CREST Marketplace

The ASSURE program is part of the UK’s National Cyber Security Strategy and is the first industry-specific application of the EU’s Directive on security of network and information systems (NIS) which became UK law in 2018. It is designed to help aviation organisations manage cybersecurity risks without compromising aviation safety, security, or operational resilience.

Claranet Cyber Security is an accredited ASSURE Cyber Security Assessor, offering an end-to-end audit for aviation organisations across all three required specialisms:

-Cyber audit and risk management
-Technical Cyber Security Expert
-Industrial Control Systems, operation technology expert

Claranet’s ASSURE assessment provides the right data security foundation to protect organisations, their customers, and their employees, and prevent data breaches.

Claranet’s Vulnerability Assessments (VAs) are designed to meet specific organisational needs and compliance standards. This includes the provision of a specialist IT Health Check (ITHC) for public sector organisations and a QSA solution for those affected by PCI DSS.

VA/ITHC testing delivers a report ranking the identified exploitable weaknesses by risk. It also provides recommendations to assist with remediation, helping organisations ensure that this risk can be reduced to a level that is acceptable for the business or that of an accrediting body.

These VA/ITHC services include a wide range of vulnerability assessment capabilities, including:
-Web and internal applications,
-Infrastructure (external and internal)
-Active Directory (AD) review
-End user device build reviews, against industry benchmarks
-Content security review, against the risk of data egress
-Wireless security assessment
-Network device configuration, including firewall rule analysis

Bespoke engagements can also be built around an organisation’s individual needs and real-time context.

Claranet’s penetration testing solutions are designed to meet specific organisational needs and compliance standards.

Penetration testing engagements deliver a report ranking the identified exploitable weaknesses by risk. It also provides recommendations to assist with remediation, helping organisations ensure that this risk is reduced to a level that is acceptable for the business or that of an accrediting body.

These penetration testing services include a wide range of capabilities, including:

-Web and internal applications
-Mobile applications
-Infrastructure (external and internal)
-Hardware and firmware

Bespoke engagements, as well as alternative security testing such as Red Teaming and Continuous Security Testing, can also be designed and executed around an organisation’s individual needs and real-time context.

Claranet Cyber Security is a member of the UK Government CESG CHECK IT Health Check scheme and is measured against the highest standards for the provision of security assurance services.

As a certified “Green Light” CHECK service provider, the company is authorised to conduct penetration testing for public sector and CNI systems and networks, under the full terms and conditions of the CHECK service provided by the National Cyber Security Centre (NCSC).

Claranet’s 24/7/365 security operations centre is one of just a handful of CREST-accredited SOCs, demonstrating an exceptional security baseline. This is achieved using the most effective people, technologies, methodologies, processes, and proper governance procedures, all of which regularly undergo CREST auditing.

Claranet’s SOC underpins two primary managed services:

Managed Detection and Response (MDR)

For more information: https://www.claranet.co.uk/services/cybersecurity/managed-security-services/managed-detection-and-response

A streamlined service to detect and manage threats, fast. Security teams gain the expertise of Claranet’s dedicated SOC to protect their organisation from complex attacks, on premise and in the cloud.

Endpoint Detection and Response (EDR)

Find out more: https://www.claranet.co.uk/services/cybersecurity/managed-security-services/endpoint-detection-and-response

Claranet’s next-generation EDR solution is underpinned by its multiskilled, CREST-accredited SOC and the SentinelOne platform – selected for its exceptional performance in MITRE’s Engenuity ATT&CK® Evaluations*.

The service identifies attacks in progress and isolates them on the endpoint before removing them and providing rollback to a safe state. Organisations can secure their entire perimeter from known and unknown threats and keep their business online whilst under attack.