[Singapore, Feb 14, 2024] – Human Managed, a leading cloud-native data platform, is proud to announce the launch of its Cyber Posture Management [CPM] Bundle. It is a comprehensive data-driven cyber operations solution designed to control cyber threats, vulnerabilities, weaknesses, violations, and reduce business risks. It does so by providing intelligence and recommendations for fast and actionable decision making.

A holistic data-driven security solution for enterprises

The Human Managed CPM Bundle automates fundamental data-driven services for cyber ops in enterprises. This holistic solution comprisesfour services necessary for organizational cyber readiness and maturity in today’s world flooded with data and tools: 

 for visibility and accuracy of the current state of digital assets, their relationships and their importance to the business

Cloud security posture management (CSPM) 

for speedy and accurate contextualization, prioritization of detections for effective cyber operations

 for continuous and accurate assessment of compliance

Simplified, flexible and timely security platform for building cyber resilience

Business leaders need to make quick decisions when they identify threats and be able to respond to attacks as fast as possible to ensure cyber resilience within their company. Currently, enterprises are getting swamped by managing multiple cyber security modules leading to information overload and indecision.

Karen Kim, CEO of Human Managed, said, “Human Managed is disrupting the market norm by making cybersecurity management more data-driven and holistic. We are launching the CPM Bundle to provide speed, simplicity, and flexibility for the customer with up to 25% cost savings. The CPM Bundle ensures all services are contextualized to the business automatically, with all intel, decision and recommendation in one interface. Customizable notification and dispatch workflows via any preferred channel (e.g. email, Slack, Teams, etc.) allow for timely notifications for decision makers.”

“There is no requirement for any additional procurement. Enterprises can either use existing investments in tools to act as data sources or activate the Human Managed platform’s 50+ out-of-the-box technology partners. There is no long-term contract lock-in, and the pricing model does not penalize based on data volume, as evident in most solutions available in the market. Try before you buy, with an optional monthly subscription.”, Karen Kim added.

Discovery to deployment customized for each business

The CPM Bundle is available to enterprises of all sizes. Service onboarding requires minimal effort from the customer organization and will be completed within two weeks. Deploying and configuring the CPM solution involves discovery, design workshops and implementation activities. Human Managed domain experts will work with customers to identify their monitoring requirements and objectives, ascertain their risk profile, and gather details about their environment and assets. These include understanding the business criticality of assets and existing security operations capabilities to determine the Data Collection Infrastructure requirements, posture use cases, and data sources required. A Service Blueprint is created, implemented, and tested before being handed over to the ServiceOps team for ongoing operations.

Current customers of Human Managed services in the essential services industries include [some of the largest] global banks, financial services institutions (clearing houses, payment systems), educational institutions in the ASEAN markets, including the Philippines and Cambodia.

Cyberattacks: no longer a matter of “if” but “when.”

With the average annual cost of cybercrime on the rise, expected to 

increase from $8.4trillion in 2022 to more than $23 trillion in 2027

, reports suggest that Asia Pacific is particularly vulnerable when compared to its global counterparts, accounting for 

31% of all incidents remediated worldwide

. Studies indicate that perpetrators are taking advantage of post-covid, digital adoption having outpaced digital literacy and cyber-awareness amongst users. It’s been estimated that t

he top 1000 companies in Southeast Asia are at risk of losing US $750 billion in market capitalization

 of the Human Managed CPM Bundle: www.humanmanaged.com/request-a-demo 

The Cyber Poster Management Bundle enables holistic, flexible and timely data-driven security for enterprises. 

Cyber Posture Management Bundle Release

The Human Managed web app hm.works has been getting fresh updates regularly with intel, decisions, and actions for use cases to control threats, scale opportunities, and manage risks. 

This week, we are excited to announce the release of a dashboard that reports on the discovery and detection of exposed weaknesses in your internet-facing assets (cloud, SaaS, PaaS, IaaS, on-prem resources).  

Read more about our attack surface management use case

external attack surface management (ASM) 🔍⬅️

Personalized intel, ranked decisions & prescriptive actions from continuous and contextualized discovery and detection of your external-facing digital assets. 

The external attack surface management dashboard answers the top 3 things you need to know about your security exposure:

What is my external attack vector on my internet-facing assets? 

What exposure should I prioritize based on severity and exploitability?

What is the best action to reduce my external attack surface? 

The challenges of securing your attack surface

External attack surface is the point or vector through which an attacker could enter your environment through assets open to the Internet, such as websites, servers, cloud services, software, and more. 

While external ASM is nothing new, it is increasingly challenging to execute  effectively at scale, because of the abundance and frequent changes in your organization's digital make up.  As your digital initiatives and supply chain of service providers and vendors grow, so do the number of entry points your attackers could exploit. 

 of externally exposed assets and their weaknesses, and 

 to consistently reduce the attack vector. 

Some examples of personalized intel that help with external ASM are: 

known and unknown / managed and unmanaged assets 

vulnerabilities affecting your internet-facing assets 

SSL certificate expiry, validity / vulnerability 

dormant / unused digital assets (e.g. domains, subdomains, IP addresses)

HM's external attack surface management use case helps you to get to effective decisions and actions quickly, by taking 

Let's explore each segment of the external ASM dashboard. 

Insights about your attack vector and exposures in numbers. 

Insights about your attack vector and exposures in visual charts and narratives.  

Curated analysis and recommendations to manage your external attack surface from HM. 

 gives you customizable to key indicators (in this case, domains and subdomain status distribution) 

 gives you prioritized direction to reduce exposures, based on hm.works's analysis.

 gives you the steps to execute the recommended decision

 Helps you to understand your company's current external attack surface across all discovered and monitored internet-facing assets, and take prioritized decisions and actions to reduce exposures -- based on data.

Interactive grid with organized data on your external attack surface. 

 An interactive grid breaks down discovered and monitored public-facing assets' exposure based on:

 (domain, SSL certificate, IP address, website, social account, technology )

(e.g. active / dormant subdomain, cloud IP address, third party library, network app)

 Understand and explore your current state of external exposure in detail, identify blockers, and plan for improvements to achieve desired posture goals. 

Drill down of all available details on an asset and its discovery path 

And that is hm.works 1.17! We will be releasing more features and updates regularly, so stay tuned.

To get the latest news from Human Managed, follow us on LinkedIn and check out our website and blog.

Want to discuss how we can help solve your cyber, digital, or risk operations through data?

Please contact us at hello@humanmanaged.com.

Human Managed app hm.works 1.17 released with dashboard on detected exposures & prioritized actions

Human Managed hm.works 1.17 released with external attack surface management

Human Managed app hm.works 1.16 released with dashboard on detected vulnerabilities & prioritized mitigation and remediation 

Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates regularly to report on intel, decisions, and actions generated from any data source from our customers.

This week, we are excited to announce the release of a dashboard that reports on the detection of vulnerabilities on managed assets (servers and infrastructure components hosted in corporate network / datacentres / cloud, or apps hosted in public app stores).  Read more about our 

vulnerability use case on our newly revamped website

Intelligence, recommended decisions and actions from continuous and integrated vulnerability assessment across your managed assets. 

The vulnerability dashboard answers the top 3 things you need to know about enterprise security:

What critical vulnerabilities exist in my environment? 

What vulnerabilities should I prioritize based on exploitability?

What is the best action to mitigate or remediate the vulnerability?

The challenges of vulnerability management

Vulnerability is a flaw or weakness in a system that can be exploited to compromise IT security. It can be caused by weakness in any IT administration, process, or design function, such as: 

insecure products & app from system and app vendors 

flaws in user administration / system access 

Effective vulnerability management (from discovery to remediation) requires a proactive, integrated approach that enables continuous vulnerability assessments, prioritized response based on business impact, and effective planning & tracking of remediation actions. 

Most organizations recognize the importance of vulnerability management, but struggle to: 

get accurate visibility of their network topology 

get understanding of security & availability implications of all network devices & computer systems (which can easily be >1000s) 

effectively plan network changes & maintain security controls 

contextualize vulnerabilities based on exploitability / exposure / impact

prioritize urgent and critical issues from data overload on a day to day basis 


HM's vulnerability management use case helps you to get to effective decisions and actions quickly, by taking 

 to vulnerability management -- regardless of the source of threat, or the environment in which a vulnerability is located. 

Let's explore each segment of the posture violation dashboard.

 gives you a high level summary of all open vulnerabilities detected in your assets, customizable to key indicators (in this case, detection severity)

 gives you a direction to prioritize to fix vulnerabilities, based on hm.works's analysis.

 Helps you to understand your company's current state of vulnerabilities across all managed assets, and take prioritized decisions and actions to improve the posture -- based on data.

Connect data sources such as vulnerability management, endpoint management, and network management to the Human Managed platform to perform contextualized analysis on vulnerability use cases.

 An interactive grid breaks down detected vulnerabilities based on:

 (common vulnerabilities and exposures identifier for publicly known information security vulnerabilities) 

(common vulnerability scoring system for quantifiable and standard measure of severity of vulnerabilities) 

 (quantifiable and standard measure of impact of vulnerabilities) 

(common weakness enumeration for community-developed list of software and hardware weakness types) 

 (e.g. network management platform, cloud security posture management, vulnerability scanner) 

CPE name, CPE version, app engine, app engine version 

 Understand and explore your current state of vulnerabilities in detail, identify blockers, and plan for improvements to achieve desired posture goals.

 Connect data sources such as vulnerability management, endpoint management, and network management to the Human Managed platform to perform contextualized analysis on vulnerability use cases.

And that is hm.works 1.16! We will be releasing more features and updates regularly, so stay tuned.

To get the latest news from Human Managed, follow us on LinkedIn and check out our website and blog. 

Human Managed hm.works 1.16 released with detection and resolution of vulnerabilities in your assets

Human Managed hm.works 1.16 released with continuous vulnerability management

Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates every week or two to report on intel generated from any data source from our customers.

Recently, we've had a series of releases on use cases to improve overall cyber posture of an organization: 

v.15 for ISO 27001:2022, SOC 2, NIST And CIS Benchmark compliance 

Today we are excited to release further updates on v1.15 for you to not only consume intel about posture violation and compliance, but to 

 a drill-down page from every cloud config violation, its check, the check's rationale and remediation steps

 allows you to understand the violation's impact across all monitored assets and mitigate prioritized violation issues on the spot 

(cloud resources under AWS accounts, Azure subscriptions, and GCP projects)

 to build, configure, and monitor cloud compliance use cases on the hm.works platform.

Here is the intel to decision to action flow: 

on top of every use case page to inform your next decision and action. 

explore the data grid to decide on your priorities 

 including other assets affected by the same violation and remediation steps to fix it. 

And that is hm.works 1.15.2! We will be releasing more features and updates regularly, so stay tuned.

To get the latest news from Human Managed, follow us on LinkedIn and check out our blog.

Human Managed hm.works 1.15.2 updated with remediation steps to fix CIS policy violations

Human Managed hm.works 1.15.2 updated with remediation for CIS policy violations

Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting 

 to report on intel generated from any data source from our customers.

 with dashboards on cloud compliance to industry standards and frameworks including ISO 27001:2022, SOC 2, NIST And CIS Benchmark.

Today we are excited to release further updates on v1.15, giving you more ways to consume intel on your cloud security posture. 

 current overall scores of your cloud compliance against industry frameworks and standards such as SOC 2 and ISO 27001, as well as numbers of violations against checks. 

 allows you to easily visualize and understand your compliance posture. 

 to build, configure, and monitor cloud compliance use cases on the hm.works platform. 

Click on 'Get the I.De.A' to see the relevant compliance reports, and navigate other compliance frameworks by selecting them from the drop down menu: 

📝Note: Every element on our web app is updated continuously -- as your data changes, the visuals / reports change without requiring any effort from you. 

 current scores of your cloud configurations calculated against CIS benchmarks.   

config posture of your business environments in the cloud business environment, grouped by region.  0% means that the environments are observable, but there is no config detected. 

 config posture of all the resources grouped by cloud account.  

posture of the public cloud infrastructure provider (AWS, Azure, GCP, DigitalOcean)

 allows you to easily visualize and understand your config posture. 

 to build, configure, and monitor cloud posture use cases on the hm.works platform.

And that is hm.works 1.15.1! We will be releasing more features and updates regularly, so stay tuned.

Human Managed hm.works 1.15.1 updated with scorecards for compliance against ISO 27001:2022, SOC 2, NIST, and CIS benchmarks

Human Managed hm.works 1.15.1 updated with scorecards for cloud compliance and configs

Human Managed app hm.works 1.15 released with dashboard on cloud compliance


Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates every week to report on intel generated from any data source from our customers.

Our last release was on continuous reports on the detections of violations on public cloud resources (e.g. AWS, Azure, GCP).

This week, we are excited to take cloud security posture use case one step further -- compliance to industry standards and frameworks! 

A collection of charts, recommendations, and data grid that present your org's cloud compliance 

, so that you can mitigate misconfigurations, address your compliance risks in the resources you have deployed in the public cloud, and track your progress.

The cloud posture violation dashboard answers the top 3 things you need to know about the enterprise cloud compliance: 

What important checks have our public cloud resources failed on?

What mitigations should I configure and tune to protect my assets in line with my cyber posture and compliance goals?

Where are the biggest gaps between my preferred posture state and current posture state?

In our v1.15, all of your your cloud controls are checked against global standards and benchmarks: 

(the international gold standard for information security management

(widely recognized and recommended security framework for service providers)

(globally recognized and recommended cybersecurity framework) 

(security config recommendations from global experts)

Before we get those coveted green ticks for you, it's important to clarify some terms in the world of compliance: 

 - conforming to a rule, such as a specification, policy, standard, law or framework (eg. defining and performing all activities required under section A.8.28 Secure Coding of ISO27001)

- set of generally accepted criteria/rules used as a point of reference (eg. ISO 27000)

- a structure that organizes and categorizes the implementation of expected standards (eg. NIST CSF)

 prescriptive recommendations based on industry standards and best practices that can be used for measurement and comparison (eg. perform static application security testing)

criteria used to audit and/or measure the intent, implementation, operations and/or effectiveness (eg. issue tracking software to track weakness)

- a safeguard or countermeasure put in place to protect an asset (eg. secure coding)

📝 Bottom line = we are running continuous 

on your cloud resources and reporting whether each assessment 

Let's explore each segment of the cloud compliance dashboard.

 gives you a high level summary of your compliance state detected in your cloud resources, customizable to key indicators (in this case, pass vs. fail count)

 gives you a direction to prioritize to improve your cloud posture, based on hm.works' analysis.

 Helps you to understand your company's current state of cloud compliance, and take prioritized decisions and actions to improve the compliance -- based on data.

 to build, configure, and monitor violation use cases on the hm.works platform.

 An interactive grid breaks down your organization's cloud compliance based on: 

check severity (critical, high, medium, low)

asset type (app, data, device, network, org, user)

asset variety (e.g. EC2, IAM, CloudTrail, Storage)

control objective (lower attack surface / defense in depth) 

CIS family (identity & access management, networking, monitoring, storage, logging) 

 Understand and explore your current check result against security standards, frameworks, and benchmarks for each control,  identify blockers, and plan for improvements to achieve desired posture goals.

Human Managed hm.works 1.15 released with continuous assessment against security frameworks for cloud

Human Managed hm.works 1.15 released with ISO 27001:2022, SOC 2, NIST and CIS benchmark compliance for cloud

Human Managed app hm.works 1.14 released with dashboard on detected cloud config violations


Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates every single week to report on intel generated from any data source from our customers.

 to creating intel on your digital business' assets, postures & behavior, and establishing 🔗

🔗 between them to improve your decisions and actions for many use cases.

This week, we are excited to announce the release of a dashboard that reports on the detections of violations on public cloud resources (e.g. AWS, Azure, GCP).

A collection of charts, recommendations, and data grid that present your org's cloud security posture 

, so that you can mitigate misconfigurations, address your compliance risks in the resources you have deployed in the public cloud, and track your progress. 

The cloud posture violation dashboard answers the top 3 things you need to know about the enterprise cloud security: 

Why you should care about cloud security 

If any of your business apps and data are in the public cloud, you should care about your company's cloud posture.  It's your responsibility to protect your digital assets, whether they're up in the clouds or in your datacentre. 

Major cloud providers have made their respective versions of the responsibility model publicly available (e.g. 

), but AWS simplified this by saying that:

The customer is responsible for security 

 the cloud

The provider is responsible for security 

What this means is that regardless of the service consumed (i.e. either SaaS, PaaS, or Iaas) from the cloud provider, these two facts remain:

(1) the customer is always responsible for its

(2) the cloud provider is responsible for the

So, your digital assets on your public cloud = your responsibility to configure their security controls against your target posture state (taking into account your specific business needs, industry standards, benchmarks). 

gives you a high level summary of all open violations detected in your cloud resources, customizable to key indicators (in this case, check severity) 

gives you a direction to prioritize to improve your cloud posture, based on hm.works's analysis. 

gives you the steps to execute the recommended decision 

 Helps you to understand your company's current state of cloud posture, and take prioritized decisions and actions to improve the posture -- based on data. 

 An interactive grid breaks down your organization's posture violations based on:

asset criticality (critical, high, medium, low)

 Understand and explore your current state of cloud posture and violations in detail, identify blockers, and plan for improvements to achieve desired posture goals.

Categories

Release

Cyber Posture Management Bundle Release

Human Managed hm.works 1.17 released with external attack surface management

Human Managed hm.works 1.16 released with continuous vulnerability management

Human Managed hm.works 1.15.2 updated with remediation for CIS policy violations

Human Managed hm.works 1.15.1 updated with scorecards for cloud compliance and configs

Human Managed hm.works 1.15 released with ISO 27001:2022, SOC 2, NIST and CIS benchmark compliance for cloud

Human Managed hm.works 1.14 released with cloud posture violation

Human Managed hm.works 1.13 released with network posture violation

Human Managed hm.works 1.12.1 updated with geochart