JBS x S&J Release Ransomware Response Support Service
– Providing the Three Pillars of Advance Preparation, Diagnosis, and Monitoring –
2024.10.31
PressreleaseJapan Business Systems, Inc. (Headquarters: Minato Ward, Tokyo; President: Yukihiro Makita; hereinafter, “JBS” securities code: 5036) today released Ransomware Response Support Service in collaboration with S&J Corporation (Headquarters: Minato Ward, Tokyo; President: Nobuo Miwa; hereinafter, “S&J” securities code: 5599), given the numerous reports of serious security incidents reported in recent years in Japan. Focusing on taking measures in accordance with security measure processes, the service provides the three menus of “advance preparation,” “visualization through diagnosis,” and “security monitoring.”
Ransomware attacks are proliferating now regardless of industry or size of business, and it is said that average global damage amounts to about 440 million yen.*1 On the other hand, when looking at the actual circumstances of companies, it may seem like ransomware attacks do not happen very often and that they are someone else’s problem. Companies can become overconfident that as long as they have the minimum measures in place, they will be all right. Such low awareness for security measures and lack of security human resources are at the root of the problem and it is difficult to accurately grasp ransomware attack methods and the latest trends, creating the problem of appropriate measures not being taken. The Ransomware Response Support Service supports customers who have such problems in narrowing down the necessary points and taking easy yet high level measures.
*1 Data cited from: “Theatrical type” ransomware attacks increasing; average damage amount increases 1.5 fold, The Nikkei (Japanese only)
Consists of Three Menus from Experiencing a Simulated Threat, Visualizing Diagnosis Results, to Monitoring
The Ransomware Response Support Service consists of three menus, Ransomware Advance Preparation Support to organize ransomware response procedures, Ransomware Diagnosis to identify attacks and deficiencies in operation, and Ransomware Monitoring to detect attacks. The three menus make it possible to cover the necessary processes to respond to ransomware attacks.
1. Ransomware Advance Preparation Support
In the first menu, Ransomware Advance Preparation Support, participants have a simulated desktop experience of a ransomware incident occurring in the company’s systems to improve awareness among responders and create a document as a record organizing the various internal information of the organization’s IT environment, etc. By creating this record in advance, the customer will notice potential risks that exist within their systems. At the same time, the record is also useful for making a swift initial response in the case that a security incident occurs and helps to deescalate situations in the early stages.
2. Ransomware Diagnosis
In the second menu, Ransomware Diagnosis, JBS analyzes the logs (system settings situation, etc.) obtained from a diagnosis tool and the contents of an interview to evaluate whether your servers or clients have been attacked and compiles a report. We also turn our attention to brute force attacks*2 for Active Directory (hereinafter, “AD”) servers for directory management, which tend to be targeted by ransomware, and various other devices, to diagnose whether there are any indicators of compromise or deficiencies in order to minimize damage from attacks.
*2 A method to attempt unauthorized login by using trial and error to crack passwords, which is used as an entry point for ransomware attacks.
3. Ransomware Monitoring
In the third menu, Ransomware Monitoring, unlike a more general monitoring service, we conduct security monitoring focusing on AD and clients, which tend to be targeted by ransomware attacks. We provide support to find dangerous threats that could be ransomware as soon as possible and prevent incidents to minimize damage caused by ransomware. Specifically, we collect the behavior of servers such as AD servers and clients (authentication, event logs, communication, etc.) on an analysis platform and security analysts from JBS and S&J monitor for suspicious behavior that could lead to an attack.
Collaboration with S&J, a Company with a Strong Background in Security
The Ransomware Response Support Service is the second collaborative service between JBS and S&J since JBS SOC which was released in October 2023. Combining S&J’s high level analytical capabilities for threats and security incident response capabilities with JBS’s knowledge related to DX and cloud security centered on Microsoft Cloud Services, we realize high level problem-solving.
Reference: about JBS SOC
2023, JBS and S&J have been providing the JBS SOC (Security Operation Center) service which aims to protect customers’ IT systems from threats. Utilizing JBS’s strengths in handling numerous security cases and operations using Microsoft products to date, security analysts monitor alerts detected by Microsoft 365 E5 Security and Microsoft Defender for Cloud 24/7. Additionally, after creating a dedicated record to understand the customer’s environment, we conduct a correlation analysis of communications logs, etc., such as firewalls and proxies to determine the degree of threat and notify the customer only of alerts that require handling.
JBS continues to enhance our security-related services to respond to customers’ diverse IT maintenance and management needs in strong partnership with S&J, Microsoft, and other partners.
Price: Ransomware Response Support Service
-
Ransomware Advance Preparation Support
Offer price (tax excluded): 550,00 yen –
-
Ransomware Diagnosis
Offer price (tax excluded)*3: from 1,150,00 yen
*3 The prices change depending on the number of PCs and Active Directory servers.
-
Ransomware Monitoring
Offer price (tax excluded): initial fee: from 1,200,00 yen, monthly fee*4: from 1,300,00 yen
*4 The monthly fee changes depending on the number of users.
Each service can be offered individually in accordance with your needs.
For details, click here.
- Any company names, logos, and product names mentioned are the registered trademarks or trademarks of their respective companies.
- All details in this press release are as of the date of the creation of this press release and may change without notice. The service may change in part or in its entirety, be cancelled, or become unimplementable due to various reasons.
Related Solution
-
Ransomware Response Support Service – Ransomware Advance Preparation Support –
By actually handling a virtual incident, you will be able to identify the problems in the escalation flow and investigation method, sharing a common awareness of what to prioritize in decision-making. Additionally, by creating a record, you will be able to review problems in collecting logs and their storage period, along with any problems in the response flow.
Supports Your Organization to Strengthen Its Incident Response Capabilities
- Security
-
Ransomware Response Support Service – Ransomware Diagnosis –
We visualize your response situation against ransomware and other malware infections and submit a report. You can then consider future security measure enhancements through this diagnosis of whether you have any traces of attacks or vulnerabilities in your settings that make it easier for attackers to target you.
Assess Your Resistance to Cyberattacks Such as Ransomware Attacks
- Security
-
Ransomware Response Support Service – Ransomware Monitoring –
With ransomware becoming increasingly more widespread, this service is ideal for customers who are worried about ransomware monitoring and how to deal with ransomware when it is detected. JBS provides security monitoring focused on client devices and Microsoft Active Directory, minimizing damage due to ransomware.
Providing Appropriate Security Monitoring for Ransomware
- Security
Share