Resiliency Engineering

Problem We are Trying to Solve:

Planning and then implementing business continuity plans, disaster recovery plans, incident response plans, backup strategies, and hardened IT infrastructures is a complex problem.

Value Created by Solving the Problem:

• In the event of a disaster, be flexible enough to move your digital business assets without a herculean effort
• Be a hard target, not a soft or easy target, when an adversary looks at your defensive posture
• Be resistant to hardware failue and data loss, with secure and automated backup solutions
• Make better use of your IT employee's time, by not having a bunch of fires to put out and allow them to get into a creative forward-leaning mindset
• Stop losing sleep over "snowflake" servers and having to worry about the special dance you have to do when rebooting that old monolithic server
• Better asset and patch management, supported by a development environment
• Better support and response to the needs of the business

What is the Impact/Solution:

• DevOps drives a cultural change in the way that IT and other departments interact with each other
• A technology shift is required to move from monolithic server architectures towards containers and micro-services that better utilize cloud computing
• Code rewrites, team shuffling, business impact analysis - a hard look in the mirror at what is your business's center of gravity and how to protect it

We help you sleep better at night, knowing that your information systems are resilient to outages, disasters, breaches, etc.

Threat Hunting

Problem We are Trying to Solve:

This is all about answering the question - am I compromised? IT defenses are built and then they just sit there assuming you are not breached. But what happens if you already were compromised or you were breached and it went undetected?

Value Created by Solving the Problem:

• You know the old saying about assuming - “Ass..u..me” - don't be running blind with regard to what is happening on your networks
• You get an excellent understanding of your network's baseline, so you can know what is normal and investigate what is abnormal
• “Don't depend on the enemy not coming; depend rather on being ready for him.” – Sun Tzu

What is the Impact/Solution:

• An active defense is appropriate for any organization's maturity level
• This can be performed as an overlay to your current operations with no impact to IT staff productivity
• A combination of open source software and network TAPs can be deployed to gain the best observational advantages

We help you protect your digital assets.

Network Analysis

Problem We are Trying to Solve:

An event causes a network outage - this outage could be a hardware failure, software misconfiguraiton, or a malicious actor on your network. How do you figure out which of these has occurred so you can begin to resolve the issue?

Value Created by Solving the Problem:

• Proactive network analysis (i.e., before something breaks) allows you to capture network baselines, which are critical for troubleshooting, optimization, forensics, and threat hunting
• To solve tough problems, you have to know what is occurring at the packet level
• Network analysis is critical information for a security operations center or network operations center and will increase your visibility into your environment

What is the Impact/Solution:

• We can build out a wide range of custom packet capture solutions. From small incident response fly-away kits to large-scale enterprise packet broker implementations, feel free to think of us as the "custom home builder" of network analysis solutions
• Better asset management and device discovery through a ground truth perspective
• Resources are required to capture packets - hardware placed strategically to capture the network traffic, storage for the archived PCAPs, and software to query the data for actionable information

We help you determine the root cause of events.

IT/ICS Integration

Problem We are Trying to Solve:

Value Created by Solving the Problem:

• Industry security mandates are en route if they haven't hit your specific sector already. Be proactive and weatherproof yourself from the inevitable storm
• Taking a deep dive into your IT/OT network assets and their protocols is pivotal when building network baselines
• These critical systems are in need of some cybersecurity-love

What is the Impact/Solution:

• Incorporating IT security devices is not a "one size fits all" solution to solving security and visibility within ICS environments
• Network architectures may have to change/grow to accommodate the control DMZ(s) that supports the Purdue model
• A creative approach is required to test and deploy within these environments and often requires significant custom development

We help you safely and reliably talk between two technologies that never wanted to be in the same room.

Coaching

Problem We are Trying to Solve:

Let's be real, IT is challenging. It's tough to hire talent, retain talent, train talent, get talent to play nicely, and it's tough herding all the machines.

Value Created by Solving the Problem:

• Many times over, we've developed complex training plans for highly specialized teams that allowed us to accomplish the mission. We will be bringing this custom approach to the unique qualities and requirements of your team.
• The best IT stack ($$$) can fail because of the lack of execution of the team driving it
• Leaders need training too, they need to recalibrate, make sure their navigational compass is set in the right direction, and reflect on the culture they are providing for mission accomplishment
• As a technology leader, keeping up with the pace of change within this discipline is dizzying. We can help you develop vetting frameworks and vendor bake-offs to decide which things truly need to be on-ramped to support your business goals
• Offensive and defensive teams need to practice and we love to facilitate. Whether that be through the creation of ranges, scenarios, or table top exercises we are all about tough realistic training that prepares you for game day

What is the Impact/Solution:

• A serious training and team development program will naturally follow the forming, storming, norming, and performing stages. Leave the egos at the door and be open to positive change
• Vendor bake-offs require realistic test cases that determine the best product for the problem. This requires research, test tools, and lead times to run trials against all the devices under test. It is a deliberate and well-planned effort
• Practice makes perfect and leaders need to afford their teams the opportunity to train and grow

We help you see through the IT marketing fog and develop high-performing teams.