--- title: | Blogs description: Blogs | --- - [Home](https://www.nisos.com/) - Solutions - [Manage Human Risk](https://nisos.com/solutions/human-risk/) - [Protect Online Platforms](https://www.nisos.com/solutions/trust-safety/) - [Manage Cybersecurity Risks](https://www.nisos.com/solutions/cybersecurity/) - [Protect Executives, Assets, and Reputation](https://www.nisos.com/solutions/corporate-security/) - [Secure the Employee Lifecycle](https://nisos.com/solutions/workforce-risk/) - Services - [Human Risk](https://nisos.com/services/human-risk/) - [Employment Shield](https://nisos.com/services/employment-shield/) - [Executive Shield](https://nisos.com/services/executive-shield/) - [Third-Party Intelligence Solutions](https://nisos.com/services/third-party-intelligence-solutions/) - [Insider Threat Intelligence Solutions](https://nisos.com/services/executive-shield/) - [Risk Assessment](https://www.nisos.com/services/risk-assessments/) - [Threat Landscape](https://www.nisos.com/services/threat-landscape-assessment/) - [Threat Monitoring](https://www.nisos.com/services/threat-monitoring/) - [OSINT Monitoring & Analysis](https://www.nisos.com/services/osint-monitoring-and-analysis/) - [Investigations](https://www.nisos.com/services/investigations/) - [Adversary Investigation](https://www.nisos.com/services/adversary-insights/) - Company - [About Us](https://nisos.com/company/about-us/) - [The Nisos Difference](https://nisos.com/company/the-nisos-difference/) - [Client Success](https://nisos.com/company/client-success/) - [Careers](https://www.nisos.com/company/about-the-company/careers/) - Resources - [News](https://www.nisos.com/newsroom/) - [Blog](https://www.nisos.com/nisos-blog/) - [Events](https://www.nisos.com/events/) - [Resource Library](https://www.nisos.com/resources/library/) - [Podcasts](https://www.nisos.com/podcasts/) - [Contact](https://www.nisos.com/contact/) [![Nisos-Logo-Blue](https://blog.nisos.com/hubfs/Nisos-Logo-Blue.png) ![Nisos-Logo-White](https://blog.nisos.com/hubfs/Nisos-Logo-White.png) ![Nisos-Logo-Blue](https://blog.nisos.com/hubfs/Nisos-Logo-Blue.png)](https://www.nisos.com/) - [Default HubSpot Blog](https://blog.nisos.com/blog) - [Home](https://www.nisos.com/) - Solutions - [Manage Human Risk](https://nisos.com/solutions/human-risk/) - [Protect Online Platforms](https://www.nisos.com/solutions/trust-safety/) - [Manage Cybersecurity Risks](https://www.nisos.com/solutions/cybersecurity/) - [Protect Executives, Assets, and Reputation](https://www.nisos.com/solutions/corporate-security/) - [Secure the Employee Lifecycle](https://nisos.com/solutions/workforce-risk/) - Services - [Human Risk](https://nisos.com/services/human-risk/) - [Employment Shield](https://nisos.com/services/employment-shield/) - [Executive Shield](https://nisos.com/services/executive-shield/) - [Third-Party Intelligence Solutions](https://nisos.com/services/third-party-intelligence-solutions/) - [Insider Threat Intelligence Solutions](https://nisos.com/services/executive-shield/) - [Risk Assessment](https://www.nisos.com/services/risk-assessments/) - [Threat Landscape](https://www.nisos.com/services/threat-landscape-assessment/) - [Threat Monitoring](https://www.nisos.com/services/threat-monitoring/) - [OSINT Monitoring & Analysis](https://www.nisos.com/services/osint-monitoring-and-analysis/) - [Investigations](https://www.nisos.com/services/investigations/) - [Adversary Investigation](https://www.nisos.com/services/adversary-insights/) - Company - [About Us](https://nisos.com/company/about-us/) - [The Nisos Difference](https://nisos.com/company/the-nisos-difference/) - [Client Success](https://nisos.com/company/client-success/) - [Careers](https://www.nisos.com/company/about-the-company/careers/) - Resources - [News](https://www.nisos.com/newsroom/) - [Blog](https://www.nisos.com/nisos-blog/) - [Events](https://www.nisos.com/events/) - [Resource Library](https://www.nisos.com/resources/library/) - [Podcasts](https://www.nisos.com/podcasts/) - [Contact](https://www.nisos.com/contact/) ### Solutions Managed Intelligence solutions are designed to address your needs in an evolving risk landscape. Empower your organization with methodologies and actionable results tailored to the innovative ways adversaries are targeting you. ### Mitigate Advanced Threat Actors Inform your security operations with greater context answering the “how” and “why” of the threat actors you face. ### Counter Disinformation Enable informed business responses with the “who” and “why” behind coordinated campaigns. ### Mitigate Insider Threats Improve your program’s ability to get to “who” and “what” with technical program building and investigations. ### Stop Platform Abuse Take action against nefarious use of your platforms with the “who” and “how” of threat actors targeting them. ### Cyber Diligence for Mergers and Acquisitions Facilitate a smooth transition with the “what” and “why” of the security risks to your acquisition. ### Third Party Risk Dilligence Increase the effectiveness of your security evaluations with specifics on the “where” and “what” of your third party risk profile. ### Services Access a world-class intelligence capability tailored to your specific needs. Control a multi-million dollar program without the time or expense and solve problems both lasting and acute. ### Managed Intelligence Ongoing risks, whether from one threat actor or many, require persistent focus. Leverage skills, data, and technology to harden your defenses. ### Security Investigations Gain the context needed to make informed decisions during periods of heightened risk. ### What is Managed Intelligence? ## Case Studies ###### 1 min read ## [External Hygiene Assessment Delivers Valuable Insight Prior to Company Acquisition](https://blog.nisos.com/case-studies/external-hygiene-assessment-delivers-valuable-insight) By [Nisos](https://blog.nisos.com/case-studies/author/nisos) on Nov 13, 2020 4:34:39 PM [![](https://blog.nisos.com/hubfs/cs-tile%20External%20Hygiene%20Assessment%20Delivers%20Valuable%20Insight%20Prior%20to%20Company%20Acquisition.jpg)](https://blog.nisos.com/case-studies/external-hygiene-assessment-delivers-valuable-insight) **The Challenge** Nisos was contracted to conduct cybersecurity diligence and an assessment of external network hygiene for a cybersecurity company’s acquisition target **Why Nisos** Although the client, a cybersecurity company, leverages many of the same services as Nisos, they understood that Nisos’ analytical rigor and access to external data collection would allow them to gain greater insight and optimize the evaluation of their acquisition target. Utilizing publicly available information, third party datasets, and partner relationships, Nisos was able to discover and assess the target of acquisition’s cyber assets and provide the client with a comprehensive understanding of areas of concern and indicators of compromise. **Preparation** Nisos began the investigation knowing eight registered domain names of the acquisition target. Nisos had no existing insight into the company’s overall cyber posture. The investigation revealed extensive information about the acquisition’s cyber-security maturity and the breadth of their cyber assets. **Execution** Nisos identified several ties to entities that were not publicly affiliated with the acquisition target. The investigation, conducted on the public internet, uncovered IP addresses directly associated with the target’s office. This led to the identification of specific infrastructure which would likely be targeted by an advanced attacker. , Nisos also identified a server providing remote access to the target’s office network and users of a Docker instance created by the target, one of which was running default credentials. Although the instance did not appear to belong to the target, an attacker could leverage it to gain control over a customer. It could also be used as an access vector in a breach of someone using the target’s software. A compromise of this sort could negatively impact the target’s brand reputation and ability to generate new clients. The investigation ultimately determined that the organization's cyber-security maturity was high, which is uncommon for organizations of similar size, but consistent with the target’s cybersecurity background. **Impact** Based on Nisos findings and recommendations, the acquiring company immediately and transparently began remediation. Recommended remediation actions included removing public permissions, enforcing two factor authentication for console access, and limiting access to Kubernetes ingress controller only via whitelisting IP addresses. Throughout the process, Nisos shared best practices and additional guidance with the client and the acquisition target. Topics: [Cybersecurity](https://blog.nisos.com/case-studies/topic/cybersecurity) [Blogs](https://blog.nisos.com/case-studies/topic/blogs) [cyberhygiene](https://blog.nisos.com/case-studies/topic/cyberhygiene) [Continue Reading](https://blog.nisos.com/case-studies/external-hygiene-assessment-delivers-valuable-insight) [All posts](https://blog.nisos.com/case-studies/all) ### Featured ![](https://blog.nisos.com/hubfs/Nisos-Logo-White.png) Responsive strategies and intelligent defenses for protecting your enterprise. - Services - Managed Intelligence - Security Investigations - Why Nisos - Company - Resources - [Blog](https://blog.nisos.com/blog) - [Case Studies](https://blog.nisos.com/case-studies) - [White Papers](https://blog.nisos.com/technical-blogs) - [Podcast](https://blog.nisos.com/podcast) - [News](https://blog.nisos.com/news) - Contact ###### Contact Us [1-703-382-8400](tel:1-703-382-8400) [info@nisos.com](mailto:info@nisos.com) 603 King Street, Suite 300 Alexandria, VA 22314 [![Learn More](https://no-cache.hubspot.com/cta/default/6068438/043dbe58-e265-499f-8574-2e0d1b4d410e.png)](https://cta-redirect.hubspot.com/cta/redirect/6068438/043dbe58-e265-499f-8574-2e0d1b4d410e) ©2020 Nisos. All rights reserved. - Terms - Cookie Policy - Privacy Policy ![](https://px.ads.linkedin.com/collect/?pid=1593266&fmt=gif)