Digital Forensics and Incident Response (DFIR)

Services » Defense & Response » Digital Forensics and Incident Response (DFIR)

Quickly getting you back to normal operations
is just the beginning.

Delivering detailed documentation about the attack,
how it happened, and ensuring it doesn’t happen again. 

Assura’s Digital Forensics and Incident Response (DFIR) team is methodical in our approach to these cyber emergencies. First and foremost, our priority is to stop the bleeding, find out what happened, and restore systems to normal operations as soon as possible. We treat the digital environment just like a crime scene, because that’s exactly what it is. And like all crimes, the perpetrators leave a trail of evidence behind that needs to be thoroughly analyzed to truly understand the scope and depth of the attack. This thoroughness ensures that the bad guys are cleared out of the environment for good and that the attack path they used is secured.

Why insurance companies and Panel Counsel Firms
add Assura to their digital forensics team.

  • We sweat every detail and provide the highest level of documentation
  • We’re fast, but not to the point where there’s a risk of anything overlooked
  • We’re discreet and understand the sensitivities associated with these attacks
  • Our recommendations put the organization on a path to strengthening its security posture

Assura delivers two distinct solutions for DFIR.

The Reactive Solution

  • Response
  • Investigation
  • Containment
  • Remediation

The Proactive Solution

  • Incident response planning
  • Incident response training
  • Incident response exercise
  • Threat hunting/compromise assessment

Compliance and security for any industry.

Guaranteed compliance with the following standards and regulations.

CJIS

COBIT

FERPA

FFIEC

FFIEC CAT

CMMC (RPO) Registered provider organization

GDPR

HIPAA/HITECH

HITRUST CSF

ISO 27001/27002

ISO 31000

IRS 1075

NIST CSF

NIST SP 800-53

NIST SP 800-37

NIST SP 800-171

PCI DSS

GLBA

SOX

SSAE-18/SOC 2 & SOCfor Cybersecurity

State-level data breach reporting and cyber security standards and data protection laws

If you get audited, Assura has you covered. Our AuditArmor® Audit Defense Guarantee means that we guarantee our work to be compliant with the identified cybersecurity frameworks and regulatory requirements (unless waived by you). We defend our work at no additional cost. Yes, we’re serious. And yes, we’re that confident in the quality of our work. We have you covered from entrance conference to exit conference and will work with your auditor or regulator to defend our work. On the off chance that a change needs to be made to the deliverable, we’ll do that for free. It’s that simple.

How we’ve helped to protect industries like yours.

Education
Protecting a university’s network against both hackers and a student workforce.

A university approached Assura with a unique challenge that most other organizations don’t have. Because they employ students to help run various aspects of the school, they needed a way to ensure these work-study employees didn’t accidentally put the university’s data at risk.

government
Delivering cybersecurity solutions to 11 Virginia government localities at one time.

The Federal Emergency Management Agency (FEMA) challenged the Commonwealth of Virginia with helping to secure elections and making government localities cyber secure. Assura was approached by nearly a dozen together needing to overcome the same challenge in the same timeframe, yet each with its unique path to reaching success.

Business
ProDefense™ XDR: Quickly securing a global company's all-new virtual data call center.

A U.S. government contractor tapped a global company that specialized in workforce mobilization and staffing to create and staff a call center. Typically, this would not have been a significant challenge. However, this happened at the peak of the COVID-19 global pandemic, which meant the data center needed to be 100% remote while still being 100% compliant with Federal cybersecurity regulations — seemingly incompatible requirements. Assura had the solution.