Cybersecurity

Virtual Cyber Expert (VCISO) is a service for companies that want to comprehensively and conveniently manage cybersecurity and protect their organizations against cyber threats. Depending on the demand, the service includes:

• a dedicated team of specialists supporting your organization’s cybersecurity management proces,
• cybersecurity monitoring of IT systems / apllications / infrastructure usingadvanced tools,
• analysis of events in IT systems / applications / infrastructure and vulnerability detection service,
• ongoing support in the management of identified vulnerabilities,
• periodic automatic security tests of IT systems / applications / infrastructure and social engineering tests,
• ongoing response to cybersecurity incidents and support in their handling,
• support in developing a cybersecurity awareness program among employees,
• cybersecurity trainings,
• handling correspondence with externalstakeholders.

See the website dedicated to the service or the service leaflet.

Virtual Incident Manager is a cyber incident response service for organizations that don’t have their own teams responsible for handling IT security breaches. As part of ongoing support, we provide full incident handling – from analysis and removal of the threat, through corrective actions, to minimizing the effects.

Our cybersecurity experts will provide quick and professional help if your organization:

• computers are infected with malaware,
• personal data is leaked or protected, relevant data for your business,
• you won’t be able to access the systems and the data processed therein.

The service is dedicated to medium and small companies – those that run their business activities based on IT and OT technologies, as well as those for whom IT solutions support everyday management.

See the website dedicated to the service.

Security Operation Center (SOC) is a service for ongoing monitoring and analysis of the organization’s security status, ensuring quick detection of cyber threats and immediate response to cyber incidents.

As part of our SOC Operations Center, we provide:

• handling of events and notifications 24/7/365 basis in accordance with the adopted procedures,
• detection of cybersecurity events and incidents based on selected data sources – we offer support in their selection, safe configuration and integration with basic SOC systems,
• collecting, analyzing and correlating events in the networks and in the customer’s systems along with the ongoing elimination of false alarms and improvement of the quality of detection in cooperation with the client,
• monitoring security gaps in the architecture and configuration of hardware and software resources.

See the website dedicated to the service.

We will adapt your organization to current regulations and standards and minimize the risk of potential administrative penalties. We will prepare your company to maintain high resilience against cyber attacks by conducting compliance audits and implementing solutions, ensuring full compliance with the requirements of:

• NIS2 (Network and Information Systems Directive 2),
• Digital Operational Resilience Act (DORA),
• Cyber Resilience Act (CRA).

Cyber threat intelligence is service concerning gathering information about threats and threat actors that helps mitigate harmful events in cyberspace. Cyber threat intelligence sources include open source intelligence, social media intelligence, human intelligence, technical intelligence or intelligence from the deep and dark web.

• We will help you choose tools helping real-time search and alerting.
• We will assure the high-confidence threat hunting and detection.
• We will help you to identify threats and risk sources faster.
• We will help to reduce time compiling reports.
• We will help you to find threats before they’ll impact your company.

Digital Risk Protection is a service of continuous monitoring of the Internet network for the purpose of preventive detection of cyber threats and reporting on incidents and potential risks for the organization.

As part of our service:

• we monitor websites, online stores, content published in social media, web applications, deep web, dark web (including forums and marketplaces),
• we verify whether there has been any compromised e-mail adrresses, passwords, company accounts and leakage of confidential data,
• we alert and report about detected security incidents and suspicious activity in the network.

SIEM (System Information Event Management) allow centralization, monitoring and automated analysis of event logs from all security systems as well as operating systems and applications in one place. All this in real time.

• We advise the selection and implement a tool adequate to the level of network expansion and the number of places from which information about events is to be downloaded.
• We will design and implement the tool’s logic, enabling contralization of collection, connotation and analysis of events from all systems subject to integration.
• We will propose rules for separating false positive from real dangerous events.
• We will implement guidelines for the continuous development of the tool’s logic rules.

Penetration testing reflects real-world attempts of cyber attacks on the elements of a company’s IT infrastructure. The tests verify the current level of resource security and indicate vulnerabilities that should be addressed in the next step.

• We will conduct penetration testing in your organization:
  • for web applications,
  • for mobile applications,
  • for infrastructure.
• We will perform performance tests for web applications.
• We will assist in conducting a security audit of the source code of web applications.
• We will support the audit of resistance to DDoS attacks.

Social engineering tests increase the human factor’s resilience to social engineering attacks by simulating planned campaigns.

We will prepare and conduct:

• phishing campaigns,
• spear phishing campaigns.

OSINT (Open Source Intelligence) involves gathering data about a company from public and non-public sources. The aim of the service is to obtain as much information as possible about the company, its IT infrastructure, and weaknesses that can be exploited by cybercriminals.

• We will perform a vulnerability analysis and present the results in the form of a report, indicating which information can be used to launch a cyber attack on your organization.
• We will conduct a dynamic analysis and website scanning for vulnerabilities and prepare a report on any detected irregularities.
• We will search current leak databases to check if your organization’s detected emails and passwords are included.

Each security incident related to ICT infrastructure should be throughly analysed and then corrective and preventive actions implemented.

We will collect electronic evidence related to the incident (obeying the rules enabling the ude of information in subsequent legal proceedings).

We will analyse the incident and present conclusions in a form accessible to the management and lawyers of the organization.

We will propose corrective actions and long-term preventive actions, protecting the organization against the recurrence of an identical incident.

Firewall systems

• We will advise you on choosinh the optimal hardware and/or software solutions for your organization.
• We will help you to configure the tool so that it really fulfils its purpose.

IDS (Intrusion Detection System) & IPS (Intrusion Protection System)

• We will propose solution appropriate to the size and nature of the orgnization, as well as the degree of exposure to potental cyber attacks.
• We will help you to configure signature databases and heuristic logic in a way that allows real detection and/or blocking of attacks in real time.

The right architecture and configuration of the enterprise network allows the elimination of a significant number of potential attack vectors.

• Consulting at the stage of organization’s ICT network design – we will help you to build a network adapted to the needs of the organization, ensuring a high level of its reliability and resistance to cyber-attacks.
• Consulting at the stage of sonfiguring the organization’s ICT network – we will ensure the optimal balance between the functionalities of individual network devices and their resistance to external attacks or unintentional actions of company employees.

User identity management is a key element in the process of maintaining network and data security.

• We will choose market solutions adequate in terms of functionality and costs for the organization.
• We will help you to configure and implement the features of the tool that will reduce the chances of user identity theft and unauthorized acess to individual network elements.
• We will advise you on how manage users, their access and analysis of events performed by them effectively and with a high level of security.

Centrally managed anti-viruses and anti-spam tools are essential tools to protect against malware and attacks that use organization’s email.

• Standardization of anti-virus software setting – we will help you configure global policies for all workstations.
• We will advise you on how to configure the anti-spam mechanism to detect and thwarl all types of phishing identity attempts, internal organization data and attempts to access the internal network.

DLP (Data Leak Protection) systems allow you to monitor any files and information processed in databases in terms of detecting and preventing possible leaks outside the organization.

• We will advise you on choosing a solution adequate to the size and nature of the organization (with particular emphasis on the sensitivity of data processed in all processes).
• We will propose an implement a configuration that allows you maintain control and accountability of data operations from centralized network resources to end user workstations.

Solutions enabling remote conrol over mobile devices allow maintaining the required level of information security, without implementing restrictions (related to the use of cell phones and laptops) working outside the office of the organization.

• We will select solutions appropriate for devices and data authorized for use outside the organization.
• We will configure functionalities that allow you to maintain full control over the data and secure content of the equipment in the event of its loss outside the organization.

Knowledge and education are crucial for maintaining cybersecurity, as humans are the weakest link in digital security.

• We will implement a cybersecurity awareness program among the employees of your organization.
• We will conduct customized trainings for your employees or PECB certified trainings.
• We will prepare individual trainings for you, your family or VIPs in your surroundings.