A mature and relatively secure global manufacturing organization recognized that it can always be better internally while wanting to verify the effectiveness of its outsourced security partners. StratumPoint stepped up to bring their security to the next level.

 

With a significant footprint across disparate geographies, the organization had outsourced much of its perimeter and first-line security responsibilities while retaining more advanced capabilities in-house. Although constantly targeted by a spectrum of threats and attack types, their defenses largely stop all but the threats posed by the most sophisticated of threat actors. To identify the organization’s strengths and gaps associated with likely attack types and their associated tactics and techniques, StratumPoint conducted deep analyses, mapping these variables, and likely targets to the MITRE ATT&CK and PRE-ATT&CK frameworks. With extensive detail across the attack continuum, SPI analysts and experts delivered a highly actionable playbook of threat actor potential movements throughout their network as well as mitigation, detection, and remediation recommendations.

 

Following this extensive effort, StraumPoint Red Teams conducted numerous attack simulations on the organization’s networks using the ATT&CK mapped tactics and techniques to test controls, personnel, and procedures against determined threats. The organization was able to take its security from good to great while identifying areas for improvement and justification for additional resourcing.