Making the digital world a safer place to do business

To manage your organisation’s cyber security and ensure the safety of your most valuable data assets. You need to understand the levels of cyber risk you are carrying, to know where you are most vulnerable and to determine how best to prioritise your security budget.

An ITC Cyber Assessment covers:

• Governance (strategy, accountability, board oversight)
• Identification (asset inventory, third-party risk, user access)
• Situational awareness (threat intelligence, collaboration)
• Protection (patch management)
• Detection (continuous monitoring, incident response)

In an age of threat actors with advancing sophistication, a growing number of breaches are achieved or leveraged using application vulnerabilities. Regular penetration testing is therefore a crucial aspect of any robust cyber security solution. It will enable vulnerabilities to be identified before they can be exploited. Penetration testing also provides the initial vulnerability assessment that is an essential part of any cyber security strategy.

Following the penetration test we deliver a report highlighting identified vulnerabilities and recommend the remediation steps necessary to mitigate these vulnerabilities. The report will include an executive summary of the identified concerns and their potential business impact.

An ITC Penetration Test will help you to:

• Uncover critical vulnerabilities in your environment
• Prioritise and tackle risks based on their exploitability and impact
• Meet compliance with industry standardsand regulations such as ISO and PCI-DSS
• Protect your brand and market reputation
• Provide assurances to information security and senior management

With the cyber security talent gap widening – 53% of organisations wait over 6 months for qualified candidates – mid-tier businesses are struggling to find experienced (and certified) personnel who are both knowledgeable cyber professionals and leaders with a high degree of business acumen.

However, hiring the right CISO is not the only challenge. Long-term retention of good CISOs is also difficult as they are often being poached by other companies. So, for many mid-tier enterprises, attracting and retaining a full-time CISO is simply not cost effective.

Utilising CISO as a service will enable you to bridge the gap between senior leadership and information security. When the right CISO is placed within an organisation, they use their field experience and leadership skills to develop information security to not only support the business cyber security needs, but to enable an organisation to keep winning in their marketplace. This service provides:

• Security leadership at a cost tailored to your organisation’s needs
• Direct access to a selection of experienced and highly skilled candidates that can competently drive your organisation towards achieving mature, sustainable information security defences

It’s critical you have a qualified view of the cyber risks your organisation is exposed to. Whether it’s a point-in-time view of your own cyber security maturity, that of a current third-party supplier, vendor or partner, or that of a business you are considering investing in, trading with or acquiring, this service will provide you with the information needed to make informed decisions.

We provide a straightforward report that rates the cyber security of your business or that of a third party, giving comparisons with industry peers.

The ratings report provides data on:

• Compromised systems (evidence of any communication with known malware-associated IP addresses)
• Diligence (the configuration of public facing services, such as emails and encryption)
• User behaviour (potentially insecure practices such as the use of peer-to-peer file sharing)

It will help you to understand the threat to your business, and enable you to take control of, and manage your level of risk. It does this by establishing where you are most vulnerable to cyber attacks, identifying precisely what’s on your network, where your key data is housed, what should be patched and how effective your patching process is.

It also considers the cyber threats to your business – what they are, which are a priority and where you are most vulnerable to the attacks that will inevitably occur.

You will obtain visibility of all your assets (known and unknown), and gain an understanding of those that are critical to your business.
To make this possible we:

• Provide visibility of disparate systems and applications
• Identify your critical data
• Show you where you are most vulnerable
• Review the effectiveness of your current patching process

This is a cost effective, entry-level cyber protection service that guards against network intruders and attackers. Allowing you to be sure your network perimeter is secure, and to know that anyone accessing it, from outside or inside, will not pose a risk to your cyber security. It’s an essential part of the cyber security basic hygiene that all businesses should adopt, and it ensures compliance with the growing demands from tighter regulation.

The service ensures that, in spite of an ever-evolving threat landscape, your critical infrastructure is protected and you have control and visibility of all applications.

ITC delivers:

• 24x7x365 proactive monitoring and management
• Rapid deployment of preventative measures
• Protection against advanced persistent threats
• Actions to stop malware entering your network
• ISO 20000:1 change control processes
• Easy integration with other ITC services

How do you know who’s using your network, when and for how long? Can you compare usage to identify suspicious behaviour? And do you have records that confirm your regulatory compliance?

This service simplifies your security arrangements by providing:

• 24x7x365 monitoring (via our Security Operations Centre in London)
• Time-synchronised logs across your multiple platforms (infrastructure, servers, endpoints and applications)
• Scalable secure storage for the multiple terabytes of data logged each day
• A centralised repository which ensures regulatory compliance

The service also enables better risk management and decision-making, as logged data can be used in sophisticated ‘what ifs?’ to evaluate, and plan for, possible future intrusions. This means appropriate recovery plans can be designed around likely scenarios.

In an ever-evolving threat landscape, with increasing corporate risk responsibilities, more regulated compliance rules and hefty breach fines, how do you manage your cyber risk, your critical data and protect your brand reputation?

The main benefit associated with ITC’s SIEM service is peace of mind. We deliver this through a constant process of monitoring known areas of risk and analysing dynamic threat feeds, which we review against your logging data, asset model and vulnerability management rules.

The service provides:

• 24x7x365 protection
• Access to expert analysts
• Real time threat and response advice
• Straightforward threat reports

In a world where cyber resource is scarce and most businesses require around ten full-time staff to provide 24-hour network monitoring, our experts take the pressure off your security team and help you make the most of your IT budget.

How can you provide a mobile workforce or a diverse customer base with access to your network while ensuring security and complying with data regulations?

And with BYOD and the IoT can you really police who, and what, uses your network without limiting creativity, reducing productivity and potential excluding new business?

Through a process of simplifying, identifying, controlling and remediating, our NAC service enables seamless interaction, while ensuring compliance.

The service provides:

• 24x7x365 proactive monitoring and management across your entire network (wired and wireless)
• Visibility from any device, anywhere, at any time
• Processes for guest access and on-boarding
• Assurances to keep pace with ever-evolving
  cyber threats (patch management policies)
• Automated containment of rogue or compromised devices

Based on machine learning and artificial intelligence, it observes and monitors user devices and network activity to learn your organisation’s way of life. It can then detect threats and anomalies in real time – and act on them.

This will help you manage the evolving risk of cyber attacks and ever-present insider threats, meet increasing regulatory expectations, and make best use of finite resources.

It is an automated process that provides 24x7x365 security risk reduction and real time remediation of incidents that may have gone undetected in traditional event-driven alerting platforms.

In addition it:

• Frees-up existing staff (entire network monitoring
  reduces reliance on security maintenance)
• Brings greater visibility of network traffic
  (maintains regulatory compliance)
• Increases flexibility and cost-effectiveness (additional benefits through integration with existing services)

If malicious software is introduced to your network it can wreak havoc with your systems, devices and data. But with an increasing number of users and entry points, and the ever-present risk of malware emails, how can you provide a sufficient detection and response service?

• 24x7x365 monitoring (via our Security Operations Centre in London)
• Response to critical incidents on all endpoint devices
• Cloud processing of endpoint agent data
• Automated updates (for software and cyber threats)
• Prioritised endpoint actions (from containment to disconnection)
• Real time protection in support of digital/cloud transformation
• A collaborative on-boarding process
• Remediation advice and support
• Replaces and extends traditional signature based antivirus

ITC’s managed EDR service optimises the use of automation, threat intelligence and our Security Operations Centre resources. It enables rapid predictive data gathering, defence updating and corrective action.

It is crucial to understand the exposure your organisation has to phishing, spear phishing, or even whaling attempts. Knowing what these types of attacks look like is the first step in ensuring the safety of your network and, ultimately, the reputation of your business. In raising awareness of these threats, this service strengthens a key part of your cyber security – your people.

Using statistics from a simulated phishing campaign we are able to produce an in-depth executive summary identifying areas within an organisation that would benefit from increased or additional cyber awareness training.

The service provides:

• Sophisticated and safe simulated phishing campaigns run on a quarterly basis
• Increased awareness of phishing attacks within an organisation
• An understanding of the responsive actions employees should take

Constant monitoring is needed to track current and potential cyber threats, which may be specific to your organisation or a global trend. Threat actors are varied and many.

Information is disparate, and difficult to find, mine and interpret. The time it takes to identify threats and react during incidents is critical. And resource constraints, limited data sets and data overload are a
challenge.

ITC’s managed Threat Intelligence is a professionally-deployed and maintained service that ensures your key information is protected. It alerts you to relevant information, filters out false threats, spots future threats and enables a proactive response. And by using prediction and prevention, rather than detection after the event, you can make the best cyber security decisions for your business.

The service provides:

• Broad visibility, including areas such as brand monitoring
• Business risk-aligned reporting
• Alerting with context triggered by new threats or data leaks
• Real time threat identification through machine learning
• Sensitive projects support
• Security operations access to the threat intelligence platform
• Integrated risk scoring

It’s estimated that over 60% of breaches are linked to third parties. So, understanding and mitigating this risk is a business imperative. Whether it’s vendors, clients, partners or acquisitions you’re dealing with, continuous visibility of their security performance is critical. Poorly rated third parties carry a significantly higher risk of cyber breach.

Using externally observable data, our analysts can rate all the third parties you interact with.

The service provides:

• A stress-free on-boarding process
• 24x7x365 monitoring
• Industry recognised ratings from expert analysts
• Risk identification and advice for remediation
• Peer and industry comparisons
• Frees up time for your valuable internal resources

The reality today for most organisations is that they would struggle to deliver Incident Response in-house in the event of a cyber breach. Most organisations site the training requirements necessary to keep internal IT teams skilled up as well as the lack of hands-on IR experience in their IT teams as some of the major challenges to running their own IR service. Combined with additional headaches that come with investigating one’s own people, processes and technology at a time of crisis and heightened tension, businesses are finding that they benefit greatly from engaging the services of an experienced and professional Incident Response managed service.

ITC’s Security Incident Response Service delivers a 24x7x365 Cyber Security Incident Response Team (CSIRT) to help customers deal with cyber security emergencies. Our seasoned analysts have years of industry experience and will establish the type and source of an attack, the data targeted and will recommend which protective measures to take.

• Reduce Cost: Avoid the hidden financial costs associated with a serious data breach; employee overtime, lost productivity, legal fees, and increased insurance premiums.
• Remediation Advice: Our CSIRTs are able to quickly and effectively assess damage caused to your organisation and tailor a comprehensive response to limit further damage and remediate effectively.
• Effective Communications: Our teams are expertly trained to translate and deliver security knowledge into clear, concise language that Management can understand.
• Disclosure Advice: Every UK organisation has the responsibility to disclose a breach to the UK ICO. ITC can help you navigate these complex reporting requirements and advise on the sensitive nature of the timing, messaging and disclosure to the wider public.

To address evolving cyber threats, businesses need to be proactive rather than reactive. Increased responsibility on internal IT teams and manual processes divert the focus of budgets and resources.

A partnership with ITC will alleviate internal pressures, provide access to security experts and industry-leading automated tools and technology so your business can focus on the bottom line.

Through built-in machine learning and artificial intelligence, ITC Sentinel SIEM brings automation and orchestration to multiple security tasks. Adhering to a range of compliance rules and regulations, the need for centralised logging is addressed, allowing data to be collected at cloud-scale, providing unlimited compute and storage capability.

The service provides:

• 24x7x365 management, detection and response
• Access to expert analysts
• Automation of common tasks and incident response
• Easy integration into behavioural analytics tools, workflow management systems (ServiceNow etc.)
• Simple and scalable pricing

Cyber threat identification also becomes more powerful as more data sources and customers are added. One entity alone would have limited data points but when combined with others, can benefit from larger scale analysis as part of a trusted group.

• 24x7x365 management
• Access to fully qualified security analysts
• Faster detection of attacks at earlier stages of the cyber kill chain
• Threat hunting across customer data
• Improved detection of threat campaigns through shared behavioural indicators
• Automated sharing of outcomes enables businesses to automate human intelligence in investigations