Managed Security

As a monthly subscription program, the Fortress SRM Cybersecurity-as-a-Service Program offers a truly comprehensive, phased, and affordable way to clearly assess an organization’s cyber maturity, develop a security plan around identified vulnerabilities, prioritize immediate actions to take to address critical risks, establish the cyber response team, and practice what to do in the event of a cyberattack. Includes: 

• Cybersecurity Program Maturity Assessment measured against a selected best practice cybersecurity framework 
• Governance, Risk, & Compliance Management (GRC)
• Development of Security Program Documentation 
• Quarterly Security Briefings 
• Incident Runbooks 
• Attack Simulations/Tabletop Exercises  
• Penetration Tests 
• Security Awareness Training 
• Incident Response Service Level Agreement
• Discounted contract IR rates

Download Cybersecurity-as-a-Service Service Brief

Schedule a Consultation

The Fortress SRM Cyber Wellness program is Cybersecurity-as-a-Service lite and is designed for Clients just starting their cyber journey or for those that want to augment their program.

Cyber Wellness is focused on technical cyber resilience which starts with a baseline assessment: External Security Posture Monitoring, Windows Domain Assessment, Vulnerability Assessment, and a Network Discovery.

The program also offers cybersecurity recommendations, 40 hours of security advisory (vCISO, security architects, etc.) and IR retainer with 25% reduced hourly rates, a tabletop exercise and IR playbook.

Software vulnerabilities are one of the top cyber-attack vectors and one in three breaches are the result of vulnerabilities that were known about and should have been already patched¹. 

Keeping operating systems and application software patched and secure is time consuming and tedious – an internal IT resource nightmare. Fortress SRM’s Guardian Managed Patching with Monitoring Service delivers automated, high-efficacy (97%+) updates to Microsoft and over 80 third-party software, ensuring efficient patch deployment to every device, whether on or off network. This includes the deployment of critical updates, security updates, feature updates, operating system upgrades, key Windows security setting and configurations. 

The Fortress SRM real-time reporting console includes current patch levels of devices and gives the Client total visibility into what patch related activities have been performed, while real-time patch monitoring provides deep insight into approved, unapproved, pending, and failed patching efforts. 

Download Guardian Managed Patching Service Brief

¹ Tripwire, 2019

Schedule a Consultation

Fortress SRM’s Sentinel Managed EDR Service combines 24/7/365 U.S. based expert monitoring with industry-leading next-gen, AI driven, behavioral endpoint protection and threat hunting software to protect employees and their data wherever they are. 

EDR provides more complete awareness of devices in your technology environment than antivirus tools, which only protect against known malware signatures. EDR is designed to detect and protect against malware, credential and login theft, phishing attempts, and other advanced security threats. EDR uses analytics to identify patterns and detect suspicious behavior, prevent malicious activity, and provide remediation to compromised devices. It also improves response time by storing behavioral data for future analysis.

Fortress SRM’s Sentinel managed solution includes a fully featured two-way firewall, intrusion detection, anti-phishing, web filtering, and user application control. Sentinel provides simple remote deployment by device or device group, ensuring bandwidth-friendly mass rollout and signature file updates. Centralized monitoring unifies the information of all protected devices allowing our Security Operations Center to take action in real-time, adhering to the Client’s prescribed remediation and escalation plan. 

Download Sentinel Endpoint Detection & Response Service Brief

Schedule a Consultation

Rapid backup recovery in the event of a security breach can mean the difference between minimal or disabling business disruption. Resiliency is the hallmark of Fortress SRM’s Vault Managed Backup Service. Utilizing industry leading software and centrally managed from Fortress’ expert-manned, wholly owned, U.S. based Security Operations Centers, Vault Managed Backup Services protects from a ransomware attack, a failed hardware device, or a malicious insider. 

Four tenets of proper a backup strategy:

• Determine what data should be backed up.
  Yes, backing up everything would be ideal, but probably not possible, so every organization should decide what data is critical for survival, what data is needed to operate, and what data would be nice to have.
• Determine how often data should be backed up.
  A good rule of thumb is that backups should be done at least every 24 hours.
• Determine how your data will be backed up.
  Will you be doing a complete data backup, or incremental backup, where only changes are copied? Will your backup be done on a storage device on-premises, or in the cloud, or both? How will you ensure your backup data cannot be encrypted? Is it air gapped? Is it immutable?
• Test your backup and restore process.
  When your backup process and system is in place, test it on a regular basis to ensure that it successfully backs up your data, and that data restores are done accurately. One key metric to cyber safety is Mean Time to Recovery – how long will it take to get your systems back online using your backups?

Fortress SRM can help with all of this.

Download Vault Managed Backup Service Brief

Schedule a Consultation

Monitoring the cybersecurity environment 24/7/365 is crucial for identifying, detecting, and responding to security threats and incidents effectively. It provides organizations with visibility into their networks, systems, and applications, allowing them to detect suspicious activities, anomalies, and potential breaches.

Fortress SRM’s Overwatch service is conducted from our U.S. based, wholly owned 24/7/365 security operations center (SOC) manned by highly trained security analysts. All are U.S. citizens.

Overwatch is essential for:

• Early Threat Detection: Monitoring the environment 24/7/365 via Security Operations Center (SOC) analysts enables organizations to detect security threats at an early stage before they escalate into significant incidents. By continuously monitoring network traffic, system logs, and user activities, organizations can identify indicators of compromise (IoC) and abnormal behavior indicative of potential security breaches. 
• Incident Response: Effective monitoring facilitates rapid incident response by providing real-time alerts and notifications when security incidents occur. Security teams can quickly investigate and assess the severity of incidents, contain the threat, and initiate appropriate response measures to mitigate the impact and prevent further damage.
• Insight into Security Posture: Continuous monitoring provides valuable insights into an organization's security posture, including vulnerabilities, weaknesses, and areas for improvement. By analyzing security data and metrics, organizations can identify trends, patterns, and emerging risks, allowing them to proactively strengthen their defenses and mitigate potential threats.
• Threat Intel Integration: Monitoring allows organizations to integrate threat intelligence feeds and indicators of compromise (IoC) into their security monitoring tools and systems. By correlating security events with external threat intelligence sources, organizations can enhance their ability to detect and respond to sophisticated cyber threats and advanced persistent threats (APTs).
• User Activity Monitoring: Monitoring user activities helps organizations detect insider threats, unauthorized access, and suspicious behavior that may indicate malicious intent or compromised accounts. By monitoring user authentication logs, access permissions, and behavior patterns, organizations can identify and mitigate insider threats and unauthorized access attempts.
• Network Traffic Analysis: Monitoring network traffic and communications enables organizations to detect and prevent malicious activities such as malware infections, data exfiltration, and command-and-control (C2) communications. By analyzing network traffic patterns and anomalies, organizations can identify potential security breaches and take proactive measures to mitigate risks.
• Endpoint Monitoring: Monitoring endpoints such as servers, workstations, and mobile devices provides visibility into device health, security configurations, and potential security incidents. Endpoint monitoring solutions detect malware infections, suspicious processes, and unauthorized access attempts, allowing organizations to respond promptly and mitigate the impact of security threats.
• Compliance Requirements: Many industry regulations and compliance standards mandate the implementation of continuous monitoring as part of cybersecurity best practices. Monitoring the environment helps organizations demonstrate compliance with regulatory requirements, maintain audit trails, and ensure the security and integrity of sensitive data.
  

Fortress SRM’s Frontline IT help desk services provides efficient and affordable 24/7/365 support to reduce your costs and improve your existing service levels. Fortress SRM supports your distributed and remote workforce, provides self-service options with a customized knowledge base, acts as an early warning system to identify, and preemptively address service issues, and transfers ticket handling from your IT team so they can focus on more strategic, added-value issues.

Download Frontline Help Desk Service Brief

Schedule a Consultation

Insidious threats are streaming into your network constantly. Advanced Content Filtering provides real time threat protection to recognize and prevent access to malicious content both on and off network.

The program aggressively blocks phishing, viruses, and other cyberthreats with smart identification of malicious domains. Advanced Content Filtering also ensures high network performance with one of the largest data center networks in the industry. 

If greater protection and enhanced network visibility with on-demand drill-down reporting in important to your business, connect with us and learn more about Advanced Content Filtering.

Monitoring SaaS applications is an essential element of cyber safety. Fortress SRM’s Cloud Assure Program provides constant, real-time monitoring and alerting to spot abnormal user behavior, overall SaaS application usage, and identify potential data loss and leakage.

The program automatically or manually will respond to security notifications to secure user’s accounts: block sign-in, expire all logins, change password, and require MDA on the next login.

Rule creation is based on a combination of alerts and is specific to criteria set by the Client.

For our Clients Fortress SRM’s dedicated Threat Intelligence Officer conducts daily dark web/deep web scans to identify exposed systems, credentials, and data as well as monitoring threat actor discussions and black markets. A weekly debrief on the Client’s exposure is provided. 

Our Threat Intel service provides actionable intelligence – reported immediately – along with remediation recommendations. 

Fortress SRM also offers a 911 level emergency request response with a less than four-hour response time. 

The Threat Intel program also offers competitive analysis and a MITRE analysis and maturity posture/score.