When dealing with security breaches, a swift incident response service is crucial. The client provided transparency about the security breach at their supplier, enabling Arco IT to evaluate the type of attack and the level of risk posed to the client and their customers. The risk assessment was shared with the client who sought pro-active steps to engage with their clients.

Meanwhile, we performed an extensive scan of the IT landscape to identify any potential compromises, which fortunately showed no spreading of the supplier’s compromise to their own systems. To ensure that the attackers wouldn’t pivot from the supplier to our client, existing access credentials were updated and additional security monitoring was set up. Every day, access logs were checked for any early warnings of attack and anomalies were jointly reviewed with the client.

Throughout the process, Arco identified several additional areas for improvement, such as more secure configurations of Active Directory. Higher priority items were implemented immediately by the client and lower priority actions were put on a roadmap for a larger system enhancement that was already planned.