Loading...
HomeMy WebLinkAboutDS.3 - Motorola SolutionsPrevent attacks, meet compliance requirements and respond quickly to security incidents Strengthen your defenses and mission-critical system resilience Brochure Safeguard your organization To protect your systems, it’s critical to have a complete understanding of where you might be vulnerable and which regulatory and compliance frameworks impact your organization. Motorola Solutions Cybersecurity Services bring together an integrated portfolio of Managed Detection and Response (MDR) and Advisory Services aligned to the National Institute of Standards and Technology (NIST) framework. As a trusted partner, we help you develop roadmaps to safeguard your information, employees and systems. Our security advisors can assess your organization and deliver critical insights so you can make informed decisions on the best security procedures and controls to implement and build a robust cybersecurity strategy and roadmap in line with your business needs and industry best practices. Our Cyber Assurance Program (CAP) is designed to help you improve your defenses even further once your MDR service is deployed. The program includes a suite of professional services delivered annually to strengthen your security response plans and overall program. They include Tabletop Exercises, Incident Response (IR) Planning, Risk Assessments, Vulnerability Scans and Penetration Testing (aka ethical hacking). The program is tailored to your specific environment. A multi-year package provides a cost-effective approach. Table of contents Safeguard your organization 2 Risk assessments 4 Penetration testing 5 Incident response planning 6 Tabletop exercises 7 Compliance assessments 8 Building a cyber defensive mindset 9 Resources 10 2 People Experts with top industry certifications work hand-in-hand to ensure system availability and security Security experts focused on 24/7 monitoring and response Security events proactively monitored each day Years of experience developing cybersecurity solutions Process Services aligned to the NIST Cybersecurity Framework Technology Network to security operations, security orchestration and automation — designed to accelerate service response 300+9B 20+ Global scale & experience Cybercrime costs organizations an average of $2.9 million1 every minute, with global ransomware costs predicted to exceed $265 billion2 by 2031. Motorola Solutions 90+ years of skilled experience, collaborative approach and use of scenario-based drills will prepare your organization to detect and respond quickly in the event of a cyber attack. 3 Risk assessments Our assessments provide your organization with useful insights by analyzing your current environment, systems and security program to identify critical vulnerabilities and gaps that need to be addressed. We use this information to develop a robust cybersecurity strategy that is mapped to key regulatory frameworks and provide a prioritized list of risks and vulnerabilities. Pre-assessment Together we define the scope and agree on the desired outcome to meet your operational needs. Our cybersecurity experts collaborate with your team to define the statement of work and all deliverables. We develop an end-to- end understanding of your business operations including network architectures, security policies and controls, compliance and governance frameworks to finalize engagement scope and timelines. Onsite assessment Our onsite assessment, which includes data gathering and documentation, starts with one-on- one interviews with key stakeholders, understanding business profiles and analyzing annual statements and existing approaches to security. Workshops are conducted to close out any knowledge gaps. We can perform regulatory assessments along with vulnerability and threat intelligence assessments to evaluate network, applications and endpoints. Post-assessment Once our consultants have collected the data, they distill it using a set of sophisticated programs including a Risk Scorecard report indicating low, moderate, high and critical severities for each finding. Then, working with your team, we produce a set of roadmaps and recommendations to strengthen your system’s cyber resilience. 4 Penetration testing Our experts evaluate the security of your IT and communications infrastructure by trying to exploit its vulnerabilities. By probing your systems for any potential gaps, we can reveal issues that could leave your organization at risk and recommend how to close them before a malicious actor exploits them. Motorola Solutions offers penetration testing, also known as pentesting or ethical hacking, to ensure that your organization is aware of potential risks and how to best address them. External An external network pentest is designed to test the effectiveness of perimeter security controls to prevent and detect attacks, such as physical premises security and digital authentication soundness. It can also identify weaknesses in internet-facing assets such as web, mail and FTP servers. Wireless A wireless pentest is performed by ensuring that all wireless connections between the business WiFi network and devices are secured from attacks. Internal An internal network pentest helps organizations detect what an attacker could achieve with insider access to their network. An internal network pentest can mirror threats that can come from within an agency, such as an employee intentionally or unintentionally performing malicious acts or an external malicious threat actor who gains access to the same privileges as an employee. Web application A web application test ensures that any public facing web application, such as a website, is secure and that any data connected or submitted to that page is safe. Types of pentesting Phases of pentesting Pre-engagement Engagement Post-engagement Document and submit applicable findings Establish Rules of Engagement (ROE) Perform pentests aligned with ROE 5 Incident response planning With cyber attacks on the rise, it’s increasingly important to have an incident response (IR) plan ready in the event that your systems are compromised. Our incident response services are tailored to your needs and organizational structure to optimize how your agency will handle a cyber attack. Motorola Solutions custom IR plans are designed to be the best fit for your employees, processes and technology so you have a well-defined plan in the time of need. Be prepared for any situation Proven approach to security incident management Motorola Solutions can help contain or prevent an incident by recommending and implementing safeguards. Through an array of technologies and skill sets around cloud analytics, endpoint threat hunting, log and data analytics, system forensics, malware analysis and more, our incident response planning provides assistance developing an integrated response to cyber attacks and data breaches. This can also include advanced threat hunting and post-incident analysis. Industrial control incidents Natural disasters Internal/external threats 6 Tabletop exercises Tabletop exercises are a type of emergency preparedness planning exercises that enable a broad group of participants to evaluate the effectiveness of your organization’s incident response plan, as well as walk through the who, what, when, where and how of a situation in a safe environment. Cyber exercises like this provide a valuable real-world scenario to see how prepared your team is and where improvements should be made, as well as ensuring that key stakeholders across the organization understand their role in the event of an emergency. These exercises improve the team’s ability to detect, respond and recover to cybersecurity incidents faster. Be prepared for any threat Of employees are likely to click on phishing email links3 Of cybersecurity breaches result from human error4 20%95% Ransomware Phishing Malware Data breach 7 Compliance assessments Our compliance assessments give you data-driven, prioritized recommendations to inform better cyber risk management and decision-making. We ensure your team adheres to the regulatory cybersecurity requirements that are in line with your unique organizational needs and follow industry best practices. Our experts can provide gap analysis preparation and pre-audit verification. Audit reports* evaluate the strength and thoroughness of compliance preparations, security policies, user access controls and risk management procedures over the course of a compliance audit. Our experts are also approved to assess your agency or organization as meeting certain compliance certifications. * Motorola Solutions can currently only provide audit reports for CMMC. The Cybersecurity Maturity Model Certification (CMMC)* program includes cyber protection standards for companies in the defense industrial base (DIB). By incorporating cybersecurity standards into acquisition programs, CMMC provides the Department assurance that contractors and subcontractors are meeting DoD’s cybersecurity requirements. National Institute of Standards and Technology (NIST) 800- 171 is a NIST Special Publication that provides recommended requirements for protecting the confidentiality of controlled unclassified information. Federal Information Security Modernization Act (FISMA)(NIST) 800-53 is the guideline established for federal agencies to uphold regulatory requirements regarding the management of their information security systems. StateRAMP provides a comprehensive security framework designed to improve cloud security for state and local governments. FedRAMP is a government-wide program that promotes the adoption of secure cloud services across the federal government by providing a standardized approach to security and risk assessment for cloud technologies and federal agencies. International Organization for Standardization (ISO) 2700X/9001 provides a model for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an information security management system. Center for Internet Security (CIS) Controls are a set of 20 best practices that can guide you through the process of creating a layered cybersecurity strategy. Cybersecurity Maturity Model Certification National Institute of Standards and Technology 800-171 Federal Information Security Modernization Act 800-53 StateRAMP FedRAMP International Organization for Standardization 2700x/9001 Center for Internet Security Controls Assessment options 8 Industry-leading NIST cybersecurity framework Building a cyber defensive mindset When a cybersecurity incident occurs, what will you do? With cyber attacks growing in number and intensity, businesses and public safety agencies must be prepared to keep critical operations running smoothly by detecting and handling security incidents and breaches. Our experts are ready to work with your agency to create a comprehensive cybersecurity strategy plan. With more than 90 years of experience managing mission-critical technologies and more than 20 years of developing cybersecurity solutions, Motorola Solutions Cybersecurity Services empower agencies to take control of their security and instill confidence in employees to handle cyber risks. Identify Protect Detect Cybersecurity Advisory Services Incident response planning Penetration testing Tabletop exercises Compliance assessments Risk assessments Respond Recover Assess Risks Inventory critical assets and systems Provide a thorough risk analysis Develop Safeguards Develop policies, procedures; introduce protective tools Implement appropriate access and auditing controls Make Timely Discoveries Continuous monitoring 24/7/365 Enable auditing capabilities Take Action Establish a robust response plan Create, analyze, triage and respond to detected events Restore Functionality Institute a recovery plan Create improvements to prevent future attacks 9 Resource Certifications • Certified Information Security Manager (CISM) • Certified Information Systems Security Professional (CISSP) • Certified Information Security Auditor (CISA) • Microsoft Certified System Engineer (MCSE) • GIAC Certified Incident Handler (GCIH) • GIAC Security Essentials (GSEC) • Security+ • Offensive Security Certified Professional (OSCP) • Certified Ethical Hacker (CEH) • GIAC Penetration Tester (GPEN) Motorola Solutions, Inc. 500 West Monroe Street, Chicago, IL 60661 U.S.A. motorolasolutions.com MOTOROLA, MOTO, MOTOROLA SOLUTIONS and the Stylized M Logo are trademarks or registered trademarks of Motorola Trademark Holdings, LLC and are used under license. All other trademarks are the property of their respective owners. ©2024 Motorola Solutions, Inc. All rights reserved. 03-2024 [EV06] October 2, 2024 Use or disclosure of this proposal is subject to the restrictions on the cover page. Motorola Solutions Page 1 Motorola Solutions Company Profile and Experience Motorola Solutions (Motorola) has been an innovator in communication technology since our founding as the Galvin Manufacturing Corporation in 1928. We pioneered the walkie-talkie and the police car radio, and for decades we’ve deployed our industry-leading Land Mobile Radio (LMR) networks, with over 13,000 systems implemented worldwide. In 2011, we made a pivotal decision to spin off our consumer electronics division and bring our focus on safety and security to the forefront of all that we do. As Motorola Solutions, our singular mission is developing cutting-edge technology to empower customers to solve for safer – safer communities, safer schools and businesses, safer events. To this end, we concentrate our efforts and resources on developing a robust ecosystem of public safety applications and services. Our vision for a safety and security ecosystem grew from our work in the field. To help our customers continually adapt and improve their operations, especially in the context of changing technology and an influx of text and video data, we saw a need to provide connected technologies that support coordinated responses. We are fully invested in offering solutions across LMR, video, command central software and cybersecurity that work together to ease workflows and facilitate faster, more accurate sharing of information. Our ecosystem of products and services aims to make the job of public safety easier, more effective and more engaged with the community. Motorola has a proven record of implementing public safety technology around the world, and we continue to lead the way in technology advancements. Our ongoing strategy to provide the right solutions for safer outcomes includes investing in research and development and pursuing strategic acquisitions: Research & Development With a 2023 research and development budget of $858 million, we have the industry's largest investment in R&D, with a focus on improving incident detection, streamlining operations and enhancing interoperability. We continually seek to leverage technologies such as high-resolution cameras, A.I.-powered video analytics, and improved radio and communications technology to help our customers meet the challenges of the ever-changing landscape of public safety. To that end, we take a human-centered design approach to product development: we start by understanding our customers in the context of their environments. Working alongside public safety personnel in all roles, we use immersive research to discover gaps and hidden complexities that we can help address with improved technology. Regular testing and feedback from administrators, personnel and first responders in the field guide every step of our process for technology development. Motorola Solutions October 2, 2024 Use or disclosure of this proposal is subject to the restrictions on the cover page. Motorola Solutions Page 2 The real-world impact of our approach is visible in our improvements to tools and workflows, such as: Radios with features that are easy to use in the most demanding conditions, whether purposefully designed emergency buttons or voice activation. Dispatch solutions that ease workflows, such as using real-time, searchable voice audio transcription. Cameras that are made specifically for their locations, such as a cabin camera locked into place, with a protective cover that withstands tough treatment and a microphone that captures backseat sounds. Strategic Acquisitions Bringing state-of-the-art technology into Motorola’s portfolio helps us provide our customers with the right innovations for their unique needs and requirements. Since 2015, Motorola has invested more than $6 billion in targeted acquisitions. We spend significant time learning about a firm’s offerings and leadership team to ensure that the product matches our goals for integrated technology. Critical Communications Motorola is a pioneer in the development of LMR networks, with decades of experience designing and deploying systems throughout the US and across the globe. With over 500 ASTRO 25 trunked systems and thousands of conventional sites deployed, more than two million users rely on our solutions for mission-critical communications. Our LMR systems and subscribers are designed to perform in demanding environments and emergency situations, making us a trusted choice for public safety communication technology. Our ongoing investment in research and development to enhance our offerings puts Motorola at the forefront of innovation to connect LTE and P25 technologies and enable interoperability across voice and broadband networks, allowing seamless communication across different agencies and organizations. Motorola Solutions October 2, 2024 Use or disclosure of this proposal is subject to the restrictions on the cover page. Motorola Solutions Page 3 As part of our commitment to providing our customers with the best available critical communication solutions, we offer robust customer support and service, including training, maintenance offerings and technical support. We also have extensive experience with regulatory standards and requirements, ensuring that our offerings meet the necessary legal and safety protocols in different regions and applications. And our cybersecurity solutions meet the highest standards of network protection with tools that include secure network design, encryption, authentication, continuous monitoring and incident response plans. Our comprehensive communications solutions improve response times, streamline operations, and enhance outcomes for everyone involved. With Motorola Solutions, public safety agencies have the tools and capabilities to meet future emergency situations and keep communities safe. Financial Stability Motorola is a Fortune 500 company with year-on-year sales increases, robust product backlogs, and strong outlook for future performance. Our secure financial position allows us to: Offer solutions built for our customers Motorola’s financial stability means we can scale and adapt solutions so that they directly respond to your circumstances of size, geography, budget and evolving needs. Build long-term partnerships You can count on us to be around to finish the work we’ve started. That’s important to us. Building long- term partnerships to enhance safety, no matter the challenges or the technological advances, drives our work every day. Prepare for the future Our financial security also allows us to invest in research and development at a level that new and smaller competitors can’t sustain, and to secure acquisitions in areas where our customers have expressed a need for better solutions.