Furthermore, we used this work to create scenario-based attack tree examples drawing on MITRE ATT&CK framework. Opliciti also conducted a NIST-based cyber security maturity assessment. The assessment identified the organisation’s current state across NIST areas, IDENTIFY, PROTECT, DETECT, RESPOND and RECOVER, recommending proportionate security controls aligned with each sub-category; cognisant of both the threat and scenario-based activity outcomes.
Following a review of the threat and risk, we were further engaged to improve the client’s security posture, supporting deployment of Microsoft 365 technologies and the implementation of Microsoft Sentinel. Our configuration of Microsoft Sentinel included bespoke non-standard connections, specific-use case design, support monitoring and response and staff mentoring.