Responding to your current
and future IT security needs

A stage-by-stage
cybersecurity
approachBuilding a security foundation for your organization by choosing the right product orservice is just the first step. Developing a forward-thinking corporate cybersecurity
strategy is key to long-term success.
Kaspersky’s Enterprise Portfolio reflects the security demands of today’s businesses,
responding to the needs of organizations at different levels of maturity with a stage-bystage approach. This approach combines different layers of protection against all types ofcyberthreat to detect the most complex attacks, respond quickly and appropriately to any
incident, and prevent future threats.

Threat types and the expertise
required to counteract them

Targetedattacks

Evasivethreats

Commoditythreats

Mature IT
security capability

IT security

ITEXPERTISE
REQUIREDSOPHISTICATIONOF ATTACKSAs IT environments growin size and complexity,
businesses face
increasingly sophisticatedthreats that require themto constantly advance theircybersecurity expertise toenable effective defenses.

Our experience and continuous threat research allows us to divide
all of the available threats into categories. The majority of thethreats are at the bottom of the pyramid. These are generic threatsthat require only basic defensive mechanisms and IT security
hygiene to be in place. If you move up the pyramid, you start seeing
more advanced threats that evade preventive protection by using
known Tactics, Techniques and Procedures (TTPs). Threat actors
in this category, for example, could get hold of and reuse the moresophisticated tools that their better-resourced ‘colleagues’ havealready developed. Most breaches are from this category. And,
finally, at the very top there are complex APT-like threats and attacks
that use unknown TTPs. Threat actors on this level have unlimited
resources to develop highly sophisticated tools and methods withvery specific targets in mind.

Figure 1. Threat types and the expertise required to counteract them

To drive successful business growth and maintain competitiveness,businesses continuously increase their reliance on information
technologies. Ongoing digital transformation expands the potential
attack surface through more and more interconnected systems. WithIT environments growing in size and complexity, companies face theincreasing sophistication of threats requiring them to continuously
advance their cybersecurity expertise in order to enable effective
defenses.

A stage-by-stage cybersecurity
approach
In alignment with the threats and the varying degree of ourcustomers’ cybersecurity capabilities we’ve employed a strategy ofgoing to market with our products and services to help organizations
prevent 90% of threats automatically - and then systematically, andmethodically empower them to add new and advanced capabilities tocounter more sophisticated threats as their business develops.
At Stage 1 we provide all our leading preventive products along withpremium support and professional services to ensure that customers
extract maximum benefit from our technologies. At Stage 2 as you
move up the pyramid there is a growing need to counter threats thatcircumvent existing preventive mechanisms. To support resourceconscious protection from advanced and evasive threats, we provide
a cloud-enabled solution which complements the customer’s own
basic cybersecurity skills with managed detection, prioritization,and guided response, together with an automated toolset that helps
security personnel to identify, analyze and respond to the moredangerous evasive threats more effectively. Organizations at Step 3
have higher chances of facing an actual APT and they need effective
defenses against unknown TTPs. To fulfill the needs of mature IT
security teams, Kaspersky delivers an innovative and balanced
combination of technologies and services to address the challenges
of today’s most sophisticated threats and targeted attacks.

Taking into accountgrowth in the number andcomplexity of threats,
IT security maturity,
cybersecurity skills andexisting budgets, there
is a clear need to startbuilding a comprehensive
and adaptive security
strategy.

Kaspersky Managed Detection and Response enables an instantly
matured IT security function without the need to invest in additional
staff or expertise. At the same time it allows incident triage
processes to be offloaded to Kaspersky, so that mature IT security
teams can focus on responding to the critical outcomes delivered.
TARGETEDSOLUTIONS

STAGE
Kaspersky
Industrial
Cybersecurity

3
TARGETEDATTACKS

Kaspersky
Fraud Prevention

Mature ITsecurity
capabilityor SOC team

STAGE
KasperskyResearch Sandbox

2

Kaspersky
Threat Attribution
EngineEVASIVE
THREATS

Kaspersky
Private Security
NetworkSTAGE

Kaspersky
IoT and Embedded
Security

Internal
Expertise

Extended Detection
and Response

Immediate
supportAssessment

PeopleKaspersky
ThreatIntelligence

Kaspersky
Cybersecurity
Training

Kaspersky
Kaspersky
EDR Expert Anti Targeted
AttackPlatform

Kaspersky
Incident
Response

Kaspersky
Security
Assessment

Kaspersky
Security Awareness
Ultimate

Visibility andResponse

Detection
Enrichment

PeopleKaspersky
EDR Optimum

Kaspersky
Threat Intelligence
PortalKaspersky
Security Awareness
Advanced

IT Security

Endpoint

1
COMMODITY
THREATSIntelligence

ITNetworkKaspersky Kaspersky Kaspersky
Kaspersky
Kaspersky
Endpoint
Embedded Hybrid Cloud Security for Mail Security
Security
SystemsSecurityServerfor Internetfor Business Security
GatewayFigure 2. A stage-by-stage cybersecurity approach

Kaspersky
ManagedDetection andResponse

DataSupport

PeopleKaspersky
Securityfor Storage

Kaspersky
Premium Supportand Professional
Services

Kaspersky
Security Awareness
Essential

Security Foundations

Block the maximum numberof threats — automatically.

Security Foundations is a fundamental stage for organizations ofany size and infrastructure complexity when building an integrated
defense strategy against complex threats. It provides multi-vector
automated prevention of a large number of possible incidents causedby commodity threats. This stage is usually sufficient for smaller
enterprises with IT teams only.
Companies can’t skip this stage and move directly to implementing
advanced detection and response technologies. This is because
most of those technologies require human involvement which is, ofcourse, expensive and requires expertise. So expensive IT security
staff get overwhelmed with alerts, without most threats even being
prevented. And instead of proactively hunting for hidden threats andresponding to incidents, IT security staff waste time sorting throughand prioritizing thousands of alerts, leaving most of them untouched.

• Multi-vector automated prevention of alarge number of possible incidents caused
be commodity threats• Usually sufficient for smaller enterprises
with IT teams only
• The fundamental stage for organizationsof any size and infrastructure complexity
in building an integrated defense strategy
against complex threats

Figure 3. The key characteristics of Stage 1

Optimum Security

Focus on advanced detection anda fast response to threats evading
preventive protection.

With the growing size and complexity of IT environments supporting
business development and growth, organizations increase theirpotential attack surface too. They become more attractive targets
for cybercriminals and are at higher risk of facing advanced threatsthat evade automatic prevention mechanisms.
As the potential attack surface grows, the importance of establishingat least basic incident response practices cannot be underestimated.
These companies usually begin developing an IT security function
inside their IT department, but its maturity is still low. Small IT
security teams require instruments for automated detection ofadvanced threats and centralized response as the foundation forfurther maturing its function. Staff training also becomes essential
to raise security awareness across the organization and motivating
all employees to pay attention to cyberthreats and how to handle
them – even if this is not considered to be a specific part of their job
responsibilities.
Building on from Security Foundations, Optimum Security enables
organizations with IT environments that are growing in size andcomplexity to counter commodity threats and threats thatcircumvent existing preventive mechanisms. A resource-conscious
solution is ideal for small IT security teams with basic expertise.
This stage enables customers to enhance their own detection
and response capabilities, while benefiting from 24/7 managed
protection. At the same time, a portfolio of computer-based
gamified training products helps to shape employees’ cyber-hygieneskills and motivate them to maintain safe practices.

• Security Foundations successfully inplemented• IT environment is growing in size and complexity, creating an
increased attack surface• A small IT security team is in place, with some expertise• Incident response capability is important to you
ATTACK

Figure 4. The key characteristics of Stage 2

Expert Security

Readiness for complex and APT-likeattacks.

Adopting manual threat hunting practices and advanced use cases
for threat intelligence while having a fully-equipped team withdeep knowledge in specific topics like digital forensics and malware
analysis will be vital for organizations at Stage 3. They will benefit
from establishing trusted relationships with a highly qualified
partner to quickly complement their existing capabilities with more
specific skill sets when required. Kaspersky Expert Security delivers
an Extended Detection and Response platform together withunequalled expert guidance, assessment, threat intelligence andskills training, which combine to cover the end-to-end security needsof any enterprise with a mature IT security function to face down
today’s complex threats, APT-like and targeted attacks.

• IT environments are becoming complex anddistributed• IT security team is mature or a SecurityOperations Center is established• Risk appetite is low due to higher costs ofsecurity incidents and data breaches• Regulatory compliance is a concern

Figure 5. The key characteristics of Stage 3

Why Kaspersky
Our mission is to build asafer world. We believe
in a tomorrow wheretechnology improves allof our lives. Which is why
we secure it, so everyone
everywhere has theendless opportunities itbrings.

Cyber Threats News: www.securelist.com
IT Security News: business.kaspersky.com
Kaspersky technologies: kaspersky.com/technowiki
IT Security for SMB: kaspersky.com/business
IT Security for Enterprise: kaspersky.com/enterprisewww.kaspersky.com

We are a global company, with a global vision and a focus
on international markets. We operate in 200 countries andterritories and have 34 offices in more than 30 countries.
Our team consists of more than 4,000 highly-qualified
specialists.
We are constantly innovating, delivering protection that’s effective,
usable and accessible. Our deep threat intelligence and security
expertise is constantly transforming into innovative security
solutions and services to protect businesses, critical infrastructure,
governments and consumers around the globe. Our comprehensivesecurity portfolio includes leading protection, detection andresponse solutions and services to fight sophisticated and evolving
digital threats. Over 400 million users are protected by Kaspersky
technologies and we help 250,000 corporate clients protect whatmatters most to them.

We are proven. We are independent. We aretransparent. We are committed to building a safer
world, where technology improves our lives. Whichis why we secure it, so everyone everywhere has theendless opportunities it brings. Bring on cybersecurity
for a safer tommorow.
Know more at kaspersky.com/transparency© 2022 AO Kaspersky Lab. Registered trademarks andservice marks are the property of their respective owners.