Securing the Digital Promoting Biosecurity

About US

Deep International Experience

Pagasae is a high level international advisory firm specializing in Cybersecurity and Biosecurity. We have strong links with the leaders of Internet business, the technical community and medical scientists throughout the world. Fortune 500 companies through to start-ups look to us to manage downside risks posed by cybercrime and cyber espionage, and to put in place systems to minimize the risk of biological infection in the workplace.

CyberSecurity Solutions

Pagasae takes a business-back (rather than a perimeter-in) approach to cyber challenges. Our approach has been developed over our many years of cybersecurity leadership and our institutional operational experience in serving as senior level executives in both government and commercial sectors.

Biosecurity Services

We deliver integrated technology and services to diminish the risk of COVID-19 and other epidemic infections in the workplace. Pegasae analyzes, manufactures, supplies and implements global best practice in risk minimization, technologies, threat intelligence and operations. Our mission is to ensure that visitors, proprietors and staff are safe and confident.

cybersecurity

The Business Risks We Address

With years of experience working with senior managers and teams in the private and public sectors, Pagasae helps you address:

Industrial espionage includes the theft of valuable business information for economic advantage. Competitors may steal intellectual property (e.g. business plans, algorithms), diminishing economic value. Interested parties may get access to proprietary strategies or plans, reducing confidence in the integrity of decision-making processes. Counterparties may obtain negotiating strategies or tactics, resulting in less advantaged contractual arrangements.
Reputational attacks diminish an institution’s ability to function effectively in the marketplace. Public leakage of internal discussions can be a huge management distraction and release of sensitive customer or counterparty data diminishes the trust required for an institution to make contracts and other arrangements.
Business disruption either slows down or stopslo9\. internal or customer-facing processes, resulting in increased costs, lost business and, in many cases, diminished market position.
Cyber-fraud compromises on-line transactions (e.g. payments) as a mechanism for theft – at some financial institutions this amounts to a half billion dollars or more per year.
Extortion implies a cyber-criminal demanding payment or a hacktivist demanding executive action if an institution wants to avoid a reputational attack or business disruption.

Information Risk Managementl.

Pagasae is particularly well-suited to assist its clients in understanding the risks to their information assets and aiding them in developing an effective Information Risk Management Program (“IRMP”). Pagasae implements its proprietary risk assessment process, consisting of threat modelling; risk identification; analysis rating; remediation strategies; and a resulting residual risk calculation to provide its client with a detailed threat risk analysis. Based on this risk analysis, Pagasae will develop a detailed and itemized Information Management Plan identifying its client’s informational risks, existing cyber defenses, and resulting “gap analysis.” This gap analysis will serve as the basis for Pagasae’s recommended Risk Information Management Plan to the client with recommendations for risk remediation and mitigation including strategies related to people, processes, and technology.

Information Risk Management

With years of experience working with senior managers and teams in the private and public sectors, Pagasae offers:

Counseling to Board, CEOs and Executive Managers on strategic planning and specific strategy problems in Cybersecurity and Biosecurity
Cutting edge analytical, operational and project management service to counter persistent cyber security threats and protect information assets
Technical, business process, and value-chain risk analysis and remediation services for COOs, CIOs and other C-level executives
Proprietary best-of-class detection, analysis and response software and processes
Operational situation awareness (both internal and external) and response services
Secure systems architecture, design and implementation
Cutting edge response services for countering persistent adversary threats
Expert client-capability development, exercising and oversight services
Evaluation of effectiveness of public policy and development of new policy
Strategic technology evaluation and business development processes
Industry analysis and forecasting of trends9

Director and C-Suite Engagement

The adage that there are only two types of companies – those who have experienced a breach, and those who do not realize they have been breached – is very true. So, how do Senior Executives and Board Directors take the appropriate actions to defend their shareholders/stakeholders?

Data breaches and malicious attacks from both external and internal sources continue to be the highest priority for senior executives and boards. They reinforce three facts. First, the protection of critical company and customer data is essential to protect revenue, reputation and enterprise value. Second, attacks against customer/employee information or intellectual property are being directed at all sectors of the economy. Finally, even the best programs will experience failure and expose some information the company would like to protect.

Pagasae takes a business-back (rather than a perimeter-in) approach to cyber challenges. Our approach has been developed over our many years of cybersecurity operational experience.

Pagasae offers counseling to Board, CEOs and Executive Managers on strategic planning and specific strategy problems in a Digital Economy. Such counseling can range from personal mentoring to whole of organization strategy studies and implementation plans. Our experience shows that:

The pervasive migration of value on-line, more inter-connected technology environments and more sophisticated malevolent actors dramatically “raises the stakes” for getting cyber-security right
Cyber incidents are having real impacts on financial performance, but responding poses important business trade-offs
In response, leading institutions are much more closely integrating cyber-security decision-making with business needs and imperatives
Effective cyber-security strategy starts with a deep understanding of business assets to protect and potential attackers who might want to compromise them
Leading boards are now focusing on the outcomes of assessing, testing and exercising the company’s incident response preparedness to test the effectiveness of their cyber strategy

Full Spectrum Operations Assessment

Mitigating strategies and recommendations for protecting yourself from dedicated attacks, Vulnerability assessments focus on finding technical holes in the network; penetration tests identify paths through the network a hacker can exploit to gain access to your systems or information. Neither approach understands your cyber ecosystem holistically. A full-spectrum operations security assessment looks at your people, processes, and technology together, to identify the linkages between them and how they can be exploited.

Most organizations have discrete controls in place to protect information, prevent access to sensitive areas, and ensure critical operations are resilient. An operations security assessment looks at more than just the network; it seeks to understand how those controls are implemented and how they can be circumvented using physical, social, and cyber methods.

Sample scenarios addressed by a full-spectrum operations security assessment:

Can your network-accessible access control system be exploited to provide unauthorized physical access to sensitive areas?
Are your visitor or new-hire procedures dependent on a person who can be leveraged to provide insider-like access to a malicious entity?
Do you have unstructured, yet critical data, that can be accessed from any network port, computer, or location in the organization?
Do you operate ostensibly “closed” networks for critical systems, data, or processes that someone with physical access can gain unauthorized access to?
Can someone with physical access gain access to network resources?
Can someone with network access gain unauthorized access to physical areas of your organization?

The goal of the assessment is to identify methods a dedicated attacker would use to circumvent your security controls, gain access to your systems, buildings, and exploit your information.

By combining our experience in conducting physical security, social engineering, wireless, and penetration tests, our full- spectrum operations security assessments provides you with a understanding of risks individual assessments can’t come close to providing.

Pagasae focuses every assessment to the most relevant risks facing the organization; no assessment is ever the same, meaning you get a tailored assessment, specific to your organization and needs. Pagasae begins by conducting open-source intelligence gathering to determine what information is publicly accessible. We perform social engineering to gain access to the organizational network and physical sites. In some cases, we will leverage the access we gain in one area, to access a different area. We will understand your people, processes, and technology in order to determine how they can be exploited.

We provide you with the following:

Extent of access gained, and the resulting operational impact
Understanding of how your current controls can be circumvented
Awareness of the threats, vulnerabilities, and weaknesses in people, processes, and technology
Methodology and processes used to gain access to systems, facilities, and information
Mitigating strategies and recommendations for protecting yourself from dedicated attacks

Pagasae can offer clients to conduct internal and external penetration testing of network and web applications using an appropriate combination of White Box and Black Box testing, Social Engineering, and Red Team (adversary replication) approaches to ensure client people, process, and technology providing cyber security are effective. We conduct the following types of assessments in performance of this effort:

Penetration Testing
Web Application Assessments
Web Application Assessments
Wireless Assessments
Social Engineering Assessments

Biosecurity

A Layered Approach to Diminishing Risk

Pagasae delivers and operates integrated advanced technology and services to diminish the risk of COVID-19 and other epidemic infections for indoor and outdoor events. Our layered approach to diminishing infection risk is based on the latest science. Our Advisory Board ensures our deployments of technology, systems and people evolve with the science and current threat intelligence.

Our mission is to ensure that visitors, proprietors and staff are safe and confident.

We Deliver

Infection risk minimization: protocol design and implementation Coordinating testing regimes: Antigen and antibody testing; longitudinal health vitals monitoring and medical advice; Integrated fitness wearable devices
Patron screening: Testing and health vitals apps; temperature triaging; blood oxygen measurement
Advanced disinfection: Spray misting and UV disinfection robots; visitor, worker and equipment misting disinfection; advanced long lasting disinfectants;
Fully integrated software and services
Flexible business model: custom designed for venues both indoor and outdoor.

Adapt to the Post-COVID-19 New Normal

Recent epidemiological history teaches us two stark lessons:

Th globalization of the world’s socio-economy, driven in part by affordable and expanding air and marine transport, means that disease outbreaks are more likely to become epidemics and epidemics are more likely to become pandemics; and
Growing human population and density are bringing more human-wildlife interaction, one result of which is additional opportunities for pathogen transmission.

COVID-19 is not a one-off event.

Such examples of recent pathogen transmission include HIV, Bird Flu, SARS, MERS, Ebola, Hendra and Zika. Other recent outbreaks include bovine tuberculosis, rabies and leptospirosis.

Gavi, the international vaccination alliance, has nominated 10 lethal diseases for which we do not yet have vaccines each of which could be the next pandemic.

Asset owners are investing in biosecurity capabilities to manage future risk not just COVID-19.

Clients

Some of our clients include:

Two global governance institutions
Several sports and entertainment arenas
An international E-sports competition
Several global insurers
Several global banks
A global mining company
A fintech start-up
One of Asia Pacific’s leading law firms
The Asia-Pacific arm of a global financial services group
A global media company
A telecommunications company
A web hosting company
A digital media content provider
A company in the on-line education field
A telecommunications operating systems company

Pagasae

Pagasae

Securing the Digital Promoting Biosecurity

Securing the Digital Promoting Biosecurity

About US

Deep International Experience

CyberSecurity Solutions

Biosecurity Services

cybersecurity

The Business Risks We Address

Information Risk Managementl.

Information Risk Management

Director and C-Suite Engagement

Full Spectrum Operations Assessment

Biosecurity

A Layered Approach to Diminishing Risk

We Deliver

Adapt to the Post-COVID-19 New Normal

Clients

Contact Us

Pagasae Inc