Cybermind Security Solutions
Are You Prepared For Next-Gen Cybercrime?

In the race for economic supremacy, organizations are confronted with a new reality: next-gen cybercrime. This emerging reality becomes more critical, considering the geopolitical scenario, which is marred by ideological and social tensions that may encourage cyber terrorism. The global trade in “cyber weapons” provides an opportunity to acquire a wide range of malicious software that are extremely sophisticated but do not require special technical skills to use it. The emergence of the dark web as a thriving centre for these next-gen cyber weapons is a cause of worry to say the least as anyone with a tor-browser and bitcoin can carry out state-of-the-art cyber attacks.

According to a study by Cybersecurity Ventures, cybercrime will exceed $6 trillion annually by 2021, which is 100 per cent rise from 2015. Governments and organizations have a lot to lose if they fail to secure their assets from cyber terrorism. Critical infrastructures exposed to the cyber attacks will have a massive impact on the economy, wellness, health and safety of the citizens while organizations will have a questionable reputation which will have a direct effect on their revenue and strategic partnerships.

“A clear vision of the current threat scenarios and related cyber risks is the main driver for our services”

The scene at boardrooms across the globe paints another grim picture. There is no consideration of actual measurement of cyber risk in terms of its impact on an organization’s financial, operational and brand risk. Lack of quantifiable evidence in demonstrating the efficacy of security controls in place leads to poor cyber hygiene. The migration to cloud-based and decentralized infrastructure is adding to the concerns of the security professionals as they have far less visibility about the state of the security. A change in approach is called for, which is based on dynamic risk management to improve their reactive capability to unknown and unpredictable attacks as well as the resilience in case of extended informatic crisis. “A clear vision of the current threat scenarios and related cyber risks is the main driver for our services,” says Fabrizio Matta, CEO of Rome based Cybermind Security Solutions. Their offerings extend the conventional security infrastructure to high specialized models and methodologies for the threat modelling, supply chain risk assessment and Advanced Persistent Threat (APT) handling.

Human capital as a driver for innovation

Given the lowering of barriers of entry to cybercrime, Cybermind Security Solutions lays strong emphasis on continuous improvement and enhancement of its human capital. Today’s customers want to operate digitally and securely and to gain their trust a continuous improvement of professional skills plays a vital role. Matta’s team aim to address a comprehensive information security approach strategy which requires a complete vision of organizational processes and regulations in addition to superior technical knowledge, to support the various stakeholders.

Since its inception in 2005, the company (then called Smartnet) was focussed on providing specialized advisory services that were based on a global approach that integrates organizational and procedural services with specialist and technical support.

Upon acquisition by Matticmind group, a prominent Italian Systems Integrator, in 2017 Smartnet became Cybermind, a boutique company within the group. Since then, Cybermind’s information and cybersecurity advisory services have been supporting their clients in developing and implementing their security management systems. Their clients include organizations operating in the fields of communications, government, banking, health, transport and energy.

The most crucial advantage of the approach by the framework is the possibility to define a step by step roadmap, in which the objectives are clear from the first step

By virtue of the experience acquired through the management of complex projects, Cybermind has been able to offer specific cybersecurity frameworks for susceptible areas such as land-sea intermodal transports, public health, energy providers, government and public utility services providers. This approach complements the international standard and best practices, addressing specific contexts dependent requirements, such as applicable laws, organizational structures, digital maturity, and core mission. A specific threat scenario and risk management model corroborates to each framework. A comprehensive set of security policy and procedures, as well as a recommended set of technological counter measures, are aligned to the framework. A specific governance and assurance methodology is attributed to the framework to ensure the maintenance of the information security management system. “The most important advantage of the approach by framework is the possibility to define a step by step roadmap, in which the objectives are clear from the first step,” adds Matta. “For the same reason, the approach by framework is independent from the ‘as is’ maturity degree of each organization because a roadmap can be defined including any security management process and/or security countermeasure previously implemented.”

Risk-based approach

Cybermind’s specialist consultancy and risk-based approach allow their clients to supervise critical areas effectively. It is oriented towards organic and interdisciplinary management that is derived from a systemic approach for a thoughtful and structured way of approaching various issues, which takes into account and promotes synergies between various stakeholders involved in the cybersecurity process. The company services are structured to support the client in the decision-making process as well as defining and implementing the Information Security Management System (ISMS).

The company also helps its clients in obtaining and maintaining ISO/IEC27001 certification, which certifies an organization’s efforts to improve its ISMS continually. Cybermind helps in identifying and monitoring safety performance indicators within the organization as well as the implementation of information security risk analysis models and methodologies. One important aspect of Cybermind’s approach in helping a client is their effort to train and create awareness on cybersecurity issues.

“The key word of the new IT security paradigm is accountability,” says Matta.

“In fact, most of the new national and European laws, for example NIS and GDPR, attribute to the service owner the responsibility to assess the risk in order to take any decision that allows to mitigate the likelihood of security and privacy breaches.” This new approach coincides precisely with the risk-based approach that Cybermind has been promoting to its clients. Through the development and the application of contextualized security framework, the company has been able to address in a concrete and measurable way a comprehensive set of organizational, procedural and technological solutions for continuous and conscious risk treatment. They have been furnishing methodologies end evaluation metrics for security assurance to evaluate the adequacy and maturity of security measures, as the services and technologies evolve.

Advance Persistent Threat Handling

Security development and Innovation is one of the primary highlights of the services offered by Cybermind. Their design and development services aim to employ advanced technological solution in their endeavour to provide an innovative solution, and Advance Persistent Threat Handling is one such solution. Available as a service, Advance Persistent Threat Handling allows detection of the attack precursors - those events that may reveal a possible complex attack. Advance Persistent Handling thwarts those preliminary information gathering processes that the cyber terrorists use as a preventive installation of malware which is later used as tactical support for a cyber attack.

Integrated with event management technologies, Advance Persistent Handling process gives the ability to discover attack vectors that incident handling support systems are unable to detect. Cybermind was able to demonstrate the efficacy of Advance Persistent Handling at National Port System Authorities. For the past 24 months, Cybermind has been involved in overhauling cyber security management of the National Port System Authorities, Italy, with their innovative services.

Cybermind was invited to develop organizational specific procedural models to address a cooperative approach within the various stakeholder of the port system. Cybermind begins with the development of a methodology to assess the systemic impacts in the complex chain of intermodal transport. This was based on a model that represents the map of systemic interdependence within the port services. Later, Cybermind introduced another innovative element in this project - the activation of a ‘next generation SOC service’ dedicated to the analysis of imminent threat scenarios and the management of advanced cyber attacks - Advanced Persistent Threat Handling. Result? The National Port System Authorities achieved the most recent cyber security guidelines and best practices dedicated to the Trans European Network – Transport.

Cybercrimes are going to get worse from here and having a robust cyber security infrastructure will not only help in preventing those, but it will also help build trust among business partners and customers. Organizations need to have a strong vision for their cyber security framework and need to partner with companies like Cybermind Security Solutions who have the right skill and experience to offer innovative solutions to meet the real needs of their customers. As Sun Tzu mentioned in the Art of War, “the supreme art of war is to subdue the enemy without fighting.” To participate in the race to global economic supremacy, organizations might find an apt ally in Cybermind Security Solutions.