Predict

• Threat Intelligence
• Business Impact Intelligence
• Vulnerability Intelligence
• Risk Intelligence

Prevent

• Application Software Security
• Boundary Defense
• Continuous Vulnerability Assessment
• and Remediation
• Controlled Access Based on Need to Know
• Controlled Use of Administrative Privileges
• Cryptography
• Data Loss Prevention
• Inventory of Authorized and
• Unauthorized Devices
• Inventory of Authorized and
• Unauthorized Software
• Limitation and Control of Network Ports,
• Protocols, and Services
• Malware Defenses
• Penetration Tests and Red Team Exercises
• Personnel Security and Secure Culture
• Physical Security
• Policy, Standard, Guideline, Practices
• Secure Configurations for Hardware
• and Software on Laptops Workstations and Servers
• Secure Configurations for Network
• Devices such as Firewalls, Routers and Switches
• Secure Network Engineering
• Security Skills Assessment and Appropriate Training to Fill Gaps
• Wireless Device Control

Detect

• Account Monitoring and Control
• E-Discovery
• Collection, Maintenance, Monitoring, and Analysis of Security Audit Logs
• Network Monitoring
• System Monitoring

Respond

• Cyber Forensics and Investigations
• Litigation Support
• Data Recovery
• Incident Response