The Cyber Defense eMagazine March Edition for 2024

Offering: One-time managed service: In-depth
Timing: Normally less than three weeks.
They are often used during the due diligence or earlier based on the acquirer's requirements.
Deliverable: A more detailed report of the artifacts discovered during the one-time summary report.
• Typically, 5-10+ pages.
• Duration based on the requirements per customer and engagement.
• Optionally, identify additional areas of risk discovered.
• Provide areas of concern that could be addressed through additional research.
• Research can focus on areas of concern raised in the summary report.
One-time managed service: Mitigation
Timing: Varies and can be done pro- or post-acquisition.
Used for: Aid the victim in mitigating the breach and ejecting the threat actors from their network.
Deliverable: Collaborate with the affected company to assist them in identifying and addressing known
threats. Additionally, evaluate the effectiveness of the implemented solutions.
Red Teaming
Timing: Varies and can be done pro- or post-acquisition.
Used for: Aid the victim or the acquirer in identifying and mitigating likely avenues of a potential breach(es)
and software and hardware vulnerabilities.
Deliverable Vulnerability assessment and penetration testing. To include strategic intelligence, including
IoC, endpoint, and vulnerabilities.
Managed engagement
Timing: Varies. Duration based on the requirements per customer and engagement.
Used for: To help any parties learn more about the threat and the efficacy of the mitigations put into place.
Deliverable: Provide ongoing research to support the mitigation of identified threats.
Cyber Defense eMagazine – March 2024 Edition 86
Copyright © 2024, Cyber Defense Magazine. All rights reserved worldwide.