One thing I've always been a great fan of is internal
segmentation because those infrastructure attacks,
they don't tend to break into where they want to end up.
The harder you can make it for them to get there,
the more chance they've got of tripping something,
which will then let you guys find them.
That's correct.
You get alerts.
You correlate some alerts.
It's like, I think there's a bad guy on my network.
I'll ring up the forensic people to come and find it for me.
Yep, that happens.
We get calls all day long.
Do you get calls all day long for people who,
because you work, you actually work in non-PFI work as well.
So you are doing elimination work for other clients.
Correct.
We do full service, not forensics, not just in PCI.
Great.
Anything else from the infrastructure side?
I mean, segmentation's my particular bete noire.
I think yours sounds like remote access.
We see it all, but segmentation is very important.
You want to give the attackers just a small a target as absolutely possible.
Run what you need for your business processes,
but make sure those are protected.
Make sure your gray area networks are also protected,
the things like your guest wireless.
Yeah.
Criminals, and I'm astounded that someone connected to that main network,
I mean a criminal's looking at all of those things all the time,
yeah?
Absolutely.