DATASHEET
©2022 Arctic Wolf Networks, Inc. All rights reserved. | Public Arctic Wolf Managed Risk
Solution
Concierge Security Team
The Concierge Security T eam (CST) is your
single point of contact for your Arctic Wolf
Managed Risk solution. Your CST serves
as your trusted security advisors and an
extension of your internal team, customizing
services to your needs.
24x7 Monitoring
Around-the-clock monitoring for
vulnerabilities, system misconfigurations,
and account takeover exposure across your
endpoints, networks, and cloud environments.
Deliver timely critical outcomes with the deep
scan tools.
Strategic Recommendations
Your named security operations expert
becomes your trusted security advisor,
working with you to make recommendations
that harden your security posture over time.
Personalized Engagement
Regular meetings with your named security
operations expert let you review your
overall security posture and find areas of
improvement that are optimized for your
environment.
f Continuously scans your environment for
digital risks
f Performs regular risk posture reviews
f Provides actionable remediation guidance
f Works with you to build risk
management plans
f Delivers a customized risk management
plan to prioritize remediation and
measure progress
f Provides comprehensive visibility into
your risk posture
Organizations everywhere struggle with the complexity of identifying and managing security risks within their environment. Often, even fundamental information like what assets exist, which systems have vulnerabilities, and which systems are misconfigured is difficult to obtain. Even when this information is available it usually overwhelms the security team because its existing tools generate too many alerts and lack context. As security teams struggle with what to do next and how to prioritize, these risks pile up and leave organizations vulnerable to threats and damaging data breaches.
Built on the industry’s only cloud-native platform to deliver security operations as a concierge service, Arctic Wolf
® Managed Risk enables you to
define and contextualize your attack surface coverage across your networks, endpoints, and cloud environments; provides you with the risk priorities in your environment; and advises you on your remediation actions to ensure that you benchmark against configuration best practices and continually harden your security posture.
Continuous Risk Management Delivered by the
Concierge Security® Team
Assess
Determine your cyber
risk in the context of
your business
» Classification and
Contextualization
» Risk Scoring
» Concierge-Led
Prioritization
Harden
Expertise to guide your
strategy and help you
harden your environment
» Configuration
Benchmarking
» On-Demand
Reporting
» Guided Remediation
Discover
The ability to discover
and gain visibility to your
current attack surface
» Attack Surface
Coverage
» Dynamic Asset
Discovery
» Account T akeover
Risk Detection
By 2022, organizations that use the risk-
based vulnerability management processes
will have 80% fewer breaches.
— Dale Gardner, Forecast Analysis: Risk-Based Vulnerability Management, Worldwide | Published: 14 June 2019 ID: G00384640
EXHIBIT B
DATASHEET | 2
©2022 Arctic Wolf Networks, Inc. All rights reserved. | Public DATASHEET | 2
Deployment Phase
Our team will work with you to
deploy the Arctic Wolf® Platform,
install the Arctic Wolf® Agent,
integrate critical data points,
configure Cloud Security Posture
Management, and build an
understanding of your network
through internal, external, and host-
based vulnerability assessments.
Configuration Phase
We provide clear understanding
and full visibility into your
attack surface through the
following steps:
Active Vulnerability
Management Cycle
This cyclical 4-step process
ensures proper coverage, provides
prioritization of risks, allows
for consultation, and ensures
mitigation efforts succeed.
Concierge Kick-Off
Walk-through of the Managed Risk Process,
Q&A about your environment, goal defining,
expectation setting
Install and integrate scanners; configure the
Cloud Security Posture Management
Identity and Coverage Resolution
Insight on device coverage, network
coverage, and identity issues; verification of
total attack surface coverage
Define and Configure Asset Context
Review of initial critical asset list, identification
of gaps, recommendations for asset criticalities,
workflow, and organization tagging
Threat Landscape and Prioritization Review
T ailored risk prioritization according to asset
and risk context on your overall attack surface;
remediation recommendations
Managed Risk Process
INSTALLATION AND INTEGRATION STAGE
CORE STAGE
FUNDAMENTALS STAGE
FUNDAMENTALS STAGE
OPTIMIZED STAGE
DeploymentConfiguration ReviewActive Vulnerability Management Cycle Identify differences
between the initial /
previous vulnerability
and asset baseline to
understand attack
surface
Set priorities
for mitigation
and remediation
through risk metrics
and prioritized risk
links
Rescan risks
to ensure that
mitigation efforts
were successful
Resolution of
priority risks with
CST, discussions to
reduce overall risk
Discovery Phase Assess Phase
Harden Phase
Validation Phase
©2022 Arctic Wolf Networks, Inc. All rights reserved. | Public DATASHEET | 3
©2022 Arctic Wolf Networks, Inc. All rights reserved. | Public External Vulnerability Assessment
Continuously scans internet-facing assets to understand your company’s digital footprint and quantify your
business’s risk exposure. Key features include:
» Continuous scanning of external-facing assets
» Cloud Security Posture Management (CSPM)
» Account takeover risk detection
» OWASP top-10 scanning
» Automated sub-domain detection
Internal Vulnerability Assessment
Continuously scans all your internal IP-connected
devices while cataloging your core infrastructure,
equipment/peripherals, workstations, Internet of things (IoT) devices, and personal (e.g., tablets, cell phones) devices. Key features include:
» Continuous scanning of internal assets
» Proactive risk monitoring
» Dynamic asset identification and classification
» Stateless scanning and secure transfers
Host-Based Vulnerability Assessment
This capability extends visibility inside devices
through continuous host-based monitoring to identify
and categorize assets, as well as reveal system
misconfigurations, user behaviors, and vulnerabilities
that put your organization at risk. Key features include:
» Endpoint agents for Windows Server/workstation,
MacOS, and Linux distributions
» Proactive endpoint risk monitoring
» Audit reporting
» Security controls benchmarking
Quantify Y our Cyber Risk Posture
A cloud-based dashboard provides visibility into
continuous cyber risk assessment by incorporating all
meaningful cyber risk indicators from your business. It identifies the highest-priority issues and alerts you to emerging risks before they escalate into real problems.
It empowers you to take meaningful, efficient action to mitigate risk using these key features:
» Comprehensive risk profiling
» Informative user interface
» Proactive notifications and alerts
» Actionable reporting
» API integrations
Arctic Wolf Managed Risk Capabilities
Having a team to assess and manage vulnerabilities while monitoring our environment really helps us reduce our threat surface. We’ve made considerable progress in rebuilding integrity and trust in our IT systems, but risk never goes away—and if we aren’t aware of it, we can’t work to mitigate it. — Dr. Jason A. Thomas, Chief Operating Officer and Chief Information Officer, Jackson Parish Hospital ©2022 Arctic Wolf Networks, Inc. All rights reserved. | Public
©2022 Arctic Wolf Networks, Inc. All rights reserved. Arctic Wolf Networks, AWN and the Arctic Wolf Networks logo are trademarks of Arctic Wolf Networks, Inc. in the United States and/or other jurisdictions. Other names used in this document are for identification purposes only and may be trademarks of their respective owners.
DATASHEET | 4
AW_DS_0422
Security Risk Scoring
For effective risk management, you need to know if
your security posture improves or declines over time.
Benchmarking against other organizations in similar
industries helps you understand where you stand and
how to improve.
Configuration Benchmarking
T o help you prioritize your risk mitigation, configuration benchmarking is a risk score based on criteria such
as the attack vector accessibility, attack complexity,
and the impact of accessed data. These benchmarks
provide context so you can address the most critical
misconfigurations first.
Account T akeover Risk Detection
By continuously scanning the dark and gray web for
corporate credentials harvested in data breaches,
account takeover detection enables you to quickly take
action to secure compromised accounts. Typically, your
solution partner provides details such as the source,
description of the data breach involved, and the exposed emails.
Cloud Security Posture Management (CSPM)
A solution that protects against misconfigurations,
mismanagement, and other mistakes occurring in cloud
infrastructure, CSPM includes prevention, detection,
and response capabilities based on criteria such
as security frameworks, IT policies, and regulatory
compliance.
Asset Inventory
Your attack surface constantly changes as you add more
users and hosts. T o build and maintain a comprehensive inventory of assets, dynamic asset identification
profiles and classifies your IT assets automatically and continuously so that no new asset falls through the
cracks.
Asset T agging
Managed risk allows you to gain additional asset context of your risk prioritization efforts, assisting with asset classification and asset organization efforts. You can use asset tags to pivot and review assets as well as your risks during your risk management and hardening efforts.
It makes the automation of managing assets possible,
makes reports more meaningful for the business, and
improves risk prioritization efforts.
Asset Criticality
Assigning an asset a level of criticality as an attribute for risk prioritization provides a standardized critical labeling system with a clear definition of the asset’s
importance. The level of asset criticality can be critical, high, medium, low, or unassigned.
Risk Remediation Steps
Managed risk allows you to export a report with
remediation resources against your risk, vulnerabilities, and assets. By including the remediation steps
alongside the vulnerabilities, you can efficiently—and
consistently—remediate known risks.
Arctic Wolf Managed Risk Capabilities (Continued)
DATASHEET
©2023 Arctic Wolf Networks, Inc. All rights reserved. | Public Concierge Security Team
The Concierge Security Team (CST) is your
single point of contact for your Arctic Wolf
Managed Detection and Response (MDR)
solution. Your CST serves as your trusted
security operations advisor and an extension
of your internal team, and provides you with:
• 24x7 monitoring
• Alert triage and prioritization
• Custom protection rules
• Guided remediation
• Detailed reporting and audit support
• Ongoing strategic security reviews
Leverage Existing Infrastructure
The Arctic Wolf MDR solution leverages security
technologies within your current environment
so you can quickly detect, respond, and recover
from threats without worrying about vendor
lock-in, or replacing your existing systems.
Advanced Threat Detection
Machine learning with adaptive tuning detects
advanced threats and provides forensic
analysis for greater efficiency and scale.
Managed Containment
Rapidly respond to threats and stop their
spread by preventing host devices from
communicating externally, as well as
with other devices on your network.
IR JumpStart Retainer
Arctic Wolf® IR JumpStart Retainer is
the first proactive incident response
retainer that combines incident response
planning with a 1-hour SLA and no prepaid
hours. Arctic Wolf MDR customers may
be eligible to add IR JumpStart to their
service with no additional cost.
Threat Detection and Response Delivered by
the Concierge Security® Team
Organizations everywhere are struggling with detecting and responding to modern cyber threats efficiently. While many IT departments have deployed security tools in an attempt to address this, the lack of 24x7 coverage, extensive security operations expertise, and a well-staffed security team means many threats go unnoticed and can linger in the environment for months. Many high-profile data breaches occur not because the security tool failed to raise an alert — they fail because the alert isn’t addressed, or is overlooked.
The Arctic Wolf Concierge Security T eam has
found latent threats lingering in 73% of our
customers’ environments within the first 90
days of the engagement.
Built on the industry’s only cloud-native platform to deliver security operations as a concierge service, the Arctic Wolf Managed Detection and Response solution eliminates alert fatigue and false positives to promote a faster response with detection and response capabilities tailored to the specific needs of your organization. Your Arctic Wolf Concierge Security Team works directly with you to perform threat hunting, incident response, and guided remediation, while also providing strategic recommendations uniquely customized for your environment.
Arctic Wolf® Managed Detection
and Response Solution
Detect
See more with
continuous monitoring
and threat hunting
managed by security
operations experts
• Broad visibility
• 24x7 monitoring
• Threat hunting
Respond
Managed investigation
and rapid response to
quickly contain threats
• Managed
investigations
• Incident response
• Log retention
and search
Recover
Learn from incidents
and implement custom
rules and workflows for
proactive protection
• Guided remediation
• Root cause analysis
• Personalized
engagement
EXHIBIT A
DATASHEET | 2
DATASHEET | 2
©2023 Arctic Wolf Networks, Inc. All rights reserved. Arctic Wolf Networks, AWN and the Arctic Wolf Networks logo are trademarks of Arctic Wolf Networks, Inc. in the United States and/or other jurisdictions. Other names used in this document are for identification purposes only and may be trademarks of their respective owners.
SOC2 Type II Certified
AW_DS_MDR_0123
The Arctic Wolf Difference
Broad Visibility
Security telemetry collected from internal and external networks, endpoints, and cloud environments are enriched with threat feeds, OSINT data, CVE information, ATO data, and more to provide granularity and context to incidents that are investigated and triaged by the Concierge Security Team.
Arctic Wolf Customer Portal – T actical and Strategic Insights A purpose-built GUI provides visibility into open tickets, lets you interact with your CST, view your security score, and view deployment elements such as the number of Arctic Wolf® Agents currently deployed.
Summary and customized reports to understand your security posture and fulfill compliance needs
“The value for me is that
Arctic Wolf is an extension of
our team. Arctic Wolf has helped
enhance our security and improve
our compliance reporting posture
while enabling the Bay Federal
team to focus on projects that add
the most value to our business.”
— Richard Roark
VP and Chief Information Officer (CIO),
Bay Federal Credit Union
Endpoint Threat Detection and Response
The included Arctic Wolf Agent provides endpoint intelligence and enhanced threat detection capabilities that give our security engineers deep, pervasive visibility into your security posture. • Sysmon event monitoring provides east/west visibility into the lateral movement of threats
• Weekly endpoint reporting
• Managed containment
Unlimited Log Retention and Search
The Arctic Wolf® Platform automatically collects, normalizes, analyzes, and retains log data from existing networks, systems, and applications for a minimum of 90 days and is available on-demand to address your reporting and compliance needs.
About Arctic Wolf®
Arctic Wolf is the global leader in
security operations, delivering the first
cloud-native security operations platform
to end cyber risk. Powered by threat
telemetry spanning endpoint, network,
and cloud sources, the Arctic Wolf®
Security Operations Cloud ingests and
analyzes trillions of security events each
week to enable critical outcomes for
most security use cases. The Arctic Wolf
Platform® delivers automated threat
detection and response at scale and
empowers organizations of any size to
stand up world-class security operations
with the push of a button.
For more information about Arctic Wolf,
visit arcticwolf.com.
Managed Detection and Response service:
- You will be provided a dedicated Concierge Security Team that will act as. Your trusted security operations advisor.
- 24x7 monitoring
- Alert triage and prioritization
- Custom protection rules
- Detailed reporting and audit support
- Ongoing strategic security reviews
Managed Risk Service:
- Continuously scans your environment for digital risks - Perform regular risk posture reviews
- Provide actionable remediation guidance
- Work with you to build risk management plans
- Deliver a customized risk management plan to prioritize remediation and measure progress - Provide comprehensive visibility into your risk posture