RISK / VULNERABILITY IT ASSESSMENT | AUDITING | TRAINING | CYBER PENETRATION TESTING | ATTACK SIMULATION | DIGITAL FORENSIC.
[Our experts bring its forensic, technical and investigative prowess to bear in helping to detect, document and remediate]
The defense of privacy and corporate secrets are aspects of growing importance in all fields of business. Increasingly sophisticated technologies may allow unaware intrusion into corporate network through the use of malicious code that, if vulnerable to such attacks, would therefore exposed to a variety of dangerous risks or can be deadly to a company’s security and survival. Such infiltration can be the goal of foreign governments, industrial spies or malicious insiders and may be designed to gather and transmit to the outside sensitive information; to provide regular remote access; or to corrupt or destroy data. Sophisticated attackers deploy code that may not be detected by host-based and network-based firewalls, anti-virus and anti-spyware utilities.
BusinessRisks® Group experts have significant experience in both decrypting purloined data and using techniques to decode encrypted sessions and files of the hostile intruder. We are capable of either eradicating the identified malware, using it to funnel counter-intelligence back to the attacker, or luring the attacker to controlled computers within the network to monitor the attacker’s actions as part of a continued risk assessment.
ITC Security Analysis, Forensic Examination (also in relation to IP theft, Cyber extortion and Crypto virus), Bug Sweeps and Eavesdropping Detection:
Ethical Hacking: Vulnerability Assessment | Penetration Test.
Network Security: Gateway (Firewall/VPN, Remote Access, Mail/Web), Endpoint, Software integrity.
Business Continuity: Data & System Backups | Updates, Disaster Recovery, Incident Response Plan.
Risk Assessment: Overall Risk, Critical Assets, Network Risk, Preventive Penetration Test.
Identity Access Management: Logical (2-factor Tokens, Network access control), Physical.
Confidentiality (encryption): Data at-Rest, Data in-Transit, Disposal.
Compliance: Reporting, Monitoring, Archiving, SIM/SEM.
Regular data security audits: Data Protection, including employee departure cases.
Identification of unauthorized use or access of company resources.
Auditing and Trainings.
Our investigations lead to forensically-sound data collections and documented findings for presentation in Court or to the authorities.