Challenges

  • Major security investments without knowing how they hold up against an organized attack

Scope

  • Tailored attack scenarios based on attacker tactics, techniques and procedures (TTPs)
  • social engineering
  • business-logic testing
  • measurement of detection and response times

Deliverables

  • Scenario and findings report
  • leadership briefing
  • detection and response improvement recommendations

Target clients

Banks, government entities and critical infrastructure

Value

A practical measure of detection and response effectiveness based on simulation results.

Success indicators (set with the client)

Mean time to detect (MTTD) · share of scenarios detected

Starting the engagement

Scope, deliverables, requirements and success indicators are agreed before delivery. Include the service name and code in your enquiry.

Client requirements

The catalogue specifies no additional prerequisites for this service. Access, stakeholders and the agreed scope are confirmed before delivery.