Perform security assessments to identify potential protection gaps for issues such as loss of integrity or theft of data and credentials, malware spread within guest VMs/tenants and at infrastructure-level, should a network be compromised by malware (e.g. ransomware)
Identify suspicious behaviours, attack patterns, lateral movement indicators, privilege misuse, exposed services, anomalous access, and other signs of compromise.
Build a threat model and engagement plan prior to execution: define the target, likely adversary profiles, attack paths, success criteria, and safety constraints before any action is taken.
Define, maintain, and govern security architecture standards, blueprints, and reference architectures across application, cloud, and infrastructure domains.
Strengthen sector-wide cyber resilience by identifying systemic risks and common cybersecurity challenges, facilitating knowledge sharing and coordinating initiatives to enhance preparedness and operational resilience across critical sectors.