RSK Cyber Security

RSK is identified as a cyber security company operating from the United Kingdom. The organisation provides professional services related to information security and cloud security. Regional activity is focused on the UK, with services oriented to organisations that use major cloud platforms and cloud-based productivity suites.

Services and Capabilities

• Cloud security monitoring and detection: implementation and operation of detection capabilities for Amazon Web Services (AWS).
• Identity and access detection for cloud identity services: detection and monitoring services specific to Amazon Cognito and Microsoft identity platforms.
• Microsoft 365 and Azure AD security detection: deployment of monitoring and detection measures for Office 365 and Azure Active Directory environments.
• Security consulting: advisory engagements covering security assessments, architecture review, and recommendation of controls.
• Security services delivery: operational delivery of managed security functions, including configuration, tuning and incident detection processes.
• Integration and automation: connecting cloud-native telemetry and identity systems into detection pipelines and automated response workflows.

Industry Focus

• Organisations operating on public cloud platforms: security work includes deploying detection and monitoring for cloud infrastructure and platform services.
• Enterprises using cloud identity and productivity suites: work centers on secure configuration, access monitoring and threat detection for Microsoft 365 and Azure AD environments.
• Applications that rely on cloud identity providers: activity addresses identity lifecycle and authentication monitoring for services using Amazon Cognito.

Technology and Delivery Approach

• Emphasis on integrating cloud telemetry and identity signals into detection systems and operational pipelines.
• Use of platform-specific detection tools and processes for AWS, Amazon Cognito, Office 365 and Azure AD.
• Delivery includes consulting to define controls, configuration of monitoring systems, and ongoing managed detection and response activities.
• Automation of detection and response workflows to operationalise alerts from cloud and identity services.