Remediation

Despite the best technology available, and a strict enforcement of a thoughtful security policy, time has shown that eventually virtually any computer system or network can be compromised if an adversary expends sufficient resources and attention to accomplish their goal.    Protections are great and should never be ignored as part of the development and implementation through operations of the security policy, but the timely detection and appropriate response through remediation efforts are key to successful  Cyber Security outcomes.

If an adversary manages to compromise their target environment and the compromise goes undetected for a considerable time, much damage can be done and in many cases the response will be too little, and too late to make a difference.  The target organization may suffer catastrophic loss, including both monetary and reputation.

Comtech has extensive experience in the design and deployment of Remediation efforts in response to detected attacks.  Regular and if possible automated patching through the use of orchestration tools have proved invaluable in aligning resources to focus on emerging threats and to identify the types of anomalies that indicate an ongoing attempt to exploit vulnerabilites including both Day Zero type events, as well as more sophisticated and difficult to detect social engineering approaches.