There is no effective defence without good intelligence – ITBUSINESS – ITBUSINESS

 
◼︎ Any information can become vital
– What exactly is cyber threat intelligence and how does it fit in with the other protection methods and tools used by companies?
– The fundamental goal of CTI is to detect well in advance any potential threat against your organisation. No matter what defences your company has in place, you need to know what you need to defend against, or you will be blindly weathering the storm. That’s the information CTI provides – anything that can give you an edge in defending yourself. What do they know about your organisation? What’s happening in the world? What’s going on in your supply chain?
– How does this differ from the information that cyber defence vendors offer their own users?
– The information they provide is usually highly technical and tactical. They can warn of an incipient attack wave, new malware, but really when an attack has already started somewhere. It’s important information, we collect this data, but it’s only part of the picture. We start monitoring threats at earlier stages. Say the attackers have registered a new domain that looks very similar to the client’s web address – they probably want to use it to deceive us and we want to prevent that. We are collecting the kind of information that intelligence organisations have been collecting for thousands of years, but in and from cyberspace.
– What other sources does the CTI use for information?
– We use a myriad of open and non-open sources – some we have to buy, some we have to dive deeper into, we are constantly looking for new sources. The real difficulty is not in finding the data, but in collecting, processing and interpreting the vast amount of data. We invest a lot in improving our data analysis capabilities, we use machine learning, we are constantly refining our artificial intelligence with the help of our cross-functional Intelligence Operations team.
–How does the customer receive the information and what can they do with it?
– Depending on the client’s needs and maturity, there are a number of ways to do this. They can receive an email, we can call them, they can log in to our portal where they can see the full set of information, but we can also integrate directly with their systems through our API. However, we must be careful not to send unnecessary or false alerts. An online trader and an energy supplier are not at the same risk, so we really only alert them if we can provide them with information that is really relevant to them based on their profile. Ultimately, it is up to the customer to decide what to do with the information provided. We are very happy to suggest measures if they wish, but we stress that the final decision is always in the hands of the customer, who knows their environment and their business best.
– How is Quointelligence different from other CTI providers, how do they differentiate themselves?
– One very important factor is that we are European. We are more familiar with European thinking and European needs than a non-European provider, so we can gather and interpret information from a European perspective. It is also important that we have only European investors at the moment, we have not received any money from any defence or intelligence agency, allowing us to remain independent and objective, which I think is essential in this market.
I would also like to underline that we collect and process the raw data ourselves, without relying heavily on external parties. This will allow us to bring in new sources of information with unprecedented speed and flexibility. And finally, our customers love us because we take great care to foster relationships with them, regularly assess their needs and explain critical information to senior management in their own language – and this is always done by an analyst, not a salesperson.

Feliratkozom a hírlevélre!
Elfogadom az Adatkezelési tájékoztatót.
Sikeresen feliratkozott az ITB TODAY hírlevelünkre.
© 2023 ITBUSINESS

source