Visualise and mitigate cyber risks

April 2024 Security Services & Risk Management

SecurityHQ announced its latest risk and incident management capabilities for the SHQ response platform. The SHQ Response Platform acts as the emergency room, and the risk centre provides the wellness hub for all cyber security monitoring and actions. This has included a complete rewrite of how risks are visualised and how customers work with their security team.

The Risk Centre is designed to prevent emergencies before they arise. To make this possible, SecurityHQ has combined its intellectual property and knowledge on risk mitigation and cybersecurity, and merged this with several recognised sources in the industry, including the National Institute of Standards and Technology (NIST), the National Cyber Security Centre (NCSC), and MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK), to provide actions on how to identify, map, and raise risks.

“SHQ Response Platform is unique in the industry as it follows a combination of different sources and is always viewed within the context of the customer. The Risk Centre itself is what makes this such a unique offering, as the user is now able to calculate the impact of security threats to the business, the likelihood of risks happening, identify all the different tactics and techniques, and highlight how best to mitigate these risks, all from a single location,” says Chris Cheyne, SOC Director & CTO, SecurityHQ.

SecurityHQ, NIST, MITRE, & NCSC intelligence combined

With the SHQ Response Platform, users are now able to:

• Map threats, assets and vulnerabilities to derive risks.

• Manage risks in accordance with NIST 800-30.

• Identify maturity and high impact mitigations, linked to NIST 800-53.

• Track mitigations, task assignments, and progress.

• Link compliance incidents to risk, to reduce repetitive incidents creating noise.

• Receive monthly tailored executive reports, delivered by data analytics team, to prioritise actions.

• View incident graphic card, which showcases real-time incident information, including time-line perspective tab, graphical representation tab, and MITRE tactics tab.

• Investigate and prioritise incidents. Categorise incidents against MITRE ATT&CK, and assign risk level, based on CIA attributes, asset criticality, and possible impact.

"We have not seen any platforms out there that are doing this. We see a lot of risk management platforms, but they do not deal with the detail of cyber security risks in a very good way. The SHQ Response Platform has simplified cybersecurity, by enabling customers to be part of their security journey. It was built so that businesses could learn more about potential threats, and solve cyber-related issues, together with their designated security experts," says Feras Tappuni, CEO, SecurityHQ.

For more information, contact SecurityHQ Southern Africa, +27 11 702 8555, [email protected], www.SecurityHQ.com




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Keeping safety central to enterprise risk management
Zulu Consulting Security Services & Risk Management
[Sponsored] As employee safety becomes an ever-more critical aspect of corporate risk management, Risk-IO assists risk managers in ensuring a safe working environment, whether in an industrial setting, an office, or anywhere.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Strategies for combating insider threats
Information Security Security Services & Risk Management
In Africa, insider threats pose an increasingly significant risk to businesses, driven by economic uncertainty, labour disputes, and rapid digital transformation. These threats can arise from various sources, including disgruntled employees and compromised third-party service providers

Read more...
World-first safe K9 training for drug detection
Technews Publishing SMART Security Solutions Editor's Choice News & Events Security Services & Risk Management Government and Parastatal (Industry)
The Braveheart Bio-Dog Academy recently announced the results of its scientific research into training dogs to accurately detect drugs and explosives without harming either the dogs or their handlers.

Read more...
New firearms training modules from ITA
News & Events Security Services & Risk Management
The International Firearm Training Academy has launched two new firearms training modules to support career development in the firearms industry: the Maintenance Fitter and the Firearms Custodian modules.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Background checks: risk levels and compliance
iFacts Access Control & Identity Management Security Services & Risk Management
Conducting background checks is a vital step in the hiring process for employers or when engaging service providers; however, it is crucial to understand the legal framework and regulations governing these checks.

Read more...
On the ball or unaware
Technews Publishing Information Security Security Services & Risk Management
Whether an organisation is operating at a high level of information security maturity or has dangerous vulnerabilities that could put an entire business at risk, advanced, strategic penetration testing can uncover its true state of IT security.

Read more...
The bane of burnout
Editor's Choice Security Services & Risk Management
The World Economic Forum has recently formally acknowledged burnout as an occupational syndrome, giving it a status that is even more worthy of being taken seriously and resolved as quickly as possible.

Read more...
A winning combination for modern cybersecurity
Information Security Security Services & Risk Management
Companies are compelled to comply with legislative mandates and, more importantly, implement appropriate security measures for their customers and their most valuable asset – their data.

Read more...