Gathering intelligence and log evidence to support an investigation often requires having an intimate knowledge of the details that may be available across a vast array of log sets and data sources. The analysts’ awareness of what log data is available and where it is stored increases readiness for incident response.

(more…)

This Playbook provides utilities with practical guidance and critical considerations in preparing for a cyber incident and developing a response plan that enables staff to take swift, effective action. Cybersecurity managers can use the playbook as a step-by-step guide to prepare for an incident.

(more…)

Today’s cybersecurity environment brings attacks to the utility sector with increased frequency and sophistication – and many are struggling to adapt to the new normal. We can no longer treat cybersecurity as though attacks are rare, one-off events. Instead, utilities need to plan for resilience against the backdrop of constant siege. The best way to approach this new threat environment is to develop an incident response (IR) plan to better detect, contain and eliminate cyberattacks with minimal impact on operations.

(more…)

The RSAC SOC team deployed the RSA NetWitness® Platform that included the RSA NetWitness Logs, RSA NetWitness Network and RSA NetWitness Orchestrator components for evolved SIEM capabilities, and Cisco Threat Grid, Cisco Threat Response with Talos Intelligence, Cisco Firepower Threat Defense IDS and Cisco Umbrella.

(more…)

With the increased need for people to work remotely, we are seeing rising levels of targeted cyber attacks. Hackers are indiscriminately aiming for organisations of all sizes. Those with 5-500 employees are especially at risk. The resulting impact could be crippling for most businesses. Loss of financial assets and data, large penalties, business downtime, and damaged relationships with customers are becoming the norm.

(more…)