Webinar Held on the Theme: 'How to Derive Actionable Defense Measures from a Mountain of Threat Information?'

Click here for details and registration.

Attack Risks Originating from Business Partners and Contractors, Not Just Your Own Company, Are Increasing Many companies are implementing security measures such as EDR, XDR, and ASM. Numerous companies are also strengthening their preparedness for daily threats by establishing detection and response systems after an intrusion. However, in recent years, supply chain attacks originating from business partners and contractors, not just one's own company, have been increasing. Furthermore, attackers often conduct target investigation and attack preparations well in advance of an intrusion, and it is not uncommon for attack activities to be already underway by the time damage occurs. Therefore, what is being questioned by many companies today is not just 'how to respond after an intrusion,' but also the perspective of 'whether signs of an attack can be grasped before a compromise occurs.'

Threat Information is Collected, But Threats Related to Your Company or Supply Chain Cannot Be Identified An increasing number of companies are collecting information about attacks using threat intelligence, ASM, and other tools. However, many face challenges such as: - Too much threat information, making it difficult to know what to prioritize. - Inability to distinguish between threats relevant to their own company and general threats. - Awareness of public assets but inability to see the truly targeted assets. - Inability to grasp risks including those of business partners and contractors. - As a result, failure to translate information into defensive actions. This is particularly true for companies that have already implemented multiple security measures, making it harder to determine 'if our company is truly being targeted' or 'which risk should be prioritized for response right now.' Despite the increase in information, the inability to narrow it down to the information needed for defensive decision-making has become a new challenge in security operations.

How to Connect to Defensive Actions by Visualizing Attack Campaigns and Prioritizing Risks This seminar focuses on visualizing attack campaigns as a new perspective to complement existing measures like EDR, XDR, and ASM. We will explain how to understand what attack activities are underway against your company, business partners, and contractors, rather than just collecting threat information, and how to identify risks that should be prioritized for response from vast amounts of data. By viewing threats from an attacker's perspective, we will also address the background of why traditional threat intelligence is difficult to use for decision-making, why anxiety remains even after implementing existing measures, and why defensive actions are not taken. We will introduce practical approaches to achieve pre-compromise defense, including use cases of 'ThirdWatch,' a solution for visualizing attack campaigns. We encourage those who wish to consider a more proactive defense posture in addition to their existing security measures to attend.

- Recommended for individuals in the following positions / experiencing the following challenges: - Heads and staff of IT and security departments. - Companies that have implemented security measures such as EDR, XDR, and ASM. - Those utilizing threat intelligence but unable to fully leverage it for defensive decision-making. - Those unable to determine if their company is actually under attack. - Those who want to understand supply chain risks, including those of business partners and contractors. - Those facing challenges in prioritizing threat information. - Those considering strengthening pre-compromise defense, not just post-compromise response.

- What you can take away from this seminar: It is not about collecting more threat information. It is about 'identifying threats related to your company and supply chain, and being able to determine which risks to prioritize for response right now.' This seminar will deepen your understanding of a new approach to threat awareness based on attack campaigns and practical methods for pre-compromise defense. We encourage those who want to identify risks not visible with existing security measures alone and consider a more practical defense posture to attend.

Organizer/Co-organizer NTT Security Japan K.K.

Cooperation Majisemi Inc.

Click here for details and registration.

Majisemi will continue to hold webinars that are 'useful for participants.'

Past seminar presentation materials and other upcoming seminars can be viewed ▶here.

Majisemi Inc.

3-12 Kioicho, Chiyoda-ku, Tokyo 102-0094 Inquiries: https://majisemi.com/service/contact/