Defense Methodology:

Assess

​

SuperCybex’s team will get to know the organization in question by understanding the business model, business structure, business processes, critical resources, physical and digital architecture, and user
behavior.
At the end of this process our cyber experts will issue an assessment report that will be shared with the organization’s management team to determine how best to procced.

​

​

Detect

​

Depending on the decision made in the previous step our experts will conduct a comprehensive site survey that will cover all points of concern:

• Physical access and security systems

• Critical infrastructure, internet connectivity, power, and backup power

•  IT network and segmentation (internal)

• Network connectivity and FW security

• Server and storage

• Cloud connectivity and security

• Data and applications

• End user equipment

• Cellular Media security

• Industrial and machinery controls

• Supply chain and outsourcing security

• Purchase and development security

• Human resources and employee awareness

• Final review to verify compatibility

​

​

Plan

​

Following the guidance set forth in the comprehensive site survey, our project manager along with the solution architect and a team of experts will get into the development phase of the solution. This includes identifying the risk’s potential impact on the organization and establishing a framework for a secure and reliable security system that will ensure business continuity.

​

Protect

​

Cybersecurity is the practice of protecting infrastructure, systems and networks from cyberattacks. These attacks are aimed at accessing, changing, or destroying sensitive information, extortion with the goal of interrupting normal business processes. Cybersecurity is at the foundation of your organization’s defense against security threats. SuperCybex offers two approaches: Network Cybersecurity and Zero- Trust Cybersecurity

​

​

Network Security

​

Typically designed using a cybersecurity architectural framework that specifies the structure, standards, policies and functional behavior of a computer network, including both security measures and network features. With this approach, security controls related to the overall business will allow the organization to maintain confidentiality, integrity and availability of the data within its business operations. Most businesses already have some elements of cybersecurity in place, including firewalls, antivirus, and intrusion detection systems. To the extent possible, our team of experts will endeavor to keep costs down by working with your existing cyber-infrastructure by doing the following:

• Recommend suitable enhancements to improve information security performance.

• Review the business and security environment to identify existing requirements.

• Review security policies, standards and procedures by considering the threats identified and other information collected.

• Test incident response plans periodically to ensure response times and executed procedures are acceptable.​

​Unfortunately, in the modern threat environment, firewalls, antivirus, and IDS only address external threats and are simply insufficient. For this reason, many organizations are adopting a “zero trust” approach.

​

 Zero-Trust Architecture (ZTA)

​

Zero-trust architecture (ZTA) is a set of security principles that move defense from a traditional static approach (FW, antivirus, Web Filter etc.) to a preventative approach. ZTA assumes there is neither trust between assets and user accounts, nor between local area networks and the internet.
Zero trust philosophy focuses on protecting the business assets, services, application, workflows, and network accounts.

​

Maintain

​

“Fixing things before they break.” Preventive maintenance is the act of performing regularly scheduled maintenance activities to help prevent unexpected failures in the future and is one of the key parts of a successful cybersecurity project.

 

• Develop IT security policy and operational procedures.

• Document information related to IT security attacks, threats, risks, and controls.

• Standard methodology for performing security tests in accordance with security requirements.

• Review procedures based on an organization's security risk management plan.

• Incident response plan against industry best practices.

• Refresh response plans periodically to ensure relevance.

• Identify threats and risks that are relevant to organizations operations and systems.

• Monitor the effectiveness of the plans and adjust accordingly

​