Cyber Security

No business is immune to cyber attacks. Which means the key to your defence lies not in evasion, but in preparation. And that means having all the right controls and processes in place to respond to threats quickly and effectively. If you don’t, an attack could have serious impacts on your business, and response could take too long – if it happens at all.

Mobius is perfectly positioned to help you prevent, detect and respond to cyber attacks.

First, we help you understand your current risks and readiness, ensuring realism by deploying simulated attacks to probe your systems for unknown vulnerabilities. Then, assessment in hand, we develop your cyber security improvement plans and response processes, and provide a full suite of services to help you implement both. Destination reached, you will be fully equipped to respond to cyber threats.

THE MOBIUS ADVANTAGE

APPROACH

  • Holistic and realistic assessment via ethical hacking
  • Determine cyber security control improvements required for detection and prevention
  • Implement response processes that work best for you
  • Intuitive for all stakeholders, with detail to guide response teams
  • Hands-on assistance with internal adoption of the processes

RESULTS

  • An improved cyber security posture
  • The ability to respond to cyber attacks
  • Processes that are adapted specifically for your needs

EXPERTISE

  • Assessment against NIST CSF and ISO 27000 standards
  • Vulnerability and penetration testing
  • Full development and implementation of incident response processes
  • Cyber security Fundamentals (CSX)
  • Offensive Security Certified Professional (OSCP)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • ISO 27001 Lead Implementer
Cybersecurity Approach

CYBER SECURITY
INCIDENT RESPONSE

The Mobius approach to Cyber Security Incident Response considers all stakeholder requirements, including Privacy regulators and the Third Parties that will be part of responding to the incident.

The processes we help to develop are aligned to the NIST Cyber Security Framework and cover the phases of: Identify, Protect, Detect, Respond, and Recover.

Our proactive approach aims to make the entire process intuitive, practical to adopt, and aligned to existing processes where possible, enabling you to deal with an incident effectively.

OUTSOURCED
SERVICES

The dilemma that most organisations are faced with is a shortage of Information Security and Information Privacy resources, and companies often lack the skills to ensure the success of their Information Security and Information Privacy Programmes. Mobius Consulting has released a new range of Outsourced Services within our Information Security, Information Privacy, and Cyber Security service lines.

The Outsourced Cyber Security Manager will help your organisation become more cyber resilient by improving your capabilities to identify, protect, detect, respond, and recover against cyber threats and attacks.

CYBER SECURITY
MATURITY ASSESSMENT

The Mobius Consulting approach to assessing an organisation’s Cyber Security maturity aligns with the NIST Cyber Security Framework (CSF). Our assessment service enables organisations, regardless of size, or degree of technological sophistication, to understand the gaps which exist within their current Cyber Security capability.

We help you ensure that key Cyber Security control deficiencies have been identified and that practical and appropriate solutions can be implemented to improve your organisation’s overall Cyber Security maturity.

CYBER INCIDENT SIMULATIONS

Mobius provides Cyber Incident Simulations which enable organisations to run virtual, fun, interactive and realistic gamified exercises designed to help improve incident response readiness.

THREAT
ASSESSMENT

The key to effective and efficient Cyber Security threat management is to first understand what you are up against. Our approach starts with identifying the critical processes and assets supporting your business, understanding attackers’ motivations, and determining the most likely attacks against those assets and your organisation.

Cyber Security Threat Assessment

PROJECTS

CYBER SECURITY AUDIT SERVICES

The Mobius Cyber Security team recently completed a Cyber Security audit for a leading asset management client in the financial services industry. The objective of the project was to provide independent assurance on the adequacy and effectiveness of key Cyber Security controls in the environment. The project included an assessment of the organisations Cyber Security […]

CYBER RELATED THIRD PARTY RISK

A leading bank needed to understand the level of cyber related risk that Third Parties and Cloud Service Providers introduced into their business, and also wanted to understand how to mitigate these risks. Mobius assisted the bank by designing and developing a Third Party Cyber Risk Management (TPCRM) approach that was tailored to their unique […]

IMPROVE YOUR ORGANISATION’S PREPAREDNESS FOR A CYBER SECURITY ATTACK

Cyber Security and Incident Response A multinational client in the financial services industry recently asked Mobius to conduct a Cyber Security incident response review and simulation exercise. The primary objective of the project was to help improve the organisation’s readiness to respond to a major Cyber Security incident. The project included the following: Development of […]

ARTICLES

INTRODUCING AMANDA HECHTER, SENIOR MANAGING CONSULTANT

        Technology consulting brings a new level of understanding to the implementation of information technology and benefits it can have for businesses; and Senior Managing Consultant at Mobius Consulting, Amanda Hechter is one such driver of the service line.   As part of the EXCO team and a service line leader, Amanda plays […]

XSS TO SHELL

ZERO-DAY ADVENTURES – UNKNOWN UNTIL WE FOUND THEM For the astute among you, you’ll notice that the chaining of these types of exploits has been seen/used often enough, but the implications thereof are often overlooked. In this write-up we delve a little deeper into a real life example of how we uncovered three zero-days in […]

INTRODUCING RAYMOND DU PLESSES, SENIOR MANAGING CONSULTANT

  BACKGROUND   Raymond du Plessis is based in Mobius’ Johannesburg office. He began his studies at the University of South Africa (UNISA) and he has gone on to complete vocational studies through professional bodies like ISACA and ISC. Raymond believes that continual education, and more importantly the knowledge that you gain from it, forms […]