Effective cybersecurity involves assessing risks and consequences and taking appropriate steps. Our products, with their built-in cybersecurity features, are designed to decrease the risk of compromise and enable secure behavior. We also understand that staying cybersecure takes more than products with cutting edge technology. It’s also about ongoing processes that take effort to maintain. That’s why we do everything in our power to make it as easy as possible for you to mitigate risk from day one and for the long run.
Cybersecurity is essentially a question of managing risk. A good starting point is to evaluate potential risks to your business or organization in terms of their probability, and their potential impact.
To support this evaluation, you can use a risk management framework. A good example is the NIST Cybersecurity framework, or other similar frameworks. Below you can see how Axis can support your organization in managing your risks.
Identify begins with identifying the data, devices, systems, and facilities you need to achieve the goals of your organization and who is responsible for them.
It includes:
AXIS Device Manager, an on-premise tool, makes it easy to:
A good starting point for your Protect activities is to remove the default accounts your Axis devices come with. You should also:
We go to great lengths to ensure that our devices are well-protected when we deliver them and to make it easy for you to keep them protected:
The Axis Software Security Group (SSG) works with our development engineers on applying cybersecurity best practices in design, development, and testing to minimize the risk of flaws.
Many Axis network devices feature in-house developed ARTPEC® chips. And we provide a long list of built-in enhanced security features.
AXIS Device Manager is a tool that makes it much easier and more cost-efficient for you to manage all major installation, security, and maintenance device-management tasks.
We offer training and share our knowledge of cyber risks and how to mitigate them in a number of tools and papers including the AXIS OS Hardening Guide.
We issue security advisories to help reduce risks of known vulnerabilities. Visit the Axis product security website for up-to-date cybersecurity advisories and news and to find the Axis Vulnerability Policy.
We offer a choice of two ways to help you keep up with cybersecurity updates for devices: Active-track support and Long-term support.
The most important Detect activity for enterprises is to implement a Security Information and Event Management (SIEM) system or a Security Orchestration, Automation and Response (SOAR) system for continuous monitoring. These systems:
Axis helps you to detect anomalies and events:
The activities you carry out to contain and mitigate the impact of cybersecurity incidents are at the heart of Respond. If you use a SOAR system, it will provide incident response workflows, and playbooks for specific threats. Otherwise, you should establish your own response protocols. Either way, the response will vary depending on:
Axis doesn’t operate directly in the Respond area. In the event that an Axis product is involved in a cybersecurity incident, we provide information and support in accordance with our vulnerability policy and other cybersecurity policies.
In addition to activities aimed at restoring service after a cyberattack, you should:
Our on-premise tool AXIS Device Manager makes it easy to restore your Axis devices:
Read articles about cybersecurity on our blog.
See how we respond to security vulnerabilities.
Find security advisories, firmware updates, and news.
Learn about cybersecurity technologies.
