Speed, Scale and Trust

The news is ripe with articles about companies involved in incidents of fraud and misconduct that suddenly face regulatory inquiries requiring large-scale evidence discovery efforts. More and more companies are victims of large-scale cyber-attacks, costing them millions in ransom payments, crippling their infrastructure, and destroying trust. COVID-19 and the increase in employees working remotely without strong security or using unapproved data storage devices has propelled both cyber-attacks and less than effective data identification and management protocols. 

The hard truth of today’s environment is that everyone needs to be mindful of their safety.

From global multinationals to smaller non-profit companies, fraud, regulatory enforcement, and cyber-crime can affect all organizations, no matter the size.

Decades of experience dealing with cyber breaches, regulatory response and investigations of fraud/financial crimes

We have worked on some of the most high-profile financial reporting investigations; regulatory inquiries into misconduct allegations; ransomware, APT, and insider attacks and litigations. We have significant experience working with all the stakeholders involved – outside counsel, general counsel, internal audit, compliance, law enforcement, regulators, fidelity insurance, cyber insurance, and the broader business on all aspects of incident response. 

We have the ability to further invest in you. Our team is able to conduct an optional onboarding consisting of meeting with stakeholders to learn as much as we can about your business, technology, and processes before an incident occurs. The primary objective of the onboarding is to prepare you and our team to respond quickly and effectively as needs arise.

Global and local

Combined with global capabilities of KPMG firms, KPMG professionals have local knowledge, capabilities and presence in nearly every market where you do business. This deep local expertise allow KPMG to understand the risks and ramifications that vary from one country to the next.  We leverage a consistent engagement governance structure globally and assign you a single point of contact to help ensure consistent delivery across the world.

Independent and vendor neutral

We’re entirely driven by our experience. You can have the confidence in our bias-free judgement and advice.  

We are on cyber insurance carrier lists

We are pre-approved as a preferred vendor on many major cyber insurance carrier lists. This can help streamline your cyber insurance claims.

The challenge
A cyber security investigation prompted by an FBI notification to the insurance provider regarding data leakage.

What we did
KPMG assembled a 24/7 operation that began by scanning the client’s network for externally facing servers, performing vulnerability assessments of key systems, and reviewing available network logs for signs of suspicious activities. Further details from external sources enabled KPMG to focus our investigation and identify compromised systems. In addition to identifying the compromised hosts stemming from a VNC exploit, KPMG was able to identify other security weaknesses within the client’s environment and other potentially compromised machines that were not related to the incident under investigation.

The outcome
The organization had a dramatically improved overall security posture. Evidence preserved by KPMG was provided to the government through proper legal channels. The suspect responsible for the data leakage was arrested shortly after and later sentenced to several years in prison and ordered to pay nearly $3 million (USD) in restitution to the client.