3338 - 秘密失控：使用 HashiCorp Vault 和智能密钥编排来管理凭证混乱.pdf

1、IBM TechXchange2025 conference IBM TechXchange|2025 IBM Corporation1#IBMTechXchangeSecrets Gone Wild:Wrangling Credential Chaos with HashiCorp Vault and Smart Key Orchestration 3338Pradeep ParameshwaranSTSM,Chief Architect,Security and Compliance on IBM Z and LinuxONEPRADEEPIBMTable of ContentsIBM V

2、ault Self Managed on IBM ZWhat is IBM VaultUse-Cases Deep DiveDemosQ&AIBM TechXchange|2025 IBM Corporation2DORAFinal Report on the Guidelines of Outsourcing White House Executive Order on improving the nations cybersecurityAttack surface is shifting internally,and cost of data breach continues to in

3、creaseEscalating business disruption pushes breach costs and regulatory fines to new heightsUSD 4.88MAverage total cost of a data breachThe time to identify and contain a breach decreased yty258 daysTime to identify and contain a breach,26 days less than last year and a 7-year low71%increase in year

4、-to-year attacks with valid credentials12%drop in ransomware attacks on enterprises.If there is a breach,security AI and automation can contribute to large savings98 daysAverage breach response time saved for organizations with extensive use of security AI and automation versus no useUSD 1.76MSaving

5、s for organizations with a low-level skills shortage versus those with a high-level skills shortageRegulatory landscape is driving increased demand for mainframe securitySource:IBM Cost of Data Breach Report 2024Source:IBM X-Force Threat Intelligence Index 2024 GDPRPCI DSS 4.0The Sarbanes-Oxley Act(

6、SOX)$5.05MAverage cost for noncompliance with regulations70%of organizations surveyed said that their compliance team will grow over the next two years3IBM Z and IBM LinuxONE Security/2025 IBM CorporationWhat is IBM Vault?Secrets?Secrets?Secrets are securely-sensitive or personally identifiable info