Pre-Forensics and Fraud Detection
The cost of recovering from a security breach continues to rise every year with the latest figures from the Ponemon Institute now claiming that US companies spend just over $200 for every record lost, totalling on average $6.75 million per incident.
In the UK the average cost per incident is lower at $2.57 million with the cost of detection and escalation averaging $472,883 per incident.
The PwC Information Security Breaches Survey 2010 suggests the average cost per incident for UK organisations with more than 250 employees is between £280,000 and £690,000 with the cost to small businesses (less than 50 staff) ranging from £27.5K to £55K.
Almost half of large companies in the UK (49%) suffered theft or fraud involving computers.
VigilancePro® can identify unusual, high risk, suspicious, or malicious user behaviour associated with security breaches or fraud and in many cases can defeat the more obvious transgressions of trust by preventing user actions, or combinations of actions.
Even if the method of the crime is sophisticated and unforeseen, perpetrators will still often display unusual behaviour – such as more time spent in sensitive applications, or attempts to access unauthorised resources – in the period leading up to committing the serious breach.
VigilancePro enables organisations to spot anomalous user activity by providing analysis of numerous user activity metrics including active viewing time spent in individual applications.
Post-incident VigilancePro significantly reduces the time and cost of pre-forensic activity – the combination of discovery and detection – by rapidly pinpointing the user (or users) and system (or systems) that were involved. This in turn reduces the cost and operational impact of subsequent full forensic examinations.
To support evidence handling procedures, VigilancePro includes the ability to create digitally signed and encrypted Standalone Exports from the VigilancePro Manager. The contents and reason behind each Standalone Export can be described in free text at the point of creation. Typically burnt to CD or DVD each export includes not only full event details but also a version of the VigilancePro Manager software so that evidence can be viewed on any PC platform.
Solution Highlights:
- Comprehensive and irrefutable visual audit trail of all user activity
- notifications can include desktop screen shots and CCTV images
- Identify abnormal patterns of behaviour using real-time user activity metrics
- Significantly reduce the time and cost of pre-forensic work
- Reduce the cost and impact of full forensic examinations by ensuring they are accurately targeted
- Support the evidence handling process