Acumen Cyber has introduced a strategic partnership with AttackIQ to assist organizations repeatedly validate their cyber defenses in opposition to real-world threats and scale back publicity to trendy assaults.
The partnership combines Acumen Cyber’s engineering-led safety operations experience with AttackIQ’s Steady Menace Publicity Administration (CTEM) platform. Collectively, the businesses intention to assist organizations establish exploitable assault paths, validate safety controls, and prioritize remediation efforts primarily based on precise threat reasonably than theoretical vulnerabilities.
Shifting past conventional vulnerability administration
As cybercriminals more and more leverage synthetic intelligence and automation, organizations are struggling to maintain tempo with the rising quantity of vulnerabilities and safety alerts.
Based on Acumen Cyber and AttackIQ, conventional approaches centered on vulnerability counts, severity rankings, and periodic assessments are now not sufficient. Safety groups want steady visibility into how attackers may transfer by their environments and whether or not current controls are able to stopping them.
The partnership is designed to assist organizations repeatedly take a look at defensive effectiveness, validate safety investments, and focus sources on the assault paths that current the best threat.
Carl Wright, Chief Business Officer at AttackIQ, stated many organizations are overwhelmed by safety findings however nonetheless lack readability about the place they’re really weak.
“Menace Debt adjustments the dialog from managing lists of vulnerabilities to understanding and decreasing gathered adversary alternative,” Wright stated.
Steady validation turns into a precedence
As a part of the partnership, Acumen Cyber’s engineers will emulate real-world adversary methods mapped to frameworks resembling MITRE ATT&CK. It will enable organizations to check whether or not their preventive and detective controls can efficiently cease trendy assault strategies.
The businesses say the strategy helps uncover the place vulnerabilities, id exposures, misconfigurations, and management gaps mix to create viable assault paths to important belongings.
Mark Robertson, CEO of Acumen Cyber, stated organizations must focus much less on exercise metrics and extra on measurable safety outcomes.
“Most organizations nonetheless function safety packages constructed round exercise metrics as a substitute of validated outcomes,” Robertson stated. “The truth is that adversaries exploit paths, not remoted findings.”
He added that the partnership will allow clients to repeatedly establish attacker alternatives and systematically scale back what AttackIQ calls “Menace Debt” earlier than these weaknesses might be exploited.
Measuring publicity by Menace Debt
A key part of the partnership is the AttackIQ Menace Debt Index, which offers organizations with a framework for measuring gathered adversary alternative throughout their environments.
The index is designed to trace how assault paths change over time, establish the place new publicity has emerged, and present the place safety controls are efficiently decreasing threat. This offers organizations a option to measure cyber resilience primarily based on validated outcomes reasonably than merely reporting on safety actions.
As organizations proceed to face more and more subtle cyber threats, Acumen Cyber and AttackIQ imagine steady validation and threat-informed protection will play a rising function in serving to safety groups keep forward of attackers.
