We also work on solutions for responding to an imminent attack. Analysing what’s happening, thinking of response options, and taking the best course of action to avoid or stop the attack and prevent further damage. We develop technology to automate such responses as much as possible. However, collaboration between humans and machines remains crucial for effective and efficient cyber security operations. We focus on proactive and reactive response actions:
Proactive response: the organisation is warned about a software vulnerability or about a new, frequently used method of attack. An analysis must then show what damage could occur and what options there are to prevent this.
Reactive response: we respond to an attack within the organisation's infrastructure. It’s important to prevent further damage by denying the attacker access to the infrastructure, isolating affected systems, and removing malicious software.