Assessments
Vulnerability Assessment
This is an excellent first step in establishing the relative risks that an organization may have for a modest investment, and often precedes a penetration test or an IT risk assessment.
- Online Presence – We’ll take a close look at the company’s website and sites that we canassociate with the organization. We scan those systems using modern tools for thousands of vulnerabilities and weaknesses.
- Network Security – We’ll apply similar tools to the border security to deduce what the organization looks like to the Internet. This often uncovers Internet-facing devices, out-of-date hardware and software, and frequently a few other surprises.
- Social Presence – This step analyzes a few of the places where the organization is visible online and what sort of data can be easily assembled from what they’ve posted.
Automated Quarterly:
We’ve combined the power of a variety of different tools and automated the execution of the test and delivery of the reporting so that all you need to do is to check your email. Every quarter you’ll receive a complete scan of the computer system you’re required to monitor and a report that fits your specific regulatory requirements.
Enumerate an organization’s external risks to ensure quarterly tests are done on time and meet your needs.
Consulting
Incident Response
We prepare an incident response plan with each client ahead of time, and our engineers are ready to travel onsite and manage the situation. We work closely with our partners at Vestige to ensure that chain of custody and data integrity is maintained, and the process of remediation addresses both short term and long term needs.
Once a breach has been contained, we work with the client to address root causes and ensure that the problem can’t arise again. This may include working with the client’s insurance providers, law enforcement, and other third parties on behalf of the client.
ProCircular offers 24/7 IR to ensure that organizations we protect are prepared in the event of a breach.
Data Scanning & Classification
We scan your repositories of information, whether database, infile systems or on the cloud, and help you to identify cyber, legal and regulatory risks. We work with you to classify the various types of data. At the end of the day your organization will understand their data, define its owners, determine the importance of the information, and reveal retention and regulatory requirements that may be necessary to safeguard and delimit its storage.
Inventory your organization’s data, understand its value, and categorize how it should be protected.
Education
Security Awareness Training
While it’s important to have IT, InfoSec, and management keenly aware of the latest threats, many of the major challenges share themes that employees can spot and avoid if properly trained. ProCircular’s employee awareness training enables those closest to the problem to identify and prevent threats.
Our program is different in that it’s paired with a vulnerability assessment. It’s conducted in person with the employees who need the training most, allowing them to share their experiences and hear how to best defend against your unique risks from an expert.
The results of this assessment inform the content, shaping the training around the unique risks to the organization. We draw from a common body of materials developed in house, work with management to pick out the top regulatory or business needs, and craft an interactive training session that truly engages the employees.
Bringing employees to the defense of an organization is one of the most effective means of protecting it.
Ongoing Security Training
The package consists of an ongoing subscription to consistently remind employees of the importance of security. We send a monthly newsletter and employees receive online training on a new subject each month. We also offer a subscription based program that tests a client’s employees on an ongoing basis to make sure that they continue to apply what they’ve learned. Instead of being made to feel foolish, employees that inadvertently fall victim to these attacks are automatically enrolled in training, ensuring that they’ve been provided the tools to better protect the organization.
This online solution is a perfect follow-up for our Onsite Security Awareness Training.
Security Packages
Cybersecurity Wellness Package
This subscription based model ensures that once you organized your cybersecurity efforts, you’re able to continue to protect your investment and adapt with the changing threat landscape.
- Enterprise Password Management – Secure the weakest link, your employees’ access
- Quarterly Vulnerability Assessment – Keep abreast of new threats
- Pwnie Express SIEM Monitoring – Prevent rogue devices from entering the network
- Online Security Awareness Training – Bring employees to the defense to protect the organization
- Incident Response Planning – Secure your access to experts and be ready to respond