Contact

Resources

Resources: cybersecurity explained clearly

Terms, methods and regulations around exposure management – explained concisely, with practical relevance and without marketing speak.

01Resources

Fundamentals

  1. 01CTEMWhat is continuous threat exposure management (CTEM)? The five phases – scoping, discovery, prioritization, validation a...
  2. 02What Is Attack Surface Management?Attack surface management (ASM) explained: definition, internal and external attack surface (EASM), process, benefits an...
  3. 03Vulnerability Management ProcessThe vulnerability management process in six steps, from discovery to re-testing. Why CVSS is not enough and how EPSS, KE...
  4. 04Penetration Testing vs. Security ValidationPenetration testing or continuous security validation (breach and attack simulation)? Differences, use cases, costs and...
  5. 05What Is a Honeypot?What is a honeypot? Definition, types (low and high interaction), benefits and risks – and how attackers can be redirect...
  6. 06What Is a SOC?What is a security operations center (SOC)? Tasks, roles, metrics such as MTTD and MTTR – and whether to build a SOC in-...

02Resources

Regulation

  1. 01ComplianceHow exposure management helps with NIS2, DORA and ISO 27001: an up-to-date asset inventory, risk-based assessment, vulne...
  2. 02NIS2 RequirementsNIS2 requirements explained: who is affected, risk management measures under Art. 21, reporting obligations, management...
  3. 03Audit EvidenceAudit evidence from day-to-day operations: inventory, vulnerabilities with deadlines, validation results and incidents a...

03Resources

Industries

  1. 01Critical InfrastructureCybersecurity for critical infrastructure operators: attack detection systems (SzA), IT and OT protection, evidence for...
  2. 02Public SectorCybersecurity for government agencies and municipalities: know your attack surface, prioritize vulnerabilities, detect a...
  3. 03Financial ServicesDORA for banks, insurers and financial services firms: the five pillars, resilience testing, incident reporting – and ho...
  4. 04HealthcareCybersecurity for hospitals, practice groups and labs: medical devices, network segmentation, threat detection and evide...
  5. 05Manufacturing and OTOT security for manufacturing and industry: separate office IT from control systems, identify attack paths to the shop f...

04Resources

Solutions and use cases

  1. 01SIEM AlternativeA SIEM alternative for mid-sized companies: incidents instead of alert floods, correlation without heavy rule maintenanc...
  2. 02Firewall Made in EuropeFirewall made in Europe: development and data storage in Europe, a documented supply chain and a clear licensing model –...
  3. 03Ransomware ProtectionRansomware protection for businesses along the kill chain: close entry points, disrupt attack paths, detect early and co...
  4. 04IntegrationsXMfortress integrations: firewall logs, endpoint telemetry, identity providers, cloud and server logs – normalized into...

05Resources

Glossary: key terms explained

Attack surface
All systems, access points and accounts through which a company can be attacked.
Attack path
A chain of vulnerabilities, misconfigurations and permissions that an attacker can use to reach critical systems.
CTEM
Continuous threat exposure management: an ongoing cycle of scoping, discovery, prioritization, validation and mobilization.
CVSS
Common Vulnerability Scoring System: rates the technical severity of a vulnerability.
EASM
External attack surface management: discovery of the attack surface reachable from the internet.
EPSS
Exploit Prediction Scoring System: the probability that a vulnerability will be exploited soon.
Honeypot
A decoy system to which attackers are redirected in order to observe them and keep them away from real systems.
KEV
Known Exploited Vulnerabilities: a catalog maintained by the US agency CISA listing actively exploited vulnerabilities.
Crown jewels
The systems and data whose loss would hit a company hardest.
SOC
Security operations center: the team that continuously monitors IT and responds to incidents.
DORA
Digital Operational Resilience Act: EU regulation on the digital operational resilience of financial entities.
SIEM
Security information and event management: collects and correlates security events.
SzA
System zur Angriffserkennung (attack detection system): mandatory for German critical infrastructure operators since May 2023.
TLPT
Threat-led penetration testing: penetration tests based on threat intelligence under DORA.
Aerial view of a city at night with illuminated streets

Know your exposure.
Control your risk.

Contact

Talk to us about your attack surface, your priorities and the right way to get started with XMfortress.

Get in touchExplore the platform