Free Cyber Defense
Solution By Hyperproof
Defend your organization against the dark arts of modern cyber warfare.
If your organization is in one of the 16 critical infrastructure sectors in the US (as defined by CISA) or one of the critical sectors as defined by EU’s Directive 2008/114/EC, you can utilize Hyperproof’s Cyber Defense Solution powered by its compliance operations platform for free for one year.
With Hyperproof’s state of the art software, you will have immediate visibility to your enterprise risks and their impact. You’ll be able to implement security controls based on the gold standard of security guidelines for managing cybersecurity risk —the NIST Cybersecurity Framework — and validate those controls with the tools you have at hand.
What you get (normally $20,000 per year)
1 Program (The NIST Cybersecurity Framework is included)
Program Creation, Management and Operations
Automated Evidence Collection via Hypersyncs (integrations with cloud-based systems in your tech stack)
Automated Evidence Testing
Internal and External Audits/Assessments
Amazon S3, G-Drive, OneDrive, Box, DropBox integrations
Productivity Tool Integrations: Jira, Slack, MS Teams, etc.
Product Experts to Set You Up For Success
You will also receive one-on-one training from our Customer Success team so you can use Hyperproof to effectively manage your risks and controls and maintain continuous compliance. We ask for a one-time fee of $6,500 to cover costs including software implementation guidance, product training, and tech support.
Why Hyperproof Is Offering Its Cyber Defense Solution for Free
Ransomware attacks negatively impacted one in three global organizations in 2021, according to research from IDC. The average organization spent $2.66MM in clean up and response per incident. Russia’s invasion of Ukraine has raised the stakes even higher. In a March interview with the Washington Post, former CISA Director Christopher Krebs described the Russian cyberthreat as “especially elevated now” because Putin has already demonstrated he’s willing to cross Western red lines by invading Ukraine.
Given the current situation, and the rise in cyberwarfare activities being supported and funded by the Russian Foreign Intelligence Service (FSB), organizations in all critical infrastructure sectors should be prepared to mitigate the risk of a cyber attack and the impact of a compromise. Chances are, most organizations can quickly identify a few immediate actions to reduce their attack surface, but they may not have a complete picture of their attack surface or the imminent threat that is likely already in their systems.
Hyperproof believes it is important to do what we can during this critical time to support our nation, our allies in Europe and the organizations all of us rely upon on a day-to-day basis for our safety, health, security and economic prosperity. Given our company’s focus area of risk management and compliance, we felt that the best way for us to make an impact in this situation is to offer our compliance operations software to organizations in need for free.
Risk management and compliance software such as Hyperproof can play a key role in safeguarding your organization and shrinking your attack surface. Hyperproof’s software can help your organization gain visibility to your risks and current security controls so you can understand what steps need to be taken and what controls need to be improved to keep your systems, infrastructure, networks, data, and facilities safe. Hyperproof also provides capabilities that dramatically reduce the level of effort required to monitor controls on a continuous basis, which is important as threat vectors and organizations’ technology usage change.
This offer is available exclusively to U.S. organizations operating in one of 16 critical infrastructure sectors and EU organizations that are categorized as critical infrastructure, per Directive 2008/114/EC.
According to CISA, there are 16 critical sectors “whose assets, systems, and networks, whether physical or virtual are considered so vital to the United States that their incapacitation or destruction would have a debilitating effect on security, national economic security, national public health, or any combination thereof.” CISA defines the essential critical infrastructure sectors are as follows:
Includes those who convert raw materials (e.g., dyes, plastics, crude oil, natural gas,fertilizers) into products that are essential to modern life. The sector is made up of companies that produce basic and special chemicals, agricultural chemicals, pharmaceuticals and consumer products.
Includes a diverse range of sites that draw large crowds of people for shopping, business, entertainment or lodging.
The communications sector provides an enabling function for all critical infrastructure sectors. It’s made up of companies that offer broadcast, cable, satellite, wireless, and wireline systems.
Critical Manufacturing Sector
The critical manufacturing sector includes the companies that manufacture the following types of products: primary metals (e.g., iron, steel, aluminum), heavy machinery (e.g., engines, turbines, construction equipment), electrical equipment, appliances, components (e.g., electric motor, transformer, generator), and transportation equipment (e.g., vehicles, aerospace, ships, railroad, etc.)
The dams sector delivers critical water retention and control services in the United States, including hydroelectric power generation, municipal and industrial water supplies, agricultural irrigation, sediment and flood control, river navigation for inland bulk shipping, industrial waste management, and recreation.
Defense Industrial Base
The Defense Industrial Base Sector is the worldwide industrial complex that enables research and development, as well as design, production, delivery, and maintenance of military weapons systems, subsystems, and components or parts, to meet U.S. military requirements.
Emergency Services Sector
The ESS sector includes geographically distributed facilities and equipment in both paid and volunteer capacities organized primarily at the federal, state, local, tribal, and territorial levels of government, such as city police departments and fire stations, county sheriff’s offices, Department of Defense police and fire departments, and town public works departments. It also includes private sector resources, such as industrial fire departments, private security organizations, and private emergency medical services providers.
The energy sector includes companies that supply fuels to the transportation industry, electricity to households and businesses, and other sources of energy that are integral to growth and production across the nation. It includes companies that provide electricity, oil, natural gas and renewable energy sources.
Financial Services Sector
The Financial Services Sector includes thousands of depository institutions, providers of investment products, insurance companies, other credit and financing organizations, and the providers of the critical financial utilities and services that support these functions.
Food and Agriculture Sector
The food and agriculture sector includes farms, restaurants and registered food manufacturing, processing, and storage facilities.
Government Facilities Sector
The Government Facilities Sector includes a wide variety of buildings, located in the United States and overseas, that are owned or leased by federal, state, local, and tribal governments. It includes education facilities (schools and universities), national monuments and facilities, and electronic assets used throughout the election process.
Healthcare and Public Health Sector
This sector includes companies that provide direct patient care services, health information technology, health plans and payers, mass fatality management services, medical materials, medical laboratories, pharmaceuticals, and public health programs.
Information Technology Sector
These virtual and distributed functions produce and provide hardware, software, and information technology systems and services, and –in collaboration with the Communications Sector – to support the Internet. These include companies that provide IT products and services, incident management capabilities, domain name resolution services, identity management and associated trust support services, internet-based content, information and communication services, and internet routing, access, and connection services.
Nuclear Reactors, Materials, and Waste Sector
This sector includes active and decommissioned power reactors that generate electricity, research and test reactors located at universities and national labs, nuclear fuel cycle facilities, licensed users of radioactive sources, and organizations that ship radioactive materials.
Transportation Systems Sector
This sector includes companies that support the aviation system (e.g., aircraft, air traffic control systems, airports, heliports, landing strips), highway and motor carrier systems, maritime transportation systems, mass transit and passenger rail systems, pipeline systems, freight rail, and postal and shipping services.
Water and wastewater systems sector
This sector includes public drinking water systems and publicly owned waste treatment systems.
Critical infrastructure sectors covered by Directive 2008/114/EC
Source: EPRS, based on Annex I of the Directive