divided by impact scale into low, moderate and high. The framework's controls are applied to web application security across five functions: Identify, Protect, Detect, Respond and Recover. The baseline layer provides the foundation for deterministic security requirements that cater to an organization's vision, mission, and near and long term goals.^[6]

Wipro's capability in risk management and compliance includes Anti Money Laundering (AML) and Know Your Customer (KYC). Wipro manages regulatory and compliance requirements for its clients through operations support, technology implementation, consulting and advisory. Wipro has a workforce of 230,000+ associates representing 146 nationalities across 65 countries.^{[1][5][6][7][8]}