IT Security Services

MFA| Security Awareness Training| Phishing-Spam Protection| DNS Filtering

Security Awareness Training

Did you know that 77% of security professionals rank Awareness Training as the most effective tactic to prevent or block ransomware? *

More than ever, employees are the weak link in an organization’s network security. They are frequently exposed to sophisticated phishing and ransomware attacks. Employees need to be trained and remain on their toes with security top of mind. Find out how we can help you manage the continuing problem of social engineering and create a human firewall.

Simulated Phishing Campaigns:

StratusPointIT will create a phishing simulation to test your employee’s awareness to potentially harmful emails, from who opened, clicked, and entered credentials. We will notify the employee that the email was a test and show them the key indicators within the email to watch out for, from incorrect/mis-spelled domain names to hovering over links within the email. In addition, we will provide management with a report of the results.

Training Videos and Newsletters:

StratusPointIT will provide access to training videos and newsletters focused on numerous areas for your respective business. From CEO Fraud, Credit Card Security, GDPR, Mobile Device Security, Ransomware, Strong Passwords, PCI compliance, Safe Web Browsing, and much more.

* Cybersecurity Insiders & Bitdefender 2017 Ransomware Report.

MFA| Security Awareness Training| Phishing-Spam Protection| DNS Filtering

Advanced Phishing & Spam Protection

Did you know that 66% of malware is via email attachments? *
Our offering is a simple approach to email management and security. We provide a comprehensive email protection and continuity product that helps defend against the latest threats, from spear-phishing, ransomware, impersonation and other targeted attacks.

Impersonation Protection:

Our solution provides real-time protection against social engineering attacks like whaling, CEO fraud, or W-2 fraud.

URL Protection:

A layered security check is performed on the destination site when users click on a link from an email. In addition, following the initial URL link check, the solution then determines if the link downloads to a file directly and scans for potentially malicious content in the file.

Attachment Protection:

Replaces attachments that potentially contain malicious code with a clean, transcribed version. Employees have access to the original file that undergoes a detailed security analysis.

* Verizon 2017 Data Breach Investigations Report 10th edition.

MFA| Security Awareness Training| Phishing-Spam Protection| DNS Filtering

DNS Web Filtering

Did you know that email and web are collectively used to deploy 99% of malware-based cyberattacks? *

Our DNS filtering service provides an additional layer of protection between an employee and the internet by blacklisting dangerous sites & filtering out unwanted content, in the office or at home. The domain name system (DNS) works like a phone book for the internet. When your employee enters a website, the DNS servers take that input and translate it into the unique internet protocol (IP) address that lets the browser open the desired site. DNS protocols are highly vulnerable to cyberattacks.

By redirecting users’ web traffic through a cloud-based, DNS security solution, businesses can finely tune and enforce web access policies, ensure regulatory compliance, and stop threats at the network’s edge.

* Cisco Annual Cybersecurity Report for 2018.

Patching| Antivirus| Managed Detection & Response| Mobile Device Management

Antivirus

Did you know “known” ransomware attacks were up 68% in 2023? *

Antivirus is designed to prevent, search for, detect, and remove software viruses, and other malicious software, such as malware and spyware. It will scan files and programs for known malicious signatures. From a security standpoint, antivirus software at a minimum should be implemented as a first line of defense to protecting your systems. The software runs automatically in the background to scan your systems for malicious activity.

* 2024 State of Malware - Malwarebytes.

Patching| Antivirus| Managed Detection & Response| Mobile Device Management

Managed Detection & Response (MDR)

Did you know 76% of respondents of a recent survey who had been compromised say the attack was a new or unknown zero-day attack? *

Managed Detection and Response (MDR) combines Endpoint Detection and Response (EDR) with a 24/7/365 Security Operations Center (SOC). Though an EDR solution provides you the platform to investigate and remediate threats, it still requires human intervention. A MDR solution provides a certified team of security professionals that will provide monitoring, incident response and remediation services to help keep your business safe.

Endpoint Detection and Response

Endpoint Detection and Response (EDR) is a cybersecurity solution that uses Next-Gen Antivirus (NGAV) and also detects and mitigates cyber threats by continuously monitoring endpoint devices and analyzing endpoint data in real time. This solution will provide a platform for internal IT professionals to contain, investigate and remediate compromised systems.

NextGen Anti-virus

Next-Gen Antivirus (NGAV) uses a combination of innovative technologies to prevent known and unknown threats. From known malware to detecting stealthy activities whether endpoints are on or off the network by using artificial intelligence, behavioral detection, and machine learning algorithms. NGAV uses these innovative technologies to stop rapidly evolving threats by looking at the tactics, techniques, and procedures (TTPs) used by adversaries, not just the file signature like traditional (legacy) antivirus solutions.

* Ponemon Institute State of Endpoint Security Risk.

Patching| Antivirus| Managed Detection & Response| Mobile Device Management

Mobile Device Management (MDM)

Did you know 74% of global IT leaders claim their companies experienced a data breach due to mobile security issues? *

MDM enables you to protect and administer all your endpoints from a single platform, from managing user access to applications and device management.

Layers of Security

• Identities: Manages user access to corporate devices and applications.
• Applications: Manage M365 apps and files in OneDrive & SharePoint, from deployment to removal, on corporate and BYOD devices (e.g. iPhone).
• Devices: Ensure devices meet compliance requirements, from ensuring proper passwords to specific security software being deployed.

Common examples:

• Identities: You can put a condition in place that your employees require multi-factor authentication to be able to access your corporate data, and it will not allow them to do so until that MFA criteria has been met.
• Applications: You can mandate the usage of Microsoft Office mobile apps to gain access to corporate data via an employee’s personal iPhone or Android device. If the employee leaves the company or their iPhone/Android device is lost or stolen, you can remotely wipe the device of the Microsoft Office mobile apps.
• Devices: MDM lets you limit access to your corporate data to only devices that your organization manages. By creating a conditional access policy, those devices can be corporate-owned or a BYOD that your organization allows.

* Markets and Markets.

Vulnerability Scan| Firewalls| Penetration Testing| Managed SIEM

Firewalls

Did you know “known” ransomware attacks were up 68% in 2023? *

Antivirus is designed to prevent, search for, detect, and remove software viruses, and other malicious software, such as malware and spyware. It will scan files and programs for known malicious signatures. From a security standpoint, antivirus software at a minimum should be implemented as a first line of defense to protecting your systems. The software runs automatically in the background to scan your systems for malicious activity.

* 2024 State of Malware - Malwarebytes.

Vulnerability Scan| Firewalls| Penetration Testing| Managed SIEM

Penetration Testing (PenTest)

Did you know 83% of breaches involved External actors, and the primary motivation for attacks continues to be overwhelmingly financially driven, at 95% of breaches? *

StratusPointIT uses an automated network penetration testing platform that combines the knowledge, methodology, processes, and toolsets of a hacker. To put it in simple terms, the automated application will try to hack your network to test your security.

Types of tests:

Internal Network PenTest: Using a device connected to your internal environment, the PenTest will discover security vulnerabilities present within the internal network environment. These activities simulate that of a malicious attacker.

External Network PenTest: Assuming the role of a malicious attacker from the public Internet, the PenTest will identify security flaws within your external network environment. These flaws can include patching, configuration, and authentication issues.

What is being tested:

• Testing that your organization is effectively restricting unnecessary outbound traffic. Unrestricted outbound access can allow a malicious actor to exfiltrate data from your organization’s environment using traditional methods and unmonitored ports.
• Attempt to upload malicious code onto remote systems in an attempt to test the organization’s end-point anti-malware controls.
• Ability to access confidential and/or sensitive data can be attained.
• Find and validate credentials and determine if they can be used to access privileged information.

Benefits of an automated PenTest:

• Lower Cost: Up to 75% more cost effective compared to a typical PenTest.
• Faster: Finding available security consultants is difficult. The automated test provides flexibility in scheduling.
• Consistency: The automated test reduces human error.
• Robust Reporting: Automated Executive and Technical level reporting.

* Verizon 2023 Data Breach Investigations Report.

Vulnerability Scan| Firewalls| Penetration Testing| Managed SIEM

Security Information & Event Management (SIEM)

Did you know 75% of business decision makers and 83% of IT decision makers are concerned their organization will be the target of a cybersecurity attack in the next 6 months? *

Monitor and safeguard your data by implementing a SIEM.

SIEM combines security information management (SIM) and security event management (SEM). Security Information and Event Management (SIEM) offers real-time monitoring and analysis of events as well as tracking and logging of security data for compliance or auditing purposes.

SIEM is a type of software that is used to detect, prevent, and help resolve cybersecurity incidents. Logs and flow data from a wide range of sources such as applications, assets, cloud environments, and networks is collected, stored and analyzed in real-time.

Key Features:

• Collects log and event data from an organization’s network devices, firewalls, wireless access points, and more.
• Detecting threats on your network by continuous security monitoring of your network’s logs
• Established detection and response procedures to reduce or eliminate emerging threats.
• Solve regulatory and compliance requirements (HIPAA, NIST, CSF, CMMC).

* The State of SMB Cybersecurity in 2021 survey conducted by Vanson Bourne and commissioned by ConnectWise.