Defence Logic Webinar | The Outcome of Your Next Breach Was Settled Years Ago.

Speakers: Paul Fromage, IT and Operations Director, Moore Stephens, Anthony Flemmer, CEO Defense Logic and Sam Newton, Head of SOC, Defence Logic.

Last year, Moore Stephens did what every well-run firm does from time to time: it commissioned a penetration test of its own systems. In the ordinary course of things, the security provider is told in advance. On this occasion, nobody mentioned it. Nine minutes after the testers went to work, Defence Logic was on the phone, asking about unusual activity it had just observed on the network.

Nine minutes looks like a tooling story. It isn’t. It’s the payout on four years of accumulated familiarity, the kind that gets built quietly, long before there’s ever an incident to test it. Every firm believes its environment is being watched, that’s what the monitoring contract says. But there’s a difference between a provider that watches feeds and one that knows a business well enough to recognise, within minutes, that something doesn’t belong. That difference doesn’t announce itself in advance. It surfaces during an incident, at precisely the moment it’s most expensive to discover it wasn’t there.

On 23 September, Paul Fromage, IT and Operations Director at Moore Stephens, joins Anthony Flemmer and Sam Newton, Defence Logic’s Head of SOC, for an hour on what four years of genuine familiarity makes possible, and on the questions every board should be asking of whoever watches its environment now, before that answer gets tested for them.

The session
The hour moves through three questions.
What does it mean to be known? Four years inside one environment teaches a provider what no dashboard can: what normal looks like, which systems carry weight, what would count as strange. Paul opens with the client’s view of that familiarity and what it changed.
What does seeing first look like? The penetration test, recounted by the man whose firm ran it. Nine minutes from first activity to first phone call, and Sam on why that speed owed nothing to luck.

Who do you call? Paul doesn’t open a ticket, he speaks to a person who already holds the context. Why that matters more than any service level agreement, closing with the questions Paul would now put to any provider. Every registrant takes them away as a boardroom-ready one-pager: The Board Questions.

Attendees leave able to judge whether the monitoring they pay for amounts to being watched or merely being logged, with The Board Questions in hand, and the full recording to follow