Threat actors will look for any opening to get into an environment. Once on a machine or in a user’s account, they will pivot to additional accounts on the network. Using the same protection across all endpoints and people eliminates the potential for a threat actor to get in via an opening that could have been monitored.

Yes, most businesses have some sort of MFA in place. we recommend that your choice of MFA:

• is rolled out to all internet facing applications
• uses an MFA method that isn’t deprecated or weak
• can keep logs of and records in a central location.

You can start with questions like:

• How long could you afford to be down for a security incident?
• What is your biggest security concern?
• Do you know how threat actors get into most environments?
• Do you have a formal plan if you were to experience a real security incident
• Do you have a written incident response plan?
• Do you have compliance that is related to security?
• Do you have cybersecurity insurance?
• Is somebody watching your EDR solution 24/7 and responding to alerts?

RATs are a type of malware that provide a backdoor for administrative control over the targeted computer. RATs enable intruders to do almost anything on the targeted computer, such as monitoring user behaviour, accessing confidential information, activating the system’s webcam, and distributing more malware.

Trojans are a type of malware that mislead users of their true intent. They are often disguised as legitimate software, or can be emedded in an email attachment disguised as an invoice, that once clicked will silently install. When activated, they can enable cybercriminals to spy on you, steal your sensitive data, and gain backdoor access to your system.

• MFA is an added step when you log-in to something. This could be your email, a VPN, web applications, servers or even your computer itself.
• Where an effective MFA has been put in place, bad actors can’t access your resources even if they’ve stolen your primary credentials.
• MFA is becoming very intelligent, and has the capability to look at risk signals and take advantage of phish-resistant authentication methods to overcome new types of cyber threats like MFA harassment.

Ransomware is a type of malware that encrypts the files on a victim’s computer or network, making them inaccessible and demanding a ransom payment to decrypt them. Victims are often threatened with permanent loss of data or exposure of stolen data if the ransom isn’t paid.

Managed EDR - The old way of just putting protective solutions in place is not enough. We must assume compromise, and an EDR is great for alerting when there is compromise, as well as flagging suspicious behaviour before it turns into a ransomware-type event.

Security Awareness Training - Threat actors target their attacks at people. This may be via phishing emails or malvertising attacks. They know that most users are the weakest link in a company’s security environment. If you can harden your users so that they don’t click on links or are not tricked by a threat actor, your overall security posture improves dramatically.

This will depend on the different products you are implementing. All three of our products generally help in some part of cyber insurance/compliance regulations, but it will depend on the exact questions being asked of the Insurance Underwriter of the Compliance regulations. We can review your policy together.

There is never any solution that will completely protect a business from a ransomware attack. A defence-in-depth approach with multiple layers of protection lowers the risk by making the business a harder target to compromise and automatically taking action when a threat is detected.