INCIDENT RESPONSE MATURITY ASSESSMENT

Few organisations really understand their ‘state of readiness’ to respond to a cyber security incident particularly a serious cyber security attack, and are typically not well prepared in terms of:

  • People – assigning an incident response team or individual; providing sufficient technical skills; enabling decisions to be taken quickly; and gaining access to critical third parties
  • Process – knowing what to do, how to do it and when to do it. This includes identifying cyber security incidents, investigating situations, taking appropriate actions (e.g. contain incident and eradicate cause), and recovering critical systems, data and connectivity.
  • Technology – knowing data and network topology, determining where Internet touch points are and creating / storing appropriate event logs.

Request a free quote

CREST CSIR, CREST, N-CERT

With the level of sophistication and targeted nature of modern day security breaches, knowing your incident response maturity is vital. Today’s world demands that your organisation has to be prepared for a cyber-breach at any time. The need to respond fast and effectively in the event of a real or suspected data breach is essential to the survival of your company.

Nettitude’s Incident Response Maturity Assessment will provide valuable insight into your capability in the previously described domains.   Part of the assessment includes the benchmarking of your current capability against a robust Incident Response capability framework.   Analysis of the results will provide a roadmap towards improvement.

The assessment will also include a review of your existing logging capability and make recommendations on how to enhance your logging capabilities in order to maximise the capability of any SIEM or SOC solutions that you have in place.

Deliverables & Output

Nettitude will look to present a holistic set of recommendations and remediation advice and guidance for moving forwards. This will be detailed in the form of a roadmap document. This will enable the organisation to prioritise any remediation tasks and work required. Nettitude is always keen to debrief these reports and will always provide clear guidance around the suggested actions. As well as the technical detail and recommendations Nettitude will provide strong guidance around the overall risk and processes to manage the threats that exist in today’s modern cyber-environment.

All findings will also be presented back to the customer in the form of a strategy debrief.  This allows senior management to understand why security should be a focus, for the organisation, what they are currently doing, where their vulnerabilities currently lie and how they may be targeted and which controls they should focus on as part of their forthcoming cyber strategy.

Nettitude’s Approach

As a security consultancy and solution provider, data security is at the heart of what we do.

Strong Technical Services

Our consultants are not simply auditors but all have a strong background in networking, technology and solutions. We are security evangelists who believe passionately in what we do. We work hard to deliver solutions and best practice guidance to help our clients meet their needs. We seek to develop close working relationships with our clients in order to tailor all of our services to your needs, timescales and requirements.

Risk Reduction and Management

Our account and project managers, as well as our technical consultants, will work with you to deliver services and solutions that are suitable for you. We are highly focused on risk reduction and management. As well as meeting the requirements of regulations and standards, we help to safeguard focus and attention that is delivered in the areas where the highest risks are presented.

Pragmatic, Manageable Solutions

Nettitude will work closely with NLM to develop an appropriate, focused and manageable set of security services. We will seek ways to reduce the risks, manage activities and effort, and meet the specific requirements of your business and your products/services. Your customer’s data and product values will be protected.