ALTITUDE DOESN T MAKE YOU SAFE. Satcom Direct s Comprehensive Cyber Security Portfolio for Business Aviation

Transcription

1 ALTITUDE DOESN T MAKE YOU SAFE Satcom Direct s Comprehensive Cyber Security Portfolio for Business Aviation

2 CYBER SECURITY IS THE GREATEST THREAT TO EVERY COMPANY IN THE WORLD. IBM CEO GINNI ROMETTY

3 SD CYBER SECURITY SERVICES Being in a business aircraft doesn t exempt you from a cyber threat. In fact, your company s data security is vulnerable on two fronts. First is the technology front. Even with the most secure devices or the latest security software, it s always a matter of trying to stay one step ahead of the hackers. If the leading security experts working at the world s most security-conscious companies are kept up at night worrying about the vulnerability of their security controls you should be, too. The second front in the battle for cyber security is human error. Even if your IT department is doing everything right to protect the company from an attack, more often than not a breach happens because of a simple unknowing mistake by an employee or a vendor. To properly protect your company from the next cyber-attack, you need a combination of both the latest technology and the right procedures and only Satcom Direct (SD) offers both. SD offers the industry s most comprehensive portfolio of security services, including: 1. NETWORK DISCOVERY The SD Cyber Security team evaluates your state-of-the-network and current security processes and provides a complimentary consultation. 2. SECURITY RISK ASSESSMENT SD offers a full onsite risk assessment to help you understand and identify threats to your environment both on-wing and at the hangar. 3. RISK MITIGATION AND THREAT MONITORING SERVICES SD offers a variety of enhanced threat analysis and prevention solutions, such as Antivirus, Modern Malware Protection and Threat Intelligence services. 4. SD PRIVATE NETWORK (SDPN) The SDPN is a global communications framework that allows satellite connectivity providers to connect to the aircraft through the SD Data Center and its multiple points of presence (POPs) worldwide avoiding the public internet and protecting user communications and data. SATCOM DIRECT.COM

4 SD CYBER SECURITY NETWORK DISCOVERY A 12-question self-assessment followed by a free phone consultation with an SD cyber security expert SECURITY RISK ASSESSMENT SD s security experts come to your business and perform a comprehensive cyber security assessment. The first step toward better protecting your aircraft is to evaluate current policies and procedures identifying what you are doing right and potential areas for improvement. Discovery helps you understand the importance of cyber security by establishing a baseline of how your company currently handles IT security. To get started, simply fill out and submit SD s self-assessment form. Once received, the SD Cyber Security team will evaluate your state-of-the-network and current security processes. We will also provide a free 30-minute phone consultation to give you initial recommendations on how to fix any identified risks. The goal of this process is to help you get a complete picture of your security system s strengths and weaknesses. For instance, together we will look at: Your cyber security policies, processes and procedures The setup of the flight department s network, including equipment, use of VLANs and data collection processes How passengers use their own mobile devices onboard the aircraft Where the aircraft travels How vendors are evaluated and monitored With this information, we can help you develop and implement best practices and solutions for closing any identified gaps. After the call, you ll not only benefit from having a more secure system, you ll also be equipped with the information and confidence you need to ask the right questions and take a proactive role in protecting your flight department. Due to our collective experience in the industry, SD understands business aviation s unique vulnerabilities and is thus well-positioned to review and evaluate your company s cyber security status. With SD s Security Risk Assessment service, our security experts come to your location, evaluate your network and current security processes, identify any vulnerabilities, educate your team and make recommendations on how to address technology- and human-based risks. The SD Risk Assessment service helps you understand and identify threats to your environment both on-wing and at the hangar including: Onsite risk assessment of aircraft network Review policy Document review System configuration review Penetration testing Network sniffing Vulnerability scanning Wireless scanning (active and passive) Bluetooth scanning Target vulnerability validation Password cracking Port scanning Host scanning Social engineering As part of the assessment process, we also recommend training courses that members of the flight department can take, including SD s certified CyberSAFE (Securing Assets For End Users) course. SATCOM DIRECT.COM

5 RISK MITIGATION AND THREAT MONITORING SERVICES Real-time monitoring of your data traffic to detect, identify and mitigate incoming threats. The challenge with cyber security threats is that they are constantly evolving. Luckily, with SD s Risk Mitigation and Threat Monitoring Services, our inhouse team of security experts proactively monitors your network to detect and block intrusion attempts in real time. further and include intrusion prevention. In other words, we don t just let you know that a hack is happening, we take immediate steps to stop it and track down the root cause. To protect against known cyber security risks, SD offers a variety of enhanced threat analysis and prevention solutions, such as: SD not only provides you with a state-of-the-art intrusion detection system, we take it one step Enterprise firewall Antivirus Intrusion prevention systems Data filtering and file blocking Modern malware protection URL filtering Threat intelligence services With SD s subscription-based Risk Mitigation and Threat Monitoring Services, you can feel confident knowing that we are not only monitoring your traffic and identifying potential threats, but also taking the necessary steps to stop them. SD Pro Threat Monitoring Module

6 SD CYBER SECURITY SD PRIVATE NETWORK The ultimate in protection, the SD Private Network routes encrypted data from the aircraft all the way back to corporate headquarters without ever touching the public internet. A common scene in a business aircraft cabin is multiple passengers busy using their own devices. In an ideal world, each passenger would be using a secure, individual VPN. However, all it takes is for one passenger to forget to use the VPN one time and suddenly your entire network is exposed. WHY TAKE THE RISK? The SD Private Network eliminates the need for passengers to use individual VPN connections. Think of it as another layer of defense against the human factor. With the SDPN, all your airborne data traffic can be delivered from the aircraft directly to your corporate network, bypassing public routing over the internet. You can then apply your corporate security policies to handle, block or deliver information according to your specifications. With SDPN, you make your aircraft onboard network operate as an extension of your corporate office. HOW IT WORKS The SD Private Network is a global communications framework that interconnects with satellite connectivity providers via the SD Data Center (see below) and SD s multiple points of presence (POPs), worldwide. This allows the application of SD proprietary valueadded services to: Improve data throughput Filter unwanted data transmissions to and from the aircraft Encrypt traffic along the entire data path As a direct result of these enhancements, you get a better user experience than any other service provider can offer even over the same satellite network. With POPs located in the US and Europe, SD offers flexible routing and addressing options to meet various corporate policies and regulatory requirements. GOING THE EXTRA MILE: THE SD DATA CENTER Satcom Direct is the only data provider in business aviation that operates a wholly-owned data center dedicated to safeguarding your connectivity and communication streams. The SD Data Center is the foundation for all of Satcom Direct s services and the base from which we can help you build a tailored cyber security strategy. Whereas other providers outsource this to thirdparty data centers, with Satcom Direct your data never leaves the company s 25,000 sq. ft. purpose built facility that meets Tier III standards, complies with major industry requirements, and is designed to withstand a Category 5 hurricane. In other words, your data is safe here. SDPN: A SEAMLESS, PRIVATE, ENCRYPTED CONNECTION FROM AIRPLANE TO SD DATA CENTER TO CUSTOMER HQ SATCOM DIRECT.COM

7 NETWORK DISCOVERY IN ACTION After reviewing a company s self-assessment questionnaire, SD s Cyber Security team discovered that an aircraft router was still using factory default passwords making it extremely vulnerable to hacking. Once identified, SD worked with the company to eliminate the risk by creating a password management policy. SECURITY RISK ASSESSMENT IN ACTION During an onsite assessment, the SD Cyber Security team that an agreement in place for IT data protection was out of date. As a result, SD performed a vendor audit and brought the vendor s security compliance in line with the flight department s latest policies. RISK MITIGATION AND THREAT MONITORING SERVICES IN ACTION Using SD threat monitoring tools, SD s Cyber Security team detected an inbound threat on a customer s aircraft. SD identified it, stopped it and traced it to its source an employee s laptop thus eliminating the threat and preventing the virus before it caused any harm. SD PRIVATE NETWORK IN ACTION Even though a flight department s IT policy recommended that passengers use individual VPN connections, SD s Cyber Security team discovered that the company s data was at risk because VPNs weren t being used consistently. Implementing SDPN solved that issue, increased connection speeds and reduced the company s data cost.

8 WHEN A HACKER STRIKES YOUR AIRCRAFT, ARE YOU READY? The unfortunate reality is that it s not a matter of if a breach will occur, but when. Simply said, nobody in business aviation has invested more in cyber security than Satcom Direct. SD is the only provider offering the technology, assessment, training and ongoing support needed to address both the technological and human components of cyber security. SD s Cyber Security team combines experience and expertise, providing solutions to help bolster your flight security practices from cockpit to cabin and beyond. As a valued customer, the integrity of your data is important to us. For those who choose to maximize their cyber security strategy by combining SD connectivity, SD hardware and the SDPN, we offer the industry s only Security Confidence Guarantee. We re so confident in our private network, if your aircraft is compromised by a security threat and you suffer a monetary loss, SD will pay for it subject to the Confidence Guarantee terms and conditions. That s our Guarantee. With SD s support, there are numerous steps you can easily take today that could potentially save you and your company significantly tomorrow. The first step toward protecting your business is taking the selfassessment a 12-question questionnaire and free phone consultation with an SD cyber security expert. To get started, contact us today at cybersecurity@satcomdirect.com or SD: YOUR IN-FLIGHT CONNECTIVITY PARTNER. Satcom Direct, Inc 2017 All Rights Reserved.