“In a lot of ways, the comprehensiveness and complexity of the security architecture we’ve built is driving our need for the AttackIQ tool — we need an external capability to see that what we expect to be protected is actually being protected.”
“We have a variety of controls with so many overlapping components that we have to question whether we are effectively protecting ourselves or we have a false sense of security. We might have controls X, Y, and Z, and a successful attack should be impossible because each of those controls should catch it. But with…
“I was able to assure the other team that the infrastructure changes they wanted to make were a good idea from a security standpoint,” he continues. “And when my boss asked whether we’d signed off on the infrastructure changes, I didn’t just say, ‘Yes, they explained it all to me.’ I said, ‘Yes, and we…
“One of the attack flows that we are frequently asked to simulate is the full ransomware attack vector. We need to see whether ransomware is likely to get into the network via an email or web download. But we also need to see, if ransomware does get in, whether it can move laterally within the…
“Since we deployed AttackIQ, anytime there is a new adversary or a new attack scenario, analyzing whether our controls are effective against it takes a click of a button. Within hours of a threat first being reported, I can run a test and confirm with the customer that our defenses are sound. Before they even…
“We’ve had a lot of success with the AttackIQ Security Optimization Platform across client engagements, internal training, and also in identifying opportunities to further apply threat-informed defense in our own environment. These simulated attacks that are aligned to the organization’s customized threat model generates visibility into the effectiveness of their controls for a threat-informed defensive…
“We need to know we have done enough to protect the business and the State’s electricity network from cyber threats. That means ensuring we have the right controls in place and that they are capable of helping us identify and respond to the most up-to-date and advanced threats. The value of AttackIQ is clear to…
“With traditional penetration testing we could discover perhaps one way into the network, but with AttackIQ we’re given granular details on how various parts of an execution unfold using its attack graphs. This is much more beneficial to us as we can ensure our controls are effective across all dimensions of impact and it allows…