Digital Risks Assess

A multinational investment firm wanted to enhance its cyber security measures across its extensive Asia portfolio. Recognising the need to strategically protect its assets, the firm sought a comprehensive evaluation of the cyber risks threatening its operations.

The firm brought on Control Risks to help. Our experts conducted a high-level threat analysis to evaluate the capabilities and intentions of potential cyber adversaries targeting each portfolio company. We identified critical information assets and systems within each portfolio company, quantifying the potential financial impact of data breaches or system compromises. To prioritise cyber defence improvements, our team conducted strategic workshops with senior management across the portfolio to help them align on identified threats and asset criticality.

The project culminated in a tailored investment strategy that prioritised cyber security enhancements across the portfolio. By aligning defence efforts with specific risks and the value of critical assets, the firm achieved a more robust cyber security posture, significantly mitigating potential threats to its operational integrity. With our support, the firm was able to demonstrate a proactive stance on cyber risk management, reinforcing investor confidence as well as safeguarding information assets. 

A global distributor engaged Control Risks to conduct a comprehensive threat-led assessment and assurance programme. The aim was to identify the principal cyber threats to its business and evaluate the effectiveness of its current security controls in safeguarding its most critical assets. The focus was corporate IT-level operations and assets and included a sample review of the OT controls at selected locations. The programme encompassed a suite of rigorous assurance tests, including cyber adversarial network penetration tests, physical red team exercises and a cyber vulnerability assessment.

Our cyber threat intelligence experts did an intensive analysis to pinpoint likely cyber threat actors, their tactics, techniques and procedures (TTPs) across its IT and OT systems. They created realistic threat scenarios, which were informed by a critical asset identification process that was mapped onto the Unified Cyber Kill Chain framework as well as aligned with the MITRE ATT&CK framework to address the client’s specific needs.

Through comprehensive intelligence gathering from over 700 deep and dark web sources, 25+ social media platforms and a variety of surface web, human and technical intelligence inputs, our Digital Risks team delivered up-to-date insights on high, medium and low threats. With a better awareness of how its infrastructure might be targeted, as well as by whom and why, the client was now in a better position to make informed decisions about potential cyber threats.

Our team's objective was not only to determine current threats but also to forecast emerging issues – connecting cyber threats to broader political, economic and societal trends. Our approach gave the client a deep understanding of the roots of potential attacks and what could make their operations a target in the future. The client came away with a security framework equipped to safeguard its critical assets against an increasingly complex cyber threat landscape.

A global investment institution needed to enhance its security posture amid increasing threats to its operations and executives globally. The institution sought to systematically monitor and analyse online threats spanning various digital platforms so that they could pre-emptively identify risks to its key personnel and facilities. They needed to protect their reputation as well as their physical assets.

Control Risks put together a specialised global online threat intelligence (OTI) team to support this client. The process began with a workshop to define the scope of threat monitoring, the format and frequency of reporting and the escalation pathways for imminent threats. Following the workshop, our team designed and implemented a bespoke intelligence collection plan for the client engineered to evolve in response to internal and external changes. The plan included the monitoring of specific executives, office locations and known threat actors, as well as the development of a structured framework for regular reporting and escalation.

The client came away with a strengthened security framework. Through daily monitoring and analysis of threats sourced from open web, social media and the deep and dark web, the institution could now access regular trend reports and intelligence on potential security breaches. Additionally, the point-of-interest (POI) analysis provided actionable insights on individuals posing credible threats, allowing for timely and effective interventions.

This comprehensive threat intelligence service not only enhanced the institution’s ability to respond to immediate threats but also improved its overall strategic security planning and execution. The client came away with a safer operational environment for its personnel and assets worldwide.