Why Proactive Services?
First, let’s take a high-level look at all sub-functions that should be addressed as part of proactive services. The following image captures much of what the Proactive Services function entails.
Figure 11.1: Sub-functions of the Proactive Services function
In short, the Proactive Services function executes activities that identify potential threats before threat actors find them – essentially, those services you execute before a cybersecurity incident occurs versus reactive services, which are those that occur after a cybersecurity incident, such as Digital Forensics and Incident Response (DFIR). Proactive services also better prepare our teams to react more efficiently when an event occurs. At a high level, a lot of what we do as part of our cybersecurity program is to take a proactive approach as best as possible. Essentially, the essence of having a cybersecurity program sets the precedent that we are taking a more proactive approach...