Cyber Defense Assessments

Delta Risk conducts sophisticated assessments of our clients' cyber defenses. The most important aspects of these are not the document reviews or technical assessment of systems and networks. It is the non-technical evaluation of our clients' training and processes through interviews and scenario-driven exercises. Technology is the foundation of a good defense, but usually the cyber battles are won or lost by the reactions of the people involved.

We can conduct assessments based on our military and technical experience, as well as using our extensive professional certifications including Certified Ethical Hacker (CEH) and Certified Information Systems Security Professional (CISSP). Additionally, we can assess compliance with international standards such as ISO 27001 and 27002. Our corporate partners include some of the most sophisticated digital forensics experts in the business.

Update: Delta Risk Assistance to FS-ISAC

Washington, D.C. and New York. February 2010.

Delta Risk is assisting the Financial Services ISAC on their recent "Cyber Attack Against Payment Processor" exercise, run over three days for financial institutions, payment processors, the retail sector, and business and government. Delta Risk is using our deep knowledge of the finance sector and exercises to analyze the thousands of responses to understand trends and lessons learned.

Update: DECIDE Project Funded by Congress

Washington, D.C. October 2009.

The Cyber Conflict Research Consortium has just received several million dollars from DHS Science and Technology directorate to develop DECIDE, a decision and risk modeling simulation to support cybersecurity for the financial sector. Delta Risk has been instrumental in the requirements process and helping the Consortium--an educational research alliance--understand financial sector decision making and information infrastructure.

Update: ccTLD Training for Asia

Seoul, South Korea. October 2009

Delta Risk team members have just finished training attack and contingency response to Internet top-level domain operators from across Asia, for ICANN and in conjunction with the Asia Pacific Top-Level Domain Association.