Datasheet

WithSecure
Incident Readiness
TM

Prevent an incident from becoming a crisis

The WithSecureTM incident readiness

Why being ready matters
A 2020 study from insurance company, Hiscox found thatfirms rated as novices at cyber readiness were three times
more likely to suffer breaches than those who were rated as
experts1.
Organizations typically struggle to adequately respond to acyber incident, for two reasons:
1.

They lack an understanding of who their relevant threat
actors are, what are their tactics, techniques, andpractices (TTP’s), and how these TTPs evolve.
2. They have insufficient clarity around risks, strategy andresponsibilities to act effectively during an incident.
WithSecure’s Incident Readiness service solves these issues
by enabling organizations to be well-prepared to deal with
relevant incident scenarios.

https://www.hiscox.co.uk/sites/uk/files/documents/2020-06/
Hiscox_Cyber_Readiness_Report_2020_UK.PDF
12

The WithSecureTM incident readiness3

The outcomes that
we deliver
Our services enable you to:
1. Increase Resilience: maintain operations while underattack and minimize disruption.
2. Reduce Risk: enable and support your response teams,minimizing response and recovery cost.
3. Achieve compliance: comply with regulations (e.g. NIS2)
and standards (e.g. ISO 27001, ISO 27035, CIS20,NIST CSF).

The WithSecureTM incident readinessOur approach
Our co-security approach goes beyond helping clients
respond when they suffer an incident. We focus just as muchon readiness, enabling clients to build confident teams that aretrained to respond under pressure, specifically:
1. Focusing resources: through threat profiling andemergency containment modelling, we help organizations
make risk-based prioritization decisions that enhance theircyber defense.
2. Uplifting governance: we review and create playbooks.
We collaborate to develop clear organizational structuresand operating procedures, and enable those involved tocommunicate with each other and with third-party incident
response teams.
3. Exercising response teams: first responder training
and tabletop exercises that enable them to evaluate andimprove their technical and strategic response to realistic
threat events.
Each focus area is composed of discrete activities designed tomature your incident response capability:

Focusing resources

Uplifting governanceExercising response teams

Threat profiling: profile likely
attackers and their tools andmethods.

Incident response planning: create,review, and improve the flow of actions
that need to be taken at each stage of asecurity incident.

First responder training: practicalskills to enable decisive andappropriate response to suspectedincidents.

Emergency containment
modelling: determine the mosteffective containment controls
and identify how to minimize theirpotential business impact.

Incident response playbooks
development: create, review, andimprove the flowcharts and guidelinesthat cover the most likely and impactfulincident scenarios.

Incident response tabletop
exercises: how to triage, investigate
and contain a relevant incident,
preventing it from becoming
a crisis.

Major incident playbook development:
create, review, and improve theflowcharts and guidelines that cover
all the key decisions and events anorganization is likely to face during amajor incident.

Incident management tabletop
exercises: how to manage a complex
cross-organizational response throughsound containment and recovery planexecution.

Crisis management planning: create,review, and improve the flow of actions
necessary at each stage of a criticalincident that requires an organizationwide response.

Crisis management tabletop
exercises: how strategically to steer
a company-wide response to an
existential cyber crisis.

4

The WithSecureTM incident readiness

Our offerings
WithSecureTM Incident Readiness service is offered in three
pre-defined packages, that can be delivered as a project, or an
ongoing program, as shown in the adjacent table:• Standard Package: aimed at organizations that need tocreate basic incident response planning and exercise theirfirst responders.
• Advanced Package: aimed at organizations withestablished basic incident response planning that wish to
expand and improve them to include operational and tacticalteams.
• Premium Package: aimed at organizations with a high-risk
profile, with existing incident response planning, that want toexercise their organization-wide ability to security crises, atoperational and executive levels.
Modules marked with an “+” within a package can be acquired
separately on top of the already included modules.
If you want to improve your organization’s resilience to cyberattacks, being ready is the most worthwhile investment youcan make.

Call us for an initial
free-of-charge consultation.

Focusing resourcesStandard

Advanced

Premium

Threat profiling+

Yes

Yes

Emergency containment modelling+

Yes

Yes

Create

Review and improve

Review and improve

Incident response playbooks

Create up to 3 playbooks

Create up to 6 playbooks

Review and improve

Major incident management
playbook+

Create

Review and improve

Crisis management plan++CreateYes (max. 5 participants)

Yes (max. 10 participants)

Yes (max. 10 participants)

Incident response exercise

Yes

Yes

Yes

Incident management exercise+

Yes

Yes

Crisis management exercise++Yes

Included

Included

Included+

Bi-Annual

Quarterly

Uplifting governance
Incident response plan

Exercising response teams
First responder training

Engagement model
Onboarding
Program governance5Who We Are
WithSecure™, formerly F-Secure Business, is cyber security's reliable
partner. IT service providers, MSSPs and businesses – along with thelargest financial institutions, manufacturers, and thousands of theworld's most advanced communications and technology providers –trust us for outcome-based cyber security that protects and enables
their operations. Our AI-driven protection secures endpoints andcloud collaboration, and our intelligent detection and response are
powered by experts who identify business risks by proactively hunting
for threats and confronting live attacks. Our consultants partner withenterprises and tech challengers to build resilience through evidencebased security advice. With more than 30 years of experience in building
technology that meets business objectives, we've built our portfolio togrow with our partners through flexible commercial models.
WithSecure™ Corporation was founded in 1988, and is listed on NASDAQOMX Helsinki Ltd.