R-Vision Computer Emergency Response System (CERS)

2021: Анонс R-Vision Computer Emergency Response System

On July 5, 2021, R-Vision announced the release of the R-Vision Computer Emergency Response System (CERS) to create a unified data exchange center for incidents, threats and vulnerabilities. With it, state regulators, including national banks, can build a state-level CERT to provide information exchange with controlled organizations to increase their level of security. The software package allows you to create similar departmental and industry centers, as well as expand the portfolio of MSSP services with services for managing cyber intelligence data and issuing threat bulletins.

With R-Vision CERS, CERT teams can collect incident data from all connected organizations and enrich them with additional context, including compromise indicators. The CERS software complex is able to collect compromise indicators from various sources: subscriptions to threat data streams, external services, incidents received from companies, and its own analytics of specialists and other services. All collected information is analyzed in the software complex, and if a threat is detected using the CERS solution, specialists can inform all interested participants of the information exchange about it, develop recommendations for protection measures and disseminate them, including by issuing bulletins.

Data exchange can be implemented through a personal account or e-mail. by the Method of interaction does not need to be selected each time manually: it is enough to specify it when the organization is first connected, and the system itself will determine the desired data channel. When working through your personal account, organizations can not only send information about incidents that have occurred to CERT, with which they are exchanged, and receive data from it about potential threats and vulnerabilities, but also view summary statistics, as well as maintain a database of information assets with attributes for them. identifications

R-Vision CERS can also be used as a tool for interacting with teams of other MSSP providers and threat data centers. CERT teams can set up a two-way exchange of data on existing and potential threats with similar foreign centers using the CERS software and act as equal members of the international community of such organizations.

The R-Vision CERS software complex combines our incident monitoring and cyber intelligence data management technologies and expertise to build a collective threat information exchange. So, the solution serves as a single work point for analysts, allows you to automate routine tasks and contains a ready-made set of organizational response scenarios necessary to create the CERT center, "said Igor Smetanev, commercial director of R-Vision. - R-Vision CERS is designed to help the state and business provide information exchange about threats and vulnerabilities to more effectively confront attackers. For example, with its help, service companies in holdings will be able to increase awareness of threats and vulnerabilities in all subsidiaries of the group and, as a result, increase the overall level of protection.