Attack simulations are designed to test the strength of an organisation’s security mechanisms by launching a simulated attack on its infrastructure.
These types of tests help organisations identify, understand, and implement better technical defences against attacks, with minimal disruption to their daily activities.
The simulations are conducted in a controlled environment with the help of cyber security consultants and can measure key performance indicators (KPIs) such as:
- Time to detect an attack
- How long it takes for various systems to recover from attacks
- Which parts of the infrastructure were affected by particular types of malicious software.
Whatever your needs are in terms of attack simulation testing, on-demand or as part of your cyber security assessment, we have you covered.
Attack Simulation Services
Red Teaming
Red teaming exercises are the best way to strategise how to develop your defensive capabilities comprehensively. Our teams can simulate the role of an attacker to test the defences of your perimeter and internal network. We can also engage with your internal security team throughout this process to help improve your overall security posture.
Purple Teaming
Purple teaming is an exercise in unifying the powers of both the red and blue teams, typically with an objective to improve communication, build trust, and increase speed for incident response. We can simulate attacks on your business with objectives to test detection mechanisms, identify vulnerabilities, and maintain access throughout the course of the attack simulation.
Assumed Breach Testing
Assumed breach testing begins with our testers on the target network investigating what can be achieved if an attacker successfully breaches the network perimeter. We will take steps to escalate privileges and map your network, find vulnerabilities, and determine if there are any blind spots in your detection capability.
Foreign Interference Testing
Foreign interference testing combines threat hunting and cyber security testing. It analyses your detection capabilities and how your organisation deals with probing and sustained threats within your network. While testing within the network, our associates will also search for signs of intrusion and malicious activity. Anchoram’s foreign interference tests simulate real-world incidents so that you can develop pragmatic and effective incident response mechanisms.
Practice Lead
Harpreet (Harry) Cheema
COO
Anchoram Global
Harpreet's role as a partner and chief operating officer is focused on delivering the vision of the founding partners of the firm. Anchoram Consulting has been founded by a group of senior and experienced professionals, who have all worked in public sector, industry and large global consulting powerhouses, and share a common purpose to serve organisations with strong client service ethos.
His own working life has spanned over 17 years and has included working in direct customer service roles, working from within the public sector, and a stint in KPMG Brisbane where he gained exposure to the Energy and Resources and Transport and Logistics sectors. Harpreet's last significant role was as a Principal in Deloitte’s Canberra practice where he led its federal government Cyber Risk Advisory team. Over the last 9 years, while working in a Big 4 consulting environment, he has led the delivery of numerous assurance and advisory engagements for various public, private and not-for-profit sector entities.
Cyber Security Services
Operational Technologies like ICS and IoT are both highly specialised and highly targeted, so managing the threats to these systems is essential.
Attack simulations are designed to test the strength of your security mechanisms by simulating an attack on your infrastructure.
Security reviews identify existing vulnerabilities and provide insight into how they may have manifested, as well as determining strategies and techniques to avoid future vulnerabilities.
Penetration testing provides assurance that systems and their respective security controls are working as intended, and are not susceptible to exploitation.
Our Responsive Security Services include incident response, SOC uplift, resilience testing, and threat hunting to detect, respond, and recover effectively.
