Are you prepared?
Long gone are the days when all you needed was a decent firewall and an up-to-date virus scanner to protect your systems. Cyber-crime is big business. The number of players including nation states is increasing and the tools available to launch attacks are inexpensive and readily available. Small to mid-sized companies are prime targets as they often do not have the resources to allocate to cyber security, but, clearly, something has to be done.
XBASE will help you complete a NIST Cybersecurity survey to help find the security areas that require focus. Answers collected here will help drive you through the Cybersecurity Circle, and as we work with you on improvements, you can revisit the survey to show improvements.
The most effective defence against malware and phishing attacks is knowledge. The more your staff know about cyber-security issues, the less likely they are to become victims. XBASE has partnered with KnowBe4, a leader in Security Awareness Training, and can offer our clients online training and testing on a wide range of subjects including malware, ransomware, social engineering, management of sensitive information, PCI and mobile device security.
XBASE will work with you to choose a training plan for your staff and help you get it running.
XBASE provides McAfee Endpoint Security for all of its Managed Services clients. McAfee is an industry leader in the field of endpoint protection providing advanced malware detection and prevention for servers and workstations.
Our McAfee Solution includes McAfee Endpoint Security Web Control which displays safety ratings and reports for websites during online browsing and searching. Web Control can be configured to block access to websites based on safety ratings or content.
XBASE provides advanced IPS (Intrusion Protection) services designed to prevent attacks on your infrastructure. IPS Systems perform web content filtering and zero-day malware blocking services by inspecting your internet traffic and searching for known bad patterns. Many malware attacks are blocked by these services because they prevent the malware from getting started in your network.
Most exploits take advantage of unpatched systems, with the 2017 WannaCry cryptolocker variant being a great example. Microsoft and other vendors release updates and security patches whenever vulnerabilities are found in their products, but if you are not updating your systems in a timely manner, you are exposing your company to avoidable risks.
XBASE manages security patch deployments for all our Managed Services clients to ensure that systems are kept up to date and are not vulnerable to known exploits.
XBASE also runs regular scans on networks to identify and remediate systems that may be at risk, and we bring these to client’s attention via our monthly reporting and live dashboards.
If you have users with laptops, then you may be at risk of data loss. Regardless of company policies in effect, mobile users tend to store work files on the local drives of their laptops for a variety of reasons. This may include confidential corporate or client information, financial or personal information. The theft or loss of a laptop may expose your company to liability.
XBASE can provide centrally managed, whole disk encryption service. While you may not get your lost laptop back, you can be assured that no one has access to any of the data that may have been stored on the system.
The biggest threats from malware and phishing attacks lives in your inbox. Users are lured into clicking on attachments or hyperlinks, or to responding to fabricated requests by cyber criminals. XBASE’s premium mail security program dramatically reduces the risk of a bad email in your inbox by replacing attachments with sanitized copies guaranteed to be free of malware or scripts, quarantining questionable senders and replacing dangerous hyperlinks with secure tested links. By proactively keeping the bad email out of your users’ inboxes, we eliminate email as the source for ransomware and other dangerous malware.
XBASE email protection is available for both on premises Exchange and Office 365 (O365) online Exchange.
XBASE provides fully managed two factor authentication services designed to protect users accessing mail, cloud applications, VPNs and other services. When logging into a service, the user will supply their user ID, password AND will need to have access to their mobile phone to authenticate.
Two factor authentication is an effective way to prevent password sharing and brute force password attacks against your important systems.
XBASE provides advanced IDS (Intrusion Detection) services that monitor traffic on your network in real time looking for known types of attacks or suspicious activities. Malicious traffic will be blocked, with resulting alerts being investigated by our network operations team. IDS is effective against zero day exploits as well as command & control malware.
It's not enough to hope you're not hit with a breach or hack.
XBASE begins with helping you put together an Incident Response Plan, while at the same time establishing a comprehensive response framework to address known attacks:
In the battle against cyber-crime the final line of defense is having solid backups. With the volume of new exploits and malware releases happening daily, even the best detection and prevention systems can be beaten. You need to know that your backups are reliable and that when all else fails, you can ensure your recovery.
Whether it's for compliance reasons or simply for peace-of-mind, cybersecurity insurance is becoming a valuable part of the recovery plan, providing much-needed funds to quickly and effectively regain IT operational status. XBASE can work with you to source and review an appropriate cybersecurity insurance policy, plus provide comprehensive documentation at the time of claim.