SOLUTIONS

To help mitigate cyber security incidents, protect business, increase productivity and ensure operational efficiency.

VENDOR SOLUTIONS THAT WORK

Our vendors tackle real-world issues. Their solutions directly help mitigate cyber security incidents and increase business efficiency.

Some of our vendors are impressive names. Others are true innovators that will change the security landscape forever.

But we don’t work with them because they make us sound good.

We work with them because their products are the most effective solutions to the problems organisations face.

They make life easier. They cut costs dramatically. And they help businesses mitigate cyber security incidents.

SOLUTION PORTFOLIO BY DISCIPLINE

ASD Top 4 Mitigation Strategies Application Whitelisting Endpoint Security Malware Analysis Patch Management Remote Management Threat Detection Vulnerability Management Vulnerability Scanning

Top 4

The Strategies to Mitigate Cyber Security Incidents is a document created by the Australian Signals Directorate (ASD). The document is a list of 37 strategies that organisations must or should implement to reduce risk of cyber security incidents. The list is informed by ASD’s experience in operational cyber security, including responding to serious cyber incidents and performing vulnerability assessments and penetration testing for Australian Government Agencies.

Read More about strategies to mitigate the risk of cyber security incidents here

Application Whitelisting

Application Whitelisting is the opposite of Antivirus. Antivirus solutions have a signature based approach and work by having a database of known bad malware that will not be allowed to execute. Application whitelisting solutions work, instead, by having a database of trusted applications and deny execution of all other files, preventing bad as well as unknown programs from executing.

The Australian Signals Directorate rates application whitelisting as the most effective security control in their Strategies to Mitigate Targeted Cyber intrusions. Read more about Application Whitelisting here.

Endpoint Security

In security-speak computers and mobile devices are referred to as endpoints. Endpoint security is a concept where each endpoint is responsible for its own security and that remotely connecting to the network creates a potential entry point for security threats. Endpoint Security came into being as more people are using remote methods to connect to corporate networks from a myriad of locations and devices.

This mobility means the network perimeter is no longer defined and protecting the Endpoints has never been more important. Read more on Endpoint Security and solutions to address the endpoints here.

Malware Analysis

Malware analysis allows an organisation to quickly identify and triage files that may be unsafe for their environment. It gives visibility into what those files do. This data produces actionable intelligence which can be used to detect and prevent further infections.

Malware Analysis can be conducted for a number of different reasons: Read more and discover solutions to identify possible malicious files.

Patch Management

When vulnerabilities exist, malicious actors will exploit them. Software and hardware vendors constantly release patches to address vulnerabilities. Just some of the challenges organisations face are to:

understand what is truly critical from a security stand point,
triage the patching on a criticallity basis,
understand where the patches need to be applied,
and physically test, apply and check that patches have been successful across a myriad of devices and locations.

Read more about patch management and solutions that address the verification and automation of patch management

Remote Monitoring and Management

Ensuring your or your clients’ ITC assets are operational, secure and running at peak performance can be a daunting task. Software and hardware infrastructure can choose the most inappropriate times to cause disruption to business. Remote Monitoring and Management allows you to view the performance of assets, remediate issues and protect your organisation from anywhere and at anytime.

Proactive notification of degradation of service, systems failures, trending and protection statuses from a single pain of glass, allows businesses to accomplish more, with less. Learn about solutions that can help you remotely monitor and manage your, or your clients ITC infrastructure.

Threat Defence

With over 20 million new pieces of malware being produced every 3 months globally, and targeted cyber intrusions across the full spectrum of business and government on the increase, detecting threats and mitigating them is more important than ever.

From known threats to unknown new and evolving techniques of malicious attacks and insider threats, organizations need to deploy the right solutions and technologies to identify and help mitigate the constant barrage.

Read more about solutions in the emt portfolio that enable Threat Detection here.

Vulnerability Management

The Australian Signals Directorate places huge importance within the Australian Information Security Manual on identifying vulnerabilities within organisations and remediating them.

Businesses need a proactive approach in the management of their operational software, applications, and infrastructure systems to help mitigate cyber security incidents.

Read more about vulnerability management and solutions here.

Vulnerability Scanning

A vulnerability scanner is a computer program designed to assess computers, computer systems, networks or applications for weaknesses.

Vulnerability scanning employs software that seeks out security flaws based on a database of known flaws, testing systems for the occurrence of these flaws and generating a report of the findings that an individual or an enterprise can use to tighten the network’s security.

Find out about solutions that address Vulnerability Scanning here.