Investigation of vulnerable externally exposed assets that can be attacked by the entire group company enables countermeasures based on priority

In recent years, with the advancement of medical services and the development of digital technology, hospital systems that used to be in a closed network environment are connected to external networks, and the medical industry is exposed to the threat of cyberattacks. I was. Ransomware, which is particularly prevalent among cyberattacks, often intrudes into corporate networks from poorly managed VPN devices and remote desktops that are exposed to the outside. Infection has occurred from externally disclosed assets, and damage has occurred, such as infringing on the network of the Japanese headquarters. Sysmex's incident response team, Sysmex-CSIRT, had a strong sense of urgency regarding the management and countermeasures for vulnerable assets exposed to external threats while actively promoting various security measures. Therefore, we decided to use the Attack Surface Management service of Mpression Cyber Security Service ™ in order to identify the assets that really needed to be dealt with among our publicly available assets.
We will introduce the reasons why Sysmex-CSIRT decided to introduce this service and the effects of the introduction.