Cyber Security Finance Forum 2012 Michael DuBose Managing Director & Practice Leader Cyber Investigations Kroll Advisory Solutions Overview Kroll Advisory Solutions is the premier provider of risk management advice and solutions Kroll has 40 years of experience, a multi-disciplinary staff of 750, and offices in 30 cities across 17 countries We offer end-to-end risk mitigation, including prevention, management, response and remediation services Our trusted intelligence and scalable technology solutions help clients: » address business, legal, security, and reputational risks » obtain and interpret complex or hard-to-find information » drive compliance and capitalize on opportunities Our experts include former prosecutors, forensic accountants, intelligence analysts, cyber security professionals, corporate governance and regulatory specialists, journalists and litigation consultants 2 Proprietary and Confidential — Kroll Advisory Solutions Kroll’s Global Presence Europe Middle East & Africa London, UK Paris, France Madrid, Spain Milan, Italy Moscow, Russia Dubai, U.A.E. North America Dallas, TX Boston, MA Chicago, IL Los Angeles, CA Miami, FL Nashville, TN New York, NY Philadelphia, PA Reston, VA Eden Prairie, MN San Francisco, CA Washington, DC Toronto, Ontario 3 Latin America Mexico City, Mexico Bogota, Colombia Sao Paolo, Brazil Buenos Aires, Argentina St. George’s, Grenada Proprietary and Confidential — Kroll Advisory Solutions Asia / Pacific Mumbai, India Beijing, China Shanghai, China Hong Kong, China Tokyo, Japan Singapore Kroll: Global Leader in Cyber Security Data Breach Response – 24/7 Global Capability • Leading smart technology • Highly experienced investigators and cyber security professionals • Quickly locate origin & secure system • 24/7 response capability » Information Security Assessments • Comprehensive IT Risk Assessment and Analysis of Networks and Systems » Victim Notification and Remediation • When the law requires that breach victims be notified, we provide a comprehensive notification service that complies with all state laws and scales to any size project, as well as a dedicated call center and ID Theft Monitoring. » Complex Computer Forensics and Data Recovery • Industry-leading digital forensics and expert testimony • Data mining and analytics 4 Proprietary and Confidential — Kroll Advisory Solutions Data Breach Response Incident Analysis & Cyber Investigations: Kroll assures rapid deployment and immediate analysis of the source, type, and scope of intrusion. Data Preservation & Collection: Kroll offers cost-effective solutions to preserve, and collect data using forensically sound methodologies. • Reverse Engineering & Malware Analysis: Kroll’s forensic experts analyze malware to determine how it works and the scope of impact to your systems. • Expert Testimony & Reporting: Our experts have the necessary experience and credentials to serve as expert witnesses. • Notification: Kroll delivers a prompt, customized breach notification to those affected and provides frontline support to victims through our multilingual customer support center. • Remediation: Kroll offers dedicated consultation and restoration services to your breach population – including a dedicated call-center and ID Theft monitoring -- to help organizations manage reputational risks. 5 Proprietary and Confidential — Kroll Advisory Solutions Information Risk Assessments Kroll offers comprehensive enterprise IT security assessments to evaluate your network, applications, processes and policies: • Network security assessment • Penetration testing & vulnerability assessment • Physical security assessment • Web application testing • Wireless assessment • Policy assessment and design 6 Proprietary and Confidential — Kroll Advisory Solutions KROLL: a One-stop Solution for Data Governance Kroll protects networks, computers, programs and data from attack, damage or unauthorized access. In the event of an intrusion or data breach, we provide incident response and remediation solutions. » Data Governance & Compliance » Incident & Data Breach Response » Information Security Assessments » Computer Forensics » Data Mining & Analytics 7 Proprietary and Confidential — Kroll Advisory Solutions 8 Proprietary and Confidential — Kroll Advisory Solutions