epinesis cybersecurity consulting and cybersecurity index
epistēmē +phronēsis = epinesis
Scientific Knowledge + Practical Wisdom = Actionable Insight
About
We combine literally billions of data points and hundreds of years of experience to track computer security, the evolution of risks, constraints and reach of cyber space and provide cutting-edge cyber security consulting.
Connected technology holds great promise and great peril for countries and companies alike. Increasing integration of technological and social systems unlocks new possibilities for prosperity and social growth.
But these advances are also threatened by weaknesses in the digital infrastructure and the capabilities and intent of actors who wish to take advantages of these weaknesses - nation states, criminals, activists, competitors.
epinesis is dedicated to measuring and improving the factors which make up this complex threat environment - the network operations, the actors' capabilities and environment, and their intent.
We make the complex understandable.
epinesis and cyber security
- epinesis is founded by a group of senior cyber security and IT executives to meet a real need - how to give non-technical people an understandingof the cyber environment.
- With over 100 years of combined experience in the Internet and IT worlds, the epinesis team understands both the deep technical challenges of the online world and the need to present this to management in a format which is comprehensible.
- We have built out networks, coordinating global network and security operations and defending those networks against nation state actors, criminals, activists, and even competitors.
- We also have decades of developing Internet and cyber security policy at corporate, national and international fora.
- From this combined experience, we have developed data sources, data sets, a wide range of subject matter experts, consulting expertise and communication frameworks from which to address the information security questions of senior managers and policy makers.
- We present analysis and data which supports decision making.
The epinesis Index
- The epinesis Index compiles country-specific cyber and operational risk data across a range of threat vectors. The index is based on an extensive database compiled from three types of sources: a distributed network of country-specific subject matter experts, network data, and public data. It outlines the high-level, structural cyber related risks that a company would have to consider before it sets up operations in a particular country. It is a comparative index comparing 42 countries which represent 90% of world GDP
- The epinesis cybersecurity index Index tracks 158 cyber health indicators, such as the prevalence of malware, spam servers, unsupported browsers and operating systems, piracy, corruption, levels of internal and state conflict, CERT capability, cyber crime laws, and network attacks. The Index draws on this data to calculate four distinct categories of cyber relevant risk to a company operating in a given country, as well as an aggregated country index score.
- Countries in the cyber risk index are rated on a comparative scale of 0-10, with 10 being the country with the highest risk and 0 being the country with the least risk.
- The four categories of cyber related risk are:
- Communications Infrastructure
- Insider Threats
- Staff Visiting the Country
- Logistics Networks
- Each of these four aggregate categories is driven by five sources of cyber risk:
- Domestic government entities
- Foreign Agencies
- Criminal Groups
- Hactivists and Dissidents
- The State of the Cyber Ecosystem
- The epinesis Index gives executives a unique insight into the varying cyber risk environment in which each of their country operations are conducted Risk management and consequent resource allocation is better informed.
- Contact us to see how the epinesis index can better protect your business.
USE CASES
some of the ways our clients use our data
some of the ways our clients use our services:
some of the ways our clients use our services:
- Inform senior executives and country managers about the cyber risk of doing business in a particular country
- Educate and call to cyber alertness traveling teams (auditors, business development, project managers etc) to promote cyber health actions by those teams
- Allow a company as a whole calculation of its cyber risk and give the Board and Senior Executives an insight of how that changes over time with investments/activities in different countries
- Contribute to the building of risk models by insurance companies to inform policy/pricing design
- Populating of data into these risk models
- Informing buy-side company/industry analysis for hedge/mutual funds
- Inform Chief Risk Officers and CISOs about the scale of actor risk in various countries which results in targeting of cybersecurity resources and a more nuanced posture rather than one size fits all model
- Allow regular reviews of a company's cyber risk profile as part of the whole regular review process by the Chief Risk Officer
some of the ways our clients use our services:
some of the ways our clients use our services:
some of the ways our clients use our services:
- Our clients include Government policy agencies and Fortune 1000 companies in the mining and energy, education, financial services, advanced manufacturing, health care, telecommunications and Internet sectors;
- Advise on strategic equipment sourcing for a large scale broadband deployment.
- Design a GRC and system architecture for several major global companies to respond to persistent penetration by multiple bad actors
- Develop a cybersecurity threat assessment capability for a global financial institution
- Determine strategy for several Fortune 100 companies to respond to cyber threats, including advanced attacks from national state actors
- Develop a national strategy to combat cyber crime and cyber threats for a G-20 country
- Determine strategy for several Fortune 100 companies to respond to cyber threats,ncluding advanced attacks from national state actors
- War-game management response capabilities and planning in a number of global and regional financial services companies