Sikkerhetstesting og Red team

Organisasjoner blir stadig mer avhengig av informasjonsteknologi for å utføre sitt daglige arbeid.

Ved å gjennomføre en sikkerhetstest med Watchcom Security Group, vil du få avdekket eventuelle avvik i forhold til ønsket risikonivå og motta en rapport som beskriver disse. Rapporten beskriver også hvordan man bør arbeide for å utbedre avvik og unngå gjentakelser av disse i fremtiden.

Watchcoms Red Team-øvelser er neste generasjons sikkerhetstester, og passer for alle virksomheter som ønsker å være på høyde med dagens trusselbilde. En Red Team-øvelse kan sammenlignes med en beredskapsøvelse for virksomhetens informasjonssikkerhet, og gir en unik mulighet til å øve på et realistisk angrep. 

TJENESTEOMRÅDER

• Ekstern nettverkstest
• Intern nettverkstest
• Webapplikasjonstest
• Red Team-øvelse
• Phishing-øvelse
• Gjennomgang av kildekode 

TIBER-EU

Den europeiske sentralbanken utarbeidet i 2018 et rammeverk (TIBER-EU) for å teste finanselle institusjoners evne til å oppdage, beskytte seg mot og håndtere alvorlige cyberangrep.

TIBER står for Threat Intelligence-based Ethical Red Teaming hvor eksterne testspesialiser (red team) skal bidra til en virkelighetstro testing av viktige IKT-systemer.

Du kan lese Norges Banks rapport om Finansiell Infrastruktur her.

Watchom har lang erfaring med sikkerhetstesting og tilbyr blant annet red team øvelser hvor du som kunde mottar utfyllende rapport med anbefalinger til tiltak.

TIBER-EU Framework

The Threat Intelligence-based Ethical Red Teaming (TIBER-EU) Framework enables European and national authorities to work with financial infrastructures and institutions to put in place a program to test and improve their resilience against sophisticated cyber-attacks. 

The framework delivers a controlled, custom-made, intelligence-led red team test of an institution’s critical live production systems. The test mimics the tactics, techniques and procedures (TTPs) of real-life threat actors. An intelligence-led red team test involves the use of a variety of techniques to simulate an attack on an institution’s critical functions and underlying systems. It helps the institution to assess its protection, detection and response capabilities. The Red Team test provides a comprehensive end-to-end understanding of weaknesses present in people, processes and technologies, and provides a detailed threat assessment which can be used to further enhance the entity’s situational awareness. 

Watchcom’s Red Team follows a rigorous and ethical Red Team testing methodology and should meet the minimum requirements defined in the TIBER-EU Framework. Intelligence-led red team tests differ from conventional penetration tests, as it assesses full scenarios of targeted attacks against an entire entity. Our Red Team plans and executes a TIBER-EU test of the target systems and services, which are agreed in the scope with the customer. This is followed by a review of the test and issues arising, culminating in a Red Team Test Report drafted by Watchcom’s Red Team.

As an experienced Red Team provider, Watchcom displays the highest standards and meets specific requirements to ensure the test is recognized by Norwegian authorities. The threat scenarios are developed from an attacker’s point of view. When Watchom performs an intelligence-led red team test, we aim to assess the customer’s cyber resilience based on the threat it faces. Watchcom’s experienced Red Team members has a broad set of skills in areas such as red team testing, penetration testing, reconnaissance, threat intelligence, risk management, exploit development, physical penetration, social engineering and vulnerability analysis. 

Want to know more about Watchcom’s Red Team testing? Contact us for an exclusive offer. 

Source: https://www.ecb.europa.eu/pub/pdf/other/ecb.1808tiber_eu_framework.en.pdf