THANK YOU FOR SUBSCRIBING
CIOAdvisor Apac
×
CIO Advisor APAC Weekly Brief
Be first to read the latest tech news, Industry Leader's Insights, and CIO interviews of medium and large enterprises exclusively from CIO Advisor APAC
SEC Consult: The complete cyber security value chain makes the difference for our clients
Michael Ganzwohl, Director, Asia-Pacific RegionAnd when they do it is crucial that companies react quickly and in a very structured manner, to minimize the impact of the hack. Singapore based SEC Consult Asia Pacific works with clients to provide an overhaul of their infrastructure and application landscape by covering the whole value chain— from the security strategy to security architecture, security incident response, and advanced threat detection.
SEC Consult has two main areas of focus; the first is purely technical—security audits and assessments, like penetration tests, red teaming exercises, source code reviews, DDoS benchmark tests, or social engineering tests.
The other aspect involves encompassing processes for the management of information security under ISO27001 standards, secure SW development, risk management, risk analysis and awareness campaigns, and training.
Although no classical product vendor, SEC Consult also offers two products—Cyber Trap and IoT Inspector. The first is a deception based tracking software. CyberTrap captures attackers in a simulated company network and allows a Security Operation Center to observe hackers over long periods of time, accumulating threat intelligence and footprints, for better reactions to future threats.
IoT Inspector is an application, based on an intelligent database of firmware, which identifies vulnerabilities and weaknesses in the existing firmware versions of IoT, ICS and SCADA components.
A CHANGE IN MINDSET
Companies still tend to think, that the achievement of compliance to laws and regulations means to be secure. This is a fundamental misunderstanding of information security. “The difference of compliance to security is like checking, if the windows of the house are locked, but not keeping in mind that the side door is wide open because it was not mentioned in the checklist” says Michael Ganzwohl, Director, Asia-Pacific Region, SEC Consult. And hacker will always go the easy way.
SEC Consult stands for a holistic security approach because compliance offers a very limited purview. To make IT more secure all open doors have to be closed. The earlier (e.g. yet in the design and development phase), the higher the companies security maturity level will be.
Also it is now common sense that it is not avoidable to get hacked. So the management of the security incidents is crucial to mitigate the impact on a company. SEC Consult offers an incident response service, SEC Defence, which offers different levels of services. Right from an emergency hotline service for incident response, to special squad teams that work with companies to manage incidents on-site. SEC Defence is also embedded in the services portfolio of cyber insurance companies. The holder of such an insurance gets different levels of incident response support, based on the agreed service levels.
SEC Consult always looks to forge long-term relationships with its clients to improve all aspects of their IT security infrastructure. Many of the firm's long-lasting client relationships are based on an initial incident response or a first penetration test of a critical application. One client, as an example, was under permanent attack for many years. SEC Consult was called to help, could get rid of the attacker, closed security gaps, trained employees and improved the SW development process as well as the detection capabilities of the client. The client has now reached a much higher maturity level, is more resilient to attacks and successfully handles different security problems on its own. SEC Consult still works for the client, but can now focus on more complex security challenges.
With offices in Malaysia and Bangkok and headquarter in Singapore, SEC Consult plans to gain another foothold in the South-East Asian market by the end of 2018. Also more products are in the internal research incubator to assess if a market launch would makes sense.
A CHANGE IN MINDSET
Companies still tend to think, that the achievement of compliance to laws and regulations means to be secure. This is a fundamental misunderstanding of information security. “The difference of compliance to security is like checking, if the windows of the house are locked, but not keeping in mind that the side door is wide open because it was not mentioned in the checklist” says Michael Ganzwohl, Director, Asia-Pacific Region, SEC Consult. And hacker will always go the easy way.
SEC Consult stands for a holistic security approach because compliance offers a very limited purview. To make IT more secure all open doors have to be closed. The earlier (e.g. yet in the design and development phase), the higher the companies security maturity level will be.
Also it is now common sense that it is not avoidable to get hacked. So the management of the security incidents is crucial to mitigate the impact on a company. SEC Consult offers an incident response service, SEC Defence, which offers different levels of services. Right from an emergency hotline service for incident response, to special squad teams that work with companies to manage incidents on-site. SEC Defence is also embedded in the services portfolio of cyber insurance companies. The holder of such an insurance gets different levels of incident response support, based on the agreed service levels.
SEC Consult always looks to forge long-term relationships with its clients to improve all aspects of their IT security infrastructure. Many of the firm's long-lasting client relationships are based on an initial incident response or a first penetration test of a critical application. One client, as an example, was under permanent attack for many years. SEC Consult was called to help, could get rid of the attacker, closed security gaps, trained employees and improved the SW development process as well as the detection capabilities of the client. The client has now reached a much higher maturity level, is more resilient to attacks and successfully handles different security problems on its own. SEC Consult still works for the client, but can now focus on more complex security challenges.
With offices in Malaysia and Bangkok and headquarter in Singapore, SEC Consult plans to gain another foothold in the South-East Asian market by the end of 2018. Also more products are in the internal research incubator to assess if a market launch would makes sense.
