References

Conducting a bilingual phishing campaign for the globally distributed workforce

Comprehensive audit of a critical network infrastructure and the corresponding management applications by means of an architecture and configuration review as well as a penetration test and application penetration test. Additionally, a cyber incident exercise was executed with the NOC (Network Operations Center).

Support of a phishing campaign to train phishing awareness

Carrying out a tabletop exercise on the topic of ransomware attacks

Conducting a two-part tabletop exercise to test the incident response team and incident response processes

Architecture and design review of the entire network infrastructure

Workshop about the configuration and usage of a vulnerability scanner

Consulting regarding certificate management and programming processes for medical devices

Secure web development training with focus on .NET

"Secure web development"-training of all developers with focus on AngularJS and Java

Workshop on IT security topics (network segmentation, firewall, WAF, PKI, Office365, Azure)

Secure web development training and draft of a coding guideline for internal developers

Workshop & Coaching on IT security topics

Training and workshop regarding CA-infrastructure and certificates as well as IPsec

Awareness trainings for IT managers and simulation of a phishing campaign over 30 companies

Presentation and live hacking with focus on APT and social engineering

Full technical security audit of the entire IT infrastructure; In internal and external audits, security vulnerabilities and possible entry points from various attack scenarios were assessed. The customer's services were audited and attacks were simulated from their customers’ point of view. The awareness of the employees was increased through training

Security awareness training for all employees (incl. hacking demonstration) with a focus phishing and malware/ransomware

In two 3-day workshops, a Swiss energy company was trained in IT forensics readiness. Starting with theoretical aspects at management level (threats with a high probability of occurrence), the creation of an incident response policy, the exact procedure for a forensic data backup and an applied exercise case, several topics were dealt by Oneconsult specialists with approx. 12 participants.

Incident handling training & workshop