Security

Security covers a broad range of services, from managed firewalls and IDPS to DDoS Mitigation and SIEM. Leading solutions analyze behavior to detect ever-changing threats, communicate with multiple systems to provide a comprehensive view of the environment, and include 24/7/365 Security Operations Center (SOC) support for event notification and remediation.

1. What security or compliance regulations do you need to adhere to?
2. How often do you undergo a third-party security assessment? Do you know what your weak spots are, and how to address them?
3. In the event of a breach or attack, what policies and procedures do you have in place?
4. What are the hours of operation for your internal or external security resources?
5. Do you have a SIEM or log management system in place? If so, who reviews and correlates the alerts?
6. How do you secure access to IT infrastructure and applications for remote users, BYOD employees, contractors, and third parties?
7. How do you identify suspicious or abnormal behavior on your corporate network?
8. Do you have any public-facing web applications or sites? What is the financial implication if those go down for an hour or a day?

SERVICES

1. Pen Test – an attempt to gain access to a network or application via simulated attack; often required for compliance such as PCI
2. Risk Assessment – the practice of evaluating an organization’s or IT environment’s current security posture with suggested recommendations for improvement; often performed in reference to a specific security standard or compliance regulation
3. Managed SIEM – a real-time, managed solution for Security Information & Event Management, designed to provide a holistic view of a customer’s environment and correlate various data sources to identify threats
4. DDoS Mitigation – a solution designed to block Distributed Denial of Service attacks from taking down a network or online application; especially relevant for businesses that do business online
5. Access Control – a technique to regulate who or what can use resources or applications on a network; can include Single Sign-On and Identity Access Management
6. Perimeter Security – a broad approach to fortify the boundaries of a network; may include firewalls, Virtual Private Networks, intrusion detection, and intrusion prevention.
7. Endpoint Protection – a unified solution to protect desktops, laptops, and mobile devices; features include anti-virus, anti-spyware, and personal firewall
8. Incident Response – an organized, forensic approach to investigate and remediate a security breach; can be on-demand or via a monthly retainer