Roadmap

Overview

The modern digital enterprise encompasses more than just its internal tech infrastructure. As part of our extended network, we work with hundreds of third-party connections - from channel partners to suppliers and cloud providers. Business functions are no longer constrained within the organization's boundaries and are spread across our dynamic ecosystem. As a result, our workforce, business processes, and partners are empowered by remote mobility, and we're more driven to create solutions leveraging digital capabilities across all its associated users. 

With a seemingly borderless environment, our threat landscape expands, and the volume of risks increases exponentially. We must be proactive in protecting our customer's interests from the ever-evolving tactics used by cybercriminals, state-sponsored hackers, hacktivists, or opportunistic threats. The truth is that it's only a matter of time before we experience a breach, so it is essential that we know and understand the health of our digital capabilities and stay one step ahead of the game.

Our investors, partners, and customers do not expect us to be able to make all malicious actors back down. However, they anticipate that we will make it significantly more difficult. In the event of a breach, people will have higher expectations that we prioritize customer safety and well-being over our gains. Unsuccessful attempts towards data security or inadequate breach response can have severe repercussions, such as class action lawsuits and unwanted investigations by organizations that can investigate our fiduciary responsibilities. 

Roadmap

We have developed an effective cyber security roadmap to ensure we are ready to face the seemingly insurmountable cyber threats. This roadmap includes assessments of our current state and a step-by-step plan for reaching our desired level of security. Here are some areas we are focusing on:

• Network Security: Ensure that all layers of our network, including perimeter and internal networks, are properly secured with technologies such as Next-Generation Firewall (NGFW), Web Application Firewall (WAF), Security Incident and Event Management (SIEM), and External Asset Security Posture.

• Operational Technology Asset Monitoring & Vulnerability Management: Ensure the health of our Supply Chain by supporting infrastructure and Operational Technologies (OT) and connected systems such as programmable logic controllers (PLCs) used in industrial automation, SCADA, and Building Management Systems.

• Secure Remote Access: Provide remote access to Sleep Number resources, data, applications, and desktops for employees, contractors, partners, or customers with two-factor authentication and other controls such as single sign-on or just-in-time access policies.

• Information Technology Asset Monitoring & Vulnerability Management: Monitor our IT assets, such as servers, workstations, routers, and switches, to detect and prevent vulnerabilities or configuration mishaps that could lead to unauthorized access or data loss.

• Network Infrastructure Health & Monitoring: Monitor the health of network infrastructure components such as routers, switches, and firewalls. Implement network detection and response solutions to detect suspicious activities and respond quickly and appropriately to threats.

• Cloud Security Posture: Secure our cloud infrastructure from external threats through technologies such as cloud access security brokers (CASB) or containers, as well as internally, by implementing policies and processes to manage access and ensure security best practices.

• Application Security: Protect applications from cross-site scripting or SQL injection attacks through web application firewalls, secure code development, and training.

• Open Source Software: Monitor open source software for potential zero-day threats and detailed steps on how to address them immediately.

• End Point Protection: Implement an endpoint protection solution to protect devices such as laptops, tablets, and smartphones from malicious threats.

This roadmap will enable us to identify areas of improvement in our business that help save money and increase efficiency. By evaluating the gaps within our business process, workflow and portfolio, we can identify cost-saving opportunities and develop strategies for implementing them. Once the safeguards are in place, experimentation becomes easier and more affordable. With this comprehensive roadmap, we can ensure that our resources are used to their fullest potential while minimizing any costs associated with experimentation or transformation. We can maximize cost savings with the right approach while achieving our desired results.

Security is like the brakes on a car, enabling us to move faster. Safeguards are an integral part of being able to move forward with confidence. 

Conclusion

By taking a proactive approach to addressing identified gaps within our processes, workflows, and portfolios, we can reduce the time it takes to implement real change and accelerate innovation in all aspects of the company. Additionally, understanding the cost associated with experimentation and how to control it can help us ensure that our investments are maximized while lowering overall costs.

By leveraging this comprehensive roadmap, we can make wise decisions based on valuable data, increase efficiency throughout the organization, reduce time to implement solutions, and maximize cost savings. With the right approach, our business processes can be subject to continuous improvement resulting in the more effective use of resources, reduced experimentation costs, and ultimately improved organizational performance.