Independent review of your security posture and strategy

Best practice in cyber security is best summarised in the National Cyber Security Centre’s (NCSC) ‘10 Steps to Cyber Security’. Cyber Vigilance helps ensure you can tick every step.

From risk management and network security, through to secure systems configuration and managing user privileges, we’ll examine every point of every journey in and around your systems, devices, and people. We can also align maturity assessments to other frameworks such as CIS benchmarking.

We’ll assess security awareness among your employees, and look at where exposure might lie in your remote and home working practices.

Our consultants will also look closely at how you currently respond to security incidents, what sort of malware protection you have in place, and how you monitor systems and networks for unusual activity that could indicate an attack. And they’ll look at how you control access to removable media.

Anticipate what hackers might do next, and stop them doing it

We replicate hacker behaviour by using the tools and techniques they are most likely to use. If we find a way in, we know they will. So, we make sure they can’t.

Pen testing really is a case of keeping your enemies close; understanding them, and accurately predicting their behaviours. It’s also a case of not just knowing what those behaviours will be, but also replicating them to see exactly what their outcomes could be.

Cyber Vigilance employs the best available pen testing tools to explore your network topology, user accounts, applications and other corners of your digital estate. We then scan all identified ports and channels ready for the pen test itself.

It’s an exhaustive process to find the vulnerabilities you are likely never to have thought existed. That’s why you benefit from having experts on the job. We know what to look for, and where. We provide a detailed report post-test, together with recommendations for transforming security weaknesses into strengths.

In conjunction with the Cyber Vigilance Managed Threat Detection service, our Incident Response service is backed by a 24/7 SOC, ready to respond and analyse any threats in your environment.

Every threat is reviewed, acted upon, and documented to keep you in the loop with proactive notifications.

We can support with building an incident response plan to prepare alongside retainer hours, in the event of an incident.

Your personal cyber defender

If budgets were limitless, every business would have an in-house Chief Information Security Officer – full-time, dedicated, and focussed on security. But budgets are finite. This is where Cyber Vigilance comes in, with the ‘virtual’ version of the same skills – just like the in-house expert but better, less expensive, and with a far broader perspective.

Our vCISO service adapts to the needs and operational challenges of any size company; tailored to individual requirements. We’ll even help you identify what those requirements might be if you’re unsure about the scope or what benefits the services can bring.

The service can be pragmatic – to address an issue you’re aware of – or strategic – to evaluate your cyber security portfolio and level of maturity – or a blend of both.

Consider our vCISO service not just as an expedience to solve security issues, but also as your conduit to fully understanding the world of cyber security and more importantly the world of the cybercriminal. We constantly review the latest and newest attacks to hit the headlines, the developments to be alert to, and the vast complex market place of available solutions.

Demonstrate your company’s commitment to cyber security

Cyber Essentials is the Government-backed scheme designed to help protect your organisation against a wide range of the most commonly occurring cyber-attacks.

The scheme offers two levels of certification

Cyber Essentials is a self-assessment option which is independently verified. Most small businesses find the process of preparing for the Cyber Essentials questionnaire educational and that it leads to increased awareness and permanent behaviour change regarding cyber security. Larger organisations are often already implementing the security controls, but seek to demonstrate their cyber security commitment in a highly visible way.

Cyber Essentials Plus includes the Cyber Essentials questionnaire but also involves an independent technical audit of your systems to verify that the Cyber Essentials controls are in place. The audit includes a representative set of user devices, all internet gateways and all servers with services accessible to unauthenticated internet users.

Cyber Vigilance consultants can help you prepare for the process, making sure that you meet all criteria ahead of being tested on whether you do or not. Our service saves you time and money whilst, most critically, identifying areas on which you could potentially fail in the certification process. And that could mean they are areas of weakness leaving your systems exposed.