References

Conducting a two-part tabletop exercise to test the incident response team and incident response processes

Architecture and design review of the entire network infrastructure

Workshop about the configuration and usage of a vulnerability scanner

Consulting regarding certificate management and programming processes for medical devices

Secure web development training with focus on .NET

"Secure web development"-training of all developers with focus on AngularJS and Java

Workshop on IT security topics (network segmentation, firewall, WAF, PKI, Office365, Azure)

Secure web development training and draft of a coding guideline for internal developers

Workshop & Coaching on IT security topics

Training and workshop regarding CA-infrastructure and certificates as well as IPsec

Awareness trainings for IT managers and simulation of a phishing campaign over 30 companies

Presentation and live hacking with focus on APT and social engineering

Full technical security audit of the entire IT infrastructure; In internal and external audits, security vulnerabilities and possible entry points from various attack scenarios were assessed. The customer's services were audited and attacks were simulated from their customers’ point of view. The awareness of the employees was increased through training

Security awareness training for all employees (incl. hacking demonstration) with a focus phishing and malware/ransomware

In a two 3-day workshop, a Swiss energy company were trained in IT forensics readiness. Starting with theoretical aspects at management level (threats with a high probability of occurrence), the creation of an incident response policy, the exact procedure for a forensic data backup and an applied exercise case, several topics were dealt by Oneconsult specialists with approx. 12 participants

Incident handling training & workshop

Conducting of the OSSTMM Professional Security Tester (OPST) Training

Training for developers and project managers on security risks in web applications (OWASP Top 10) with focus on PHP and XML

Training of the IT security manual for all IT employees with focus on operations and developers/devOps enriched with live hacking demos and practical examples

Workshop for developers on security risks in web applications with a brief introduction into the OWASP Top 10 and selected vulnerabilities to exploit themselves