Digital Shadows Spotlight™ provides a tailored risk assessment service combined with custom-built technology that scours the Internet to shine a light on your digital shadow. Our team of expert security analysts works with you to mitigate the risks. We assess, monitor and mitigate against the risks posed using our unique three step process.
We begin all engagements by performing a risk assessment. This allows us to create a tailored risk profile meaning we can tune the service to your needs. The assessment is formed of the following key steps:
Digital Shadows Spotlight™ continuously monitors your digital shadow, identifying personal, technical and business vulnerabilities.
We work with our clients to help put in place practical measures, enabling clients to reap the benefits of the Internet whilst managing the risks. These mitigations include:
Identify assets
We map out what you are seeking to protect, which information is important to you, and what sensitive words or sources you wish to keep safe.
Understand the threats
We conduct a short assessment of which individuals and organisations may pose a threat to your operation.
Identify vulnerabilities
We work with you to understand current and previous vulnerabilities, that helps us to scope the Digital Shadows SpotlightTM service.
Summarise risk profile
We produce a summary of your risk profile which is used to progress the monitoring process. This helps us to pinpoint the likely attack-vectors.
Risk identification
We will highlight your current risk profile and any changes to it from month to month. We also look for hostile, high-risk discussion towards your organisation on forums and social media.
Testing
We periodically carry out real life tests to assess your resilience to attack. This includes spear phishing tests, identity squatting and exposure to social engineering.
Reporting
Our monthly reports set out the current risks, suggested mitigations, key risk indicators and metrics. We will also contact you directly if we discover an imminent threat.
Policy
We work with you to define, implement and communicate consistent policy. This helps you provide clear guidance to all employees on topics such as use of social media.
Training
We provide customised classroom or web-based training that helps raise awareness of cyber security and social engineering issues. This can include tailored one to one training for VIPs.
Technical countermeasures
We provide expert technical advice that helps you to configure your existing IT services to make them less vulnerable to attack.
Ad-hoc advice
We advise on content removal, drown-out, and support clients in receiving tailored legal advice as required.
Digital Shadows VIP Protect™ focuses our services on high risk, or high value individuals in your organisation and highlights areas of concern. We can then tailor specific mitigations to help reduce risks.
Discovering intent
We look for threatening behaviour/mentions on message boards, blogs and social media.
Identity spoofing
We help you to ‘claim' your place on the Internet and to weed out others attempting to compromise your reputation or security.
Inadvertent exposure to harm
We look for information that could be used to do harm to that individual.
Account compromise
We look for information that could be used to compromise electronic accounts e.g. exposure of answers to typical password-reset questions.
