A simple Small to Medium Enterprise Cybersecurity approach with minimal cost for Enterprise `security Architecture implementation with technologies proposed

1. ENTERPRISE SECURITY
ARCHITECTURE APPROACH –
CYBER RESILIENCE
MAGANATHIN VEERARAGALOO
7TH DECEMBER 2021

2. APPROACH
1. Risk Assessment - Security Scorecard (free assessment)
2. Asset Discovery Bit Discovery (initially free)
3. Automated Penetration Testing (Blue/Red Team Approach) – no cost
free tools
4. Vulnerability Scan – enterprise context (automated tools) –open
source
5. Active Directory and Email Analysis (Email Rectification)
6. Setup Observability going forward – proactive approach
7. Resilience Approach (Recommendation) – going forward

3. 1. RISK ASSESSMENT
 Risk Assessment of current Environment
Use Security Scorecard – http://www.securityscorecard.com

4. 2. ASSET DISCOVERY
• You cannot protect what you don’t know
• Asset Discovery using Bit Discovery - https://bitdiscovery.com

5. 3. AUTOMATED PENETRATION TESTING
• Black-Box Test.
• White-Box Test.
• Network Service Penetration Testing.
• Web Application Penetration Testing.
• Wireless Penetration Testing.
• Social Engineering Penetration Testing.
• Physical Penetration Testing.

6. 4. VULNERABILITY SCAN
• Vulnerability scanning is the process of identifying
security weaknesses and flaws in systems and
software running on them. This is an integral
component of a vulnerability
management program, which has one overarching
goal – to protect the organization from breaches
and the exposure of sensitive data. These
programs rely on assessment to gauge security
readiness and minimize risk, and vulnerability
scanning is a critical tool in the cybersecurity
toolbox.
• There are two big challenges related to traditional
vulnerability assessment – knowing what to scan
and knowing when to scan:
• Keeping an up-to-date asset inventory is an
essential first step and requires its own set of
tools and strategies.
• Making sure that your vulnerability scanning tools
cover non-traditional assets such as BYOD
devices, IoTs, mobile assets, and cloud services is
essential.
• In a world where cyber threats can come from any

7. 5. ACTIVE DIRECTORY AND EMAIL
ANALYSIS

8. 6. SETUP OBSERVABILITY

9. 7. RESILIENCE APPROACH

10. Q&A