Empowering Organisations to Thrive in the Face of Cyber Attacks An introduction to Resilient Systems Paul Ayers – General Manager, EMEA Chris Neely - Director of Sales Engineering, EMEA

Resilient Systems, Inc. – Proprietary and Confidential | 2 AGENDA ► Market Landscape ► About us ► New incident response model ► How it works ► Live demonstration

Resilient Systems, Inc. – Proprietary and Confidential | 3 Global State of Information Security 2015 The Rise of Cyber Incidents Dramatic increase of security incidents and breaches

Resilient Systems, Inc. – Proprietary and Confidential | 4 Average spend in 2 years Prevent & Protect Detect & Respond 77% 61% 75% 60% Average spend today Median spend today Median spend in 2 years 23% 39% 25% 40% Average spend in 2 years Average spend today Median spend today Median spend in 2 years Massive move in security spending is underway Research conducted April ‘15 by Pierre Audion Consultants

Resilient Systems, Inc. – Proprietary and Confidential | 5 ► Proven and Robust Processes / Best Practice ► Historically rudimentary tooling ► Now a defined market Incident Response evolution Spreadsheets Sharepoint Ticketing “Security incident response platforms (SIRPs) contain specialized capabilities intended specifically to support the response to security incidents” Technology Overview for Security Incident Response Platforms Incident Response Evolution

Resilient Systems, Inc. – Proprietary and Confidential | 6 OUR MISSION Resilient Systems empowers organizations to thrive in the face of cyberattacks and business crises.

Resilient Systems, Inc. – Proprietary and Confidential | 7 Pioneers in incident response ► Founded in 2010, created the first Incident Response Platform (IRP) ► Winning awards for innovation — and so are our customers ► World leader in incident response management bringing together people, process and technology ► Bruce Schneier, CTO — the leading security industry guru ► Headquartered in Cambridge, MA and London, UK Resilient Systems Most Innovative Product In Germany

Resilient Systems, Inc. – Proprietary and Confidential | 8 Why response SERVICES PRODUCTS PREVENTIONDETECTIONRESPONSE

Resilient Systems, Inc. – Proprietary and Confidential | 9 Select global customers PROFESSIONAL SERVICESTELECOM CRITICAL INFRASTRUCTURE HEALTHCARE MANUFACTURING TECHNOLOGY FINANCIAL RETAIL INSURANCE FEDERAL HOSPITALITY

Resilient Systems, Inc. – Proprietary and Confidential | 10 PLATFORM OVERVIEW

Resilient Systems, Inc. – Proprietary and Confidential | 11 A new approach to incident response Brings together people, process and technology to transform, orchestrate and empower your incident response

Resilient Systems, Inc. – Proprietary and Confidential | 12 A new approach to incident response It enables rapid collaboration within the IR Team and across the organization MARKETINGLEGALBUSINESSCISO CSIRTSOCFORENSICSIR

Resilient Systems, Inc. – Proprietary and Confidential | 13 A new approach to incident response ► Action plans (NIST) ► Organizational SOPs ► Event orchestration ► Task management ► Global data privacy obligations ► Tabletop exercises

Resilient Systems, Inc. – Proprietary and Confidential | 14 A new approach to incident response Brings together all your existing security investments in one place

Resilient Systems, Inc. – Proprietary and Confidential | 15 ► Creates a single hub for all IR ► Empowers teams to work more intelligently ► Agile platform ► Custom Action Module ► Compatible with all other systems Our unique value INTELLIGENCE FEEDS SIEM EXTERNAL COMMUNICATION CONFIGURATION MGT SANDBOX ASSET DATABASE FORENSICS CUSTOM PORTAL TICKETING INCIDENT RESPONSE PLATFORM

Resilient Systems, Inc. – Proprietary and Confidential | 16 ► Directory ► Endpoint forensics ► Threat Intelligence ► Endpoint controls ► Network controls INFRASTRUCTURE INTEGRATION EASY COLLABORATION AUTOMATED ESCALATION WEB FORM TROUBLE TICKETING ENTRY WIZARD SIEM DASHBOARDS & REPORTING TEAM UTILIZATION CSO DASHBOARD INCIDENT TIMELINE STATUS INCIDENTS BY TYPE OVER TIME CUSTOM DASHBOARDS & REPORTS Resilient incident response platform RESILIENT IRP MODULES PRIVACY SECURITY ACTION

Resilient Systems, Inc. – Proprietary and Confidential | 17 Sample case study – Fusion Project Resilient Platform Threat Services TIFP Aggregated Normalized ► iSIGHT ► FS-ISAC ► Etc. Analyst Action Module Remedy AD CMDB Escalate / Sync QRadar Splunk Blue CoatTaniumBit 9Bromium Artifact Lookup Escalate / Sync Enrich

Resilient Systems, Inc. – Proprietary and Confidential | 18 DEMONSTRATION

Resilient Systems, Inc. – Proprietary and Confidential | 19 Q & A