Transforming Data into Insights

Challenge

The client was seeking to transform a static organization that developed and analyzed Federal cybersecurity performance metrics into a dynamic organization supporting cybersecurity operational activities across Federal; State, Local, Tribal and Territorial (SLTT); Critical Infrastructure (CI), and private entities.

Solution

Guidehouse provided support around the analysis of cybersecurity data and program performance across stakeholders, to include Federal; SLTT, CI, and private entity stakeholders. Guidehouse focused on streamlined process to gather requests and requirements from stakeholders, automation to ingest and clean data feeds, and standardized templates to create quality products that are used to help inform risk and mitigation decisions across an organization.

To accomplish this, the Guidehouse team:

Leveraged multiple data sources — To provide a holistic view into an organization’s external vulnerability landscape. Aligned vulnerability landscape to the adversarial tactics, techniques and common knowledge (ATT&CK) Framework to better communicate risk.

Developed a data architecture — For ingesting data sources to better align data to performance of organizations while also streamlining the process for cleaning and analysis of cybersecurity-related data.

Created operational rules of behavior — To quickly manage intake requests and create timely, informative products that guide risk and vulnerability mitigation decisions for stakeholders.

Impact

Working with our client, Guidehouse helped transform the organization from static to dynamic with far-reaching cybersecurity capabilities:

1. Supported the identification and rapid mitigation of major vulnerabilities, to include SolarWinds and Log4j, across a diverse set of stakeholders
2. Developed easy to understand dashboards and visualizations to communicate the value of improving risk decisions and implementing vulnerability mitigation guidance
3. Transformed the organization’s infrastructure and operating structure to actively prepare for and respond to cybersecurity issues impacting national security, highlighted by support to the Election Security and COVID-19 task forces