Enosys tackles BAS market with AttackIQ
- 16 August, 2019 16:52
Joseph Mesiti (Enosys)
Sydney-headquartered Enosys Solutions has ventured into the breach and attack simulation (BAS) space as customers look at ways to ensure the safety of their systems.
"Over the last 10 years Enosys has been working with customers to build their cyber security defences and what we are now seeing, off the back of this heavy investment in security controls, is that organisations are looking to validate the work that has been done," Enosys Solutions sales director Joseph Mesiti told ARN.
According to him, this is a "universal requirement" he has been listening from CISOs for some time.
Enosys embarked on a 12-month study of the market looking for a "best-of-breed" provider. It decided on AttackIQ as it was gaining "a ground swell of support and becoming very well known in cyber security as a leader in the breach and attack simulation space".
"Our main reason for embracing the partnership with AttackIQ was to be able to validate the security controls that we have deployed for our customers," Mesiti said.
"Enosys has built a security control validation (SCV) service based on AttackIQ that will give anyone charged with validating their organisations security controls the ability to do so on a continuous basis.
"With the use of attack IQ we can continuously verify that the configuration of the security control device or software is correctly configured and working as desired. This really assists our clients as they can show clear returns to their management on how the investments are paying off, he added.
Mesiti further added that Enosys Solutions security control validation service broadens its SOC offerings and provides the benefit of ensuring optimal operational services to customers.
"I am forecasting a strong uptake of the service as I am constantly being asked the question 'how do I know if my cyber security controls are working correctly?' and the new SCV service will clearly illustrate this fact.
AttackIQ, who's cloud first platform provides security professionals a way to automate much of the testing process and continually provide visibility into their security posture, had just landed a team on the ground in Australia, in May 2019.
Established in 2012 in the US, the vendor has two people in Australia at the moment. Sales director for APAC Chris Zauzig revealed plans to ARN of increasing the headcount to five people before the end of 2019.
"We have a strong group of marquee customers in Asia Pacific; spread across verticals such as telecommunications, finance and energy, so we see a tremendous opportunity to be first into a nascent market and to deliver a capability which is redefining how security organisations operate," Zauzig said.
He added that AttackIQ is launching formal offerings for its partners to deliver as a service and he expects to double the local customer base before the end of 2019.
Other companies AttackIQ partners with at the moment are AdventOne, Dimension Data and Telstra.