Known as ORNA, the company says it is the first ever Software as a Service cyber incident response platform. The platform fully encapsulates every aspect of the SANS process, which was designed to help organisations act quickly to minimise damage in the event of a cyber security breach. Using a central information dashboard, ORNA walks small and medium sized business owners and their teams through the steps they need to take in the event of a cyber breach in real time, adapting reports and actions as new information comes to light.
Martyn Gill, global managing partner at Wembley Partners, said: “Cyber incident response programmes are typically expensive to develop, paper based and require constant updates and revisions to ensure they remain fit for purpose. In a world where the source and nature of cyber security threats is ever evolving, this is no mean feat and requires significant time and financial investment to stay ahead of the game.
“As a a result, many small and medium sized businesses fail to put effective systems in place, leaving them vulnerable to a cyber attack and over exposed to the financial risks involved with failing to manage an incident quickly.
“We created ORNA to provide an intelligent, responsive and affordable solution that could help SMEs mitigate the impact of cyber security breaches, creating a platform that can be tailored to their individual requirements while effectively guiding them through the steps and tasks they need to undertake when managing a live cyber incident. The platform supports nine well-defined roles across technical, legal, business, HR, third party and communications functions to ensure the response to any breach is fully joined up while reducing the need for constant scenario updates and team training.”
Should a cyber security incident occur, ORNA provides a simple, guided new incident creation process, which – once live – allocates automated, highly-detailed tasks to team members as the cyber security incident unfolds.
Intended for use across all six Cyber Incident Response Team (CIRT) member roles, each team member’s availability is tracked in real time, ensuring realistic workload allocations, while individual roles can also be reassigned at will. As each task is completed or more information comes to light, the platform is automatically updated, identifying and prioritising next steps and generating reports and KPIs as the situation evolves.
Martyn added: “Our research within the SME community suggested a real appetite for a SaaS solution such as ORNA and we’re excited by its potential. We’re delighted to be able to showcase it at the National Cyber Security Show and look forward to demonstrating its capabilities to both customers and industry professionals.”