1. Proactive Cyber Security Ian Glover

2. Not For Profit Organisation
The CREST Vision
Not For Profit Organisation

3. Schemes Penetration Testing Cyber Security Incident Response (CSIR)
Threat Intelligence
Penetration Testing
Cyber Security Incident Response (CSIR)
Penetration Testing
Threat Intelligence
NSA NSCAP CIRA (Cyber Incident Response Assistance)
Penetration Testing
Cyber Incident Response (CIR)

4. Reduce Threat Reduce Vulnerability Avoid Detect Recover

5. Reducing Threat Very Difficult

6. Penetration Testing And Implementation Of Technical Standards Reduces Vulnerabilities

7. Emerging Threat Intelligence Industry
Geopolitical
Big Data
Social Media
Dark Web
Company or Sector Target Information

8. Intelligence Led Penetration Testing

9. Threat Intelligence Evidence Based
Contextualised

10. Exercise Continuity Plans Against Real Life Scenarios

11. Detect

12. SOC Accreditation

13. Continual Threat Monitoring

14. Invocation Before Attack
Recovery Based On
Invocation Before Attack

15. Heighten Awareness
Configuration Review
Update
Penetration Test
Controlled Shut Down

16. Speed Recovery Based On Understanding Attack
Reduce Need To Recover
Speed Recovery Based On Understanding Attack

17. Balanced Assurance Programme
Reduce Threat
Reduce Vulnerability
Detect
Recover

18. ian.glover@crest-approved.org 07970 817101
Thank you