Managed Cyber Security Service

Our Cyber Services

Cyber Health Checks

While self-assessment cyber security questionnaires provide an indication of an organisation’s general cyber security stance, it should never replace the need for a professional audit to evaluate your real-world cyber risk posture.

There are 3 important reasons to engage a cyber professional to perform a comprehensive cyber review of your organisation:

1. To meet a specific industry or regulatory compliance requirement.
2. Industry or organisation is under risk of attack.
3. You need to meet a security level to obtain or retain a target clientele.

In each instance, to accurately assess the cyber risk, an audit carried out by a cyber professional is required. Our specialists will perform a comprehensive assessment of your entire organisation and report on the findings. Any vulnerability will be detailed along with recommended mitigation strategies.

Additionally, if there is a targeted security maturity level the organisation is required to meet or would like to aim for, our specialists can help to design a roadmap to achieve that security goal.

Infrastructure Reviews and Hardening

Understanding that your business relies on a stable and secure IT infrastructure, and that you may not be an expert in this field, we aim to deliver a simple report identifying risks their current IT infrastructure poses to the business along with recommendations to help moderate/mitigate these risks.

The infrastructure review process takes the form of a formal meeting with you (in person or via video) to discuss each aspect of your IT infrastructure and subsequent engagement with the service provider to fill in the technical blanks where necessary.

We then compile and deliver a simple to understand report that you can take back to your service provider to action any or all recommendations.
Should our recommendations be out of scope or unsuitable for your service provider to deliver, we can provide the necessary trained personnel and products to action the recommendations, hardening the environment against issues that threaten productivity and availability.

Penetration Testing

To best protect against a hacker, you need to think like a hacker.

Pen testers use the same tools, techniques, and processes as attackers to find and demonstrate the business impacts of weaknesses in a system.
Our pen testing service begins with a consultative process to correctly identify the areas of concern, ensuring scope and boundaries are correctly set. Once the scope and boundaries are agreed, the pen tester can operate remotely or on-site, whichever suits the engagement.

A comprehensive report detailing our pen testing activity within the environment, along with replicable findings and recommendations is then compiled and delivered via meeting.

Internal Penetration Test

Whilst there’s a media focus on cyber threats from external threat actors, one of the most overlooked cyber threat vectors is from inside the network via a disgruntled, bored, or malicious employee. These internal threat actors have the necessary time, motivation, and access level to damage the business whilst hiding in plain sight.

An INTERNAL penetration test is an authorised simulated attack performed on a computer system or network to evaluate its security from the standpoint of an internal threat actor.

External Penetration Test

Any organisation that has a digital presence on the internet is a target for external threat actors, that is threats that originate from outside of the organization and its network of partners.

An EXTERNAL penetration test is an authorised simulated attack performed on your Public facing systems including servers that have public IP addresses which can be accessed by users on the internet – for example websites and email servers. Pen testers use the same tools, techniques, and processes as attackers to find and demonstrate the business impacts of weaknesses in a system.

Pre-Cyber Insurance Advice

If you need clarity on your IT infrastructure prior to applying for cyber insurance, or assistance with completing a pre-cyber insurance checklist, then our Cyber Specialists will be able to advise and provide confidential non-biased input to assist with your decision-making.

Cyber Security Awareness Training

The majority of cyber-attacks are successful due to human error. We offer a range of cyber awareness training solutions to suit organisations of every level. Whether you need to training to meet compliance standards or deliver specific training to your staff our platforms will help to significantly reduce the human risk factor.

Our Cyber Security Awareness Training Features:

• Security Awareness Training Content
• Security Risk Posture Question Sets
• Cyber Health Check Dashboard & Reporting
• Cyber Policy & Procedure Templates
• Phishing Simulation & Testing
• Dark web scanning
• Easy user management