Security breaches happen. Make sure your organization knows how to respond.

1. Confidential. Not to be copied, distributed, or reproduced without prior approval.
BEINFORMED.BESTRATEGIC.BESECURE.
June 29, 2018 1
SECURITY BREACHES HAPPEN
Make Sure Your Organization Knows How to Respond

2. It’s 8am.
You’ve arrived at work for
business as usual, only to
discover your company’s client
database has been
compromised.
June 29, 2018 2

3. You and your team begin
responding to the attack,
when suddenly your
internet access is denied
and the attacker begins
posting sensitive information
to your company’s social
media account.
June 29, 2018 3

4. What you do next
depends on one
important question:
Have you been through
it before?
June 29, 2018 4

5. BREACHES HAPPEN EVERY DAY
More than 50% of businesses experienced a
cyberattack in 2017, resulting in nearly 2 billion lost or
stolen records.
On average, data breaches in the U.S. set companies
back $7.35 million, which includes costs for loss of
customer, detection and escalation, and notification.
Companies in the financial, technology and services
industries experience the highest loss of customers
following a data breach.
June 29, 2018 5
2,000,000,000
Lost or stolen records - 2017

6. EVERY COMPANY IS A SECURITY COMPANY
Cyber attacks will remain a significant threat until
companies commit to the security technology, policies
and solutions necessary to be safe.
Nearly 90% of small business owners don’t feel they’re
at risk of a breach. Couple that with 81% of hacking-
related breaches being caused by weak or stolen
passwords, and there’s a recipe for disaster.
DON’T BECOME A STATISTIC.
June 29, 2018 6

7. BE READY WITH SIMULATED
SECURITY EVENTS
DirectDefense offers simulated real-world cyber and
physical security events to train your staff and leadership,
and test your organization’s incident response and disaster
recovery plans.
June 29, 2018 7

8. WHAT ARE THE OBJECTIVES?
Mimic real-world events, including practice calls or
contact with legal counsel, media or emergency services
Engage staff and leadership to work together and
establish who needs to be involved at what points during
the response
Facilitate and guide post-remediation activities and
additional training if necessary
June 29, 2018 8

9. WHAT CAN YOU EXPECT?
Our security event simulations are two- to
three-week engagements with both your
technical staff and leadership.
June 29, 2018 9
We create purposely overwhelming
security events, which allows us to find
vulnerabilities in your response plans and
identify room for improvement.

10. Confidential. Not to be copied, distributed, or reproduced without prior approval.
WEEK 1:
PREPARATION
DirectDefense facilitators will conduct information-gathering
and consult with staff and leadership to help design
the simulation.
June 29, 2018 10

11. Confidential. Not to be copied, distributed, or reproduced without prior approval.
WEEK 2:
SIMULATED EXERCISE
For two-to-three days, DirectDefense facilitators will
lead the simulation in a tabletop exercise format,
working with both technical staff and leadership to
ensure each group knows their role and understands
how the different scenarios affect the opposite group.
June 29, 2018 11

12. Confidential. Not to be copied, distributed, or reproduced without prior approval.
WEEK 3:
POST-REMEDIATION
With the information learned during the tabletop
exercise, DirectDefense facilitators will:
- Review “parking lot” items brought up during
the simulation
- Determine what is working well, what needs
improvement and if there is more training needed
- Establish a plan for conducting the exercise again
if needed
June 29, 2018 12

13. June 29, 2018 13
HELPING YOUR COMPANY IMPROVE
01
Identification of gaps
and vulnerabilities in
your response plans
02
Alignment of all technical
staff and leadership
within your company
in their roles and
responsibilities during
a security incident
03
Awareness of the size
and severity of a
security incident, and
the importance of
being prepared
04
Application of our
expert knowledge
to help you be fully
prepared in an actual
security event
We conduct a comprehensive security event simulation with one goal in mind: improve your
organization’s overall security posture. Benefits include:

14. Confidential. Not to be copied, distributed, or reproduced without prior approval.
A security incident
may be inevitable.
But being
prepared isn’t.
June 29, 2018 14

15. Confidential. Not to be copied, distributed, or reproduced without prior approval. June 29, 2018 15
BE CONFIDENT IN
YOUR ORGANIZATION’S
INCIDENT RESPONSE
PLAN AND READINESS
Set up a security event simulation today.
www.directdefense.com
1-888-720-4633

16. Confidential. Not to be copied, distributed, or reproduced without prior approval.
www.directdefense.comwww.directdefense.com
June 29, 2018 16