Executive Exposure
K&U logo- white green

Executive Exposure

Audience: Physical & Cyber Security Security Teams: CTI, Executive Protection, Physical Security, CISO

Challenge

There is a symbiotic connection between Cyber Threats and Physical Threats. Organizations are always wanting to ensure the safety and security of their employees, whether it is at the executive level or a newly hired contractor. The physical team has learned a company executive will be traveling abroad and they are interested in potential exposure of visits on her itinerary along with any potential cyber & physical threats in the region.

Avalon Collaboration

A cyber threat intelligence analyst is paired up with a physical security analyst to work on the investigation together in Avalon. The CTI analyst adds the executive’s name to the person node and begins to identify enrichments that might provide additional context for their analysis. The analyst runs Flashpoint, Intel 471, and Sixgill enrichments to reveal any relevant conversations or mentions present within the DDW regarding their executive.

While those enrichments are running within Avalon, the CTI analyst adds itinerary locations for the executive and runs similar enrichments. Both enrichments rendered numerous data points for the two analysts to review curated from DDW conversations and Security Reports by Region.

The CTI and physical security analyst discuss which items they are going to review within the Interact collaboration feature of Avalon. While the CTI analyst reviews the DDW conversations, the physical security analyst begins to take notes in the Report Section of Avalon pertaining to travel risks identified within a Security Report for the region of travel.

Outcome

Real-time collaboration enabled proactive investigative analysis of threats within both cyber and physical domains. This analysis led to the generation of a report relevant and in support of the Cyber Threat Intelligence, Physical Security and Executive Protection teams. The report was able to provide the executive additional situational awareness on both fronts, cyber and physical, ahead of their upcoming trip abroad.

  • Multiple levels of investigative analysis were conducted in concurrent workstreams, within a single workspace and with seamless communication across teams.
  • Teams were able to quickly and efficiently pivot and leverage other’s work to produce actionable situational awareness
  • Avalon provided the physical security team access to a dataset typically not used for investigations further strengthening cross functional workflows

About Us

King & Union is a cybersecurity company that has built and designed Avalon, the industry’s first cyber analysis platform. The Avalon Cyber Analysis Platform helps analysts streamline threat investigations by providing the intelligence, tools and collaboration security analysts need in a seamless, integrated workspace.