Data Security and Compliance

Introduction to Progent's Security Consulting Services
Progent's certified network security experts can provide a wide range of support services intended to help businesses of any size to identify and eliminate security weaknesses, defend against assaults, remediate the issues caused by a breach of security, and comply with regulatory mandates for guarding data and reporting security incidents. Progent can provide advanced guidance for key security and recovery technologies such as AI-driven End Point Protection and Response, Managed Detection and Response, complete system restoration validation, immutable backup, and off-site backup.

Progent can provide a selection of service models:

• As-needed remote and on-premises support billed by the minute
• Continual managed services invoiced at a low fixed monthly rate
• Value-priced service bundles for a one-time security and compliance assessment
• Emergency ransomware recovery. Progent will submit a bid based on an evaluation of the damage.
  (If your system has been penetrated by any version of crypto-ransomware, do not panic. Get immediate assistance by contacting Progent's 24x7 Ransomware Hot Line at 800-462-8800.)

Delivery options for Progent's as-needed support include:

• Online Security Support
  The majority security-related problems can be handled online via a mix of phone support and an connection between Progent's Technical Response Center (TRC) and a client's computer. Progent's Technical Response Center can deliver remote security support by offering efficient access to consultants with the experience and resources to fix many of the most difficult problems quickly, keeping your service costs low and minimizing downtime.
• Onsite Security Support
  For instances where on-premises assistance is necessary, Progent can send a technical professional to major metropolitan areas across the United States. Progent can also dispatch a security consultant with top certifications and world-class skills to any site in the country.

ProSight Low-Cost Managed Services for Information Assurance
Progent's value-priced ProSight family of network monitoring and management services is intended to provide small and mid-size businesses with enterprise-class support and state-of-the-art technology for all facets of information assurance and compliance. ProSight managed services available from Progent include:

• ProSight Active Security Monitoring: Next Generation Endpoint Protection and Ransomware Defense
  Progent's ProSight Active Security Monitoring (ASM) is an endpoint protection (EPP) service that incorporates SentinelOne's next generation behavior machine learning technology to defend endpoint devices and servers and VMs against modern malware attacks such as ransomware and email phishing, which easily get by legacy signature-matching anti-virus tools. ProSight Active Security Monitoring protects on-premises and cloud resources and offers a single platform to address the complete malware attack progression including protection, identification, mitigation, remediation, and forensics. Key features include one-click rollback with Windows Volume Shadow Copy Service (VSS) and automatic system-wide immunization against newly discovered attacks. Progent is a SentinelOne Partner, reseller, and integrator. Learn more about Progent's ProSight Active Security Monitoring endpoint protection and ransomware defense based on SentinelOne technology.

• ProSight Reporting: Real-time and In-depth Reporting for Ticketing and Network Monitoring Platforms
  ProSight Reporting is a growing suite of real-time management reporting tools created to work with the industry's top ticketing and remote network monitoring platforms including ConnectWise Manage, ConnectWise Automate, Customer Thermometer, Auvik, and SentinelOne. ProSight Reporting uses Microsoft Graph and utilizes color coding to surface and contextualize key issues such as inconsistent support follow-through or machines with missing patches. By identifying ticketing or network health problems clearly and in near-real time, ProSight Reporting improves network value, lowers management overhead, and saves money. For details, visit ProSight Reporting for ticketing and network monitoring platforms.

• ProSight Enhanced Security Protection: Unified Physical and Virtual Endpoint Protection
  Progent's ProSight Enhanced Security Protection (ESP) managed services offer ultra-affordable in-depth security for physical servers and virtual machines, desktops, smartphones, and Microsoft Exchange. ProSight ESP uses contextual security and advanced heuristics for continuously monitoring and reacting to cyber assaults from all attack vectors. ProSight ESP delivers firewall protection, penetration alarms, device control, and web filtering through leading-edge technologies packaged within one agent accessible from a single console. Progent's security and virtualization consultants can help your business to design and configure a ProSight ESP environment that addresses your organization's unique needs and that helps you achieve and demonstrate compliance with government and industry data protection standards. Progent will assist you define and implement security policies that ProSight ESP will manage, and Progent will monitor your network and react to alerts that require urgent attention. Progent can also assist you to install and test a backup and restore system like ProSight Data Protection Services so you can recover rapidly from a destructive security attack like ransomware. Learn more about Progent's ProSight Enhanced Security Protection (ESP) unified endpoint protection and Exchange filtering.

• ProSight Data Protection Services: Managed Backup
  ProSight Data Protection Services from Progent offer small and medium-sized businesses a low cost end-to-end solution for secure backup/disaster recovery (BDR). For a low monthly cost, ProSight DPS automates and monitors your backup processes and allows rapid recovery of vital files, apps and VMs that have become lost or damaged as a result of hardware breakdowns, software glitches, natural disasters, human mistakes, or malicious attacks such as ransomware. ProSight Data Protection Services can help you protect, retrieve and restore files, folders, applications, system images, plus Microsoft Hyper-V and VMware virtual machine images. Critical data can be protected on the cloud, to a local storage device, or to both. Progent's cloud backup specialists can deliver advanced expertise to set up ProSight Data Protection Services to to comply with government and industry regulatory requirements like HIPAA, FIRPA, PCI and Safe Harbor and, whenever necessary, can assist you to recover your critical data. Find out more about ProSight Data Protection Services Managed Backup and Recovery.

• ProSight Email Guard: Inbound and Outbound Spam Filtering, Data Leakage Protection and Email Encryption
  ProSight Email Guard is Progent's email security platform that uses the technology of leading data security companies to provide centralized management and comprehensive protection for your inbound and outbound email. The hybrid architecture of Email Guard combines cloud-based filtering with an on-premises security gateway device to provide advanced protection against spam, viruses, Denial of Service Attacks, Directory Harvest Attacks (DHAs), and other email-borne threats. The cloud filter serves as a preliminary barricade and keeps most threats from making it to your security perimeter. This reduces your exposure to inbound threats and conserves network bandwidth and storage space. Email Guard's on-premises security gateway device provides a deeper layer of analysis for inbound email. For outbound email, the on-premises security gateway offers AV and anti-spam protection, DLP, and email encryption. The onsite security gateway can also help Microsoft Exchange Server to track and safeguard internal email traffic that originates and ends inside your corporate firewall. Learn more about Progent's ProSight Email Guard spam filtering, virus defense, content filtering and data leakage prevention.

• ProSight Duo MFA: Two-Factor Identity Authentication
  ProSight Duo is a selection of managed services utilizing industry-leading technology from Duo, a Cisco-owned company, to create two-factor authentication (2FA) solutions. 2FA utilizes an out-of-band device to confirm user identity, providing a second layer of protection rather than just passwords. This counters the most common causes of IT security breaches like social engineering, brute-force password attacks, and purloined credentials. Duo's push capability can avoid wasted time and minimize annoyance by allowing users to confirm their identity simply by clicking "Approve" on the authentication prompt on their own unique endpoint, which could be an Android or iOS smartphone, a smart watch, or other compatible endpoint. This single-click validation avoids the requirement to find an email or text and copy a temporary security passcode. Learn more about Progent's ProSight Duo MFA multi-factor identity authentication service plans.

• ProSight WAN Watch: Infrastructure Remote Monitoring and Management
  Progent's ProSight WAN Watch is an infrastructure management service that makes it easy and inexpensive for small and mid-sized businesses to map out, track, optimize and debug their networking appliances such as switches, firewalls, and load balancers plus servers, endpoints and other networked devices. Incorporating cutting-edge RMM technology, ProSight WAN Watch ensures that network maps are kept updated, copies and displays the configuration of almost all devices on your network, tracks performance, and generates notices when problems are detected. By automating complex management processes, ProSight WAN Watch can knock hours off ordinary tasks such as making network diagrams, expanding your network, locating devices that need critical updates, or isolating performance problems. Find out more about ProSight WAN Watch network infrastructure management services.

• ProSight LAN Watch: Server and Desktop Monitoring and Management
  ProSight LAN Watch is Progent's server and desktop monitoring service that incorporates advanced remote monitoring and management techniques to keep your network running efficiently by tracking the state of critical assets that power your business network. When ProSight LAN Watch uncovers an issue, an alert is sent automatically to your specified IT management staff and your assigned Progent consultant so that any potential issues can be resolved before they can disrupt your network Find out more about ProSight LAN Watch server and desktop remote monitoring services.

• ProSight Virtual Hosting: Hosted Virtual Machines at Progent's Tier III Data Center
  With Progent's ProSight Virtual Hosting service, a small organization can have its key servers and applications hosted in a secure fault tolerant data center on a high-performance virtual host set up and maintained by Progent's IT support professionals. With Progent's ProSight Virtual Hosting model, the client owns the data, the OS software, and the applications. Since the system is virtualized, it can be moved immediately to a different hardware environment without requiring a lengthy and technically risky reinstallation process. With ProSight Virtual Hosting, your business is not tied a single hosting service. Find out more details about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Infrastructure Documentation Management
  Progent's ProSight IT Asset Management service is an IT infrastructure documentation management service that makes it easy to create, maintain, find and safeguard data about your IT infrastructure, processes, applications, and services. You can quickly locate passwords or serial numbers and be alerted automatically about impending expirations of SSLs or domains. By updating and managing your network documentation, you can save as much as half of time thrown away looking for critical information about your network. ProSight IT Asset Management includes a common repository for holding and sharing all documents required for managing your network infrastructure like standard operating procedures (SOPs) and self-service instructions. ProSight IT Asset Management also supports a high level of automation for gathering and associating IT information. Whether you're making improvements, performing maintenance, or reacting to a crisis, ProSight IT Asset Management delivers the knowledge you need the instant you need it. Learn more about Progent's ProSight IT Asset Management service.

The ProSight Ransomware Preparedness Report Service
The ProSight Ransomware Preparedness Report is an affordable service centered on a brief phone discussion with a Progent information assurance consultant. The interview is intended to evaluate your organization's preparedness to block or recover quickly following an assault by a ransomware variant such as Ryuk, WannaCry, MongoLock, or Hermes. Progent will work with you directly to gather information concerning your current AV defense and backup/recovery system, and Progent will then produce a written Basic Security and Best Practices Report describing how you can follow best practices to create a cost-effective AV and backup/recovery environment that aligns with your business requirements. For additional information, see Progent's ProSight Ransomware Preparedness Report Service.

Fixed-price Security Evaluation and Verification Bundles
Progent has put together a selection of fixed-price security assessment bundles that provide exceptional value by utilizing Progent's enterprise-class system monitoring and analysis tools plus Progent's consulting experience to produce an objective and thorough assessment of your network security profile.

• Security Inventory Service Bundles for Small Organizations
  Progent offers two value-priced security inventory service packages designed to enable small businesses to obtain an objective security assessment from an accredited security engineer. With Progent's External Security Inventory Scan, a consultant manages an extensive examination of your network from beyond your corporate firewall to identify possible gaps in the security posture you present to the public. With Progent's Internal Security Inventory Scan, a security expert runs a network scan using an authorized computer inside your firewalled perimeter to evaluate your vulnerability to internal attacks. The two security inventory scans are configured and run from a secured offsite location. The scan is managed by a consultant who has earned advanced security certifications and who produces a document that details and interprets the data captured by the scan and recommend various enhancements where required.
• Security Vulnerability Assessment Bundles for Large Businesses
  Progent offers three levels of flat-rate security assessment service packages intended for enterprises who need to meet compliance standards required by state or industry agencies. Progent's security assessment service packages offer larger organizations an opportunity to get a professional assessment at the strength of their security posture. For each security evaluation package, Progent engineers with advanced security credentials study and report on captured data and offer recommendations for efficient remediation. All the network security assessment packages include an added-cost option for onsite engineers at any location in the United States.
• Consulting Services for Horizon3.ai's NodeZero Pentest Solutions
  NodeZero from Horizon3.ai is a leading-edge penetration test (pentest) product family that supports repeated, simultaneous, programmable assessment of your internal and perimeter network to help you find, rank, remediate, and verify security vulnerabilities before malicious hackers can take advantage of them. Progent offers the support of a NodeZero Certified Operator who can help you to use NodeZero to perform comprehensive pentests of your perimeter and your internal IT infrastructure so you can evaluate your current security profile. Progent's NodeZero experts can also help you to strengthen your network security and can help you to plan and deploy a cohesive cybersecurity strategy that simplifies management and provides maximum cyber defense for on-prem, multi-cloud, and perimeter IT assets. To find out more information about Progent's threat analysis solutions based on on NodeZero's penetration test products, visit Consulting Services for NodeZero's PEN Test Platform.
• Stealth Penetration Testing
  Stealth penetration testing, often called PEN testing, is a critical technique for helping organizations to find out how vulnerable their IT systems are to modern threats. Progent's stealth penetration testing check how well your corporate security procedures and platforms stand up to authorized but unannounced penetration attempts managed by Progent's veteran security experts using advanced hacking techniques. Read about Progent's stealth penetration testing services.

We've Been Hacked: What Should We Do Now?
If you are now faced with a security crisis and you do not have a detailed response procedure, go to Progent's Online Technical Help to find out how to receive immediate assistance. Progent offers remote assistance from skilled network technicians and can refer problems to certified security specialists if necessary. Your organization does not have to be a current Progent client to get emergency help for a security breach, but you can register as a Progent client ahead of time at no cost and your standing as a current customer can save precious time in an emergency.

Usually, smaller organizations have not documented a recovery procedure in case of a successful security breach. This is not good, because the cost of a successful security attack can be even more catastrophic for a small company than for a big enterprise. Progent's security consultants can assist your you to design a practical response and event reporting plan that minimizes the network downtime following a security breach. The step-by-step incident response model promoted by Global Information Assurance Certification is Progent's recommended procedure for reacting to a major security incident.

High-value Security Expertise Offered by Progent
Progent's security consultants offer world-class consulting in key facets of network compliance including:

• Information Risk Evaluation and Security Compliance Assessment
  Progent provides expertise with information risk evaluation software like Microsoft Baseline Security Analyzer or LANguard from GFI for performing a set of automatic network tests to reveal potential security gaps. Progent has broad experience with monitoring tools and can assist your company to understand audit reports and respond efficiently. Progent's certified security consultants also offer web application testing and can perform expert assessments of corporate-wide security to validate your organization's compliance with important worldwide security standards including FISMA, NIST, and ISO. In addition, Progent can assess the strength of your wireless protection covering fixed wireless equipment plus mobile handsets. Read the details concerning Progent's Vulnerability Audits and Security Compliance Assessment.
• Planning, Implementing, and Validating Protected Networks
  Every company ought to have a carefully considered security plan that includes both preventive and reactive activity. The pre-attack strategy is a set of steps that works to minimize vulnerabilities. The post-attack plan defines procedures to help IT personnel to inventory the damage resulting from an attack, remediate the damage, document the event, and restore network activity as quickly as possible. Progent can show you how to incorporate security into your company operations, configure auditing utilities, create and execute a safe network architecture, and recommend procedures and policies to optimize the safety of your computing environment. Progent's security professionals are available to help you to configure a firewall, design safe offsite connectivity to email and data, and install an effective VPN. If your company is interested in an economical way for jobbing out your network security management, Progent's Round-the-clock Monitoring Packages feature automated remote server tracking and quick response to problems.
• System Recovery and Failure Analysis
  Progent has skill in restoring networks and devices that have been hacked, are quarantined, or have failed following a security breach. Progent can help evaluate the damage resulting from the attack, return your company to normal functions, and retrieve data lost as a result of the breach. Progent's security specialists can also manage a thorough failure analysis by examining activity logs and utilizing other advanced forensics techniques. Progent's background with security issues minimizes your off-air time and allows Progent to propose effective ways to prevent or contain future assaults.
• Cisco ASA 5500-X Firewalls with Firepower, ASA 5500 Firewalls, and PIX Security Appliances Configuration and Debugging
  The current ASA 5500-X Series of firewalls with Firepower Services offer substantially more bang for the buck than Cisco's legacy PIX and ASA 5500 firewalls and have superseded the ASA 5500 and PIX security appliances for new installations. Following Cisco's acquisition of Sourcefire, the whole family of ASA 5500-X devices can be provisioned to enable Firepower Services, built on Sourcefire's Snort product, which is the world's most popular intrusion protection system. Firepower services bring enhanced capabilities including advanced malware protection (AMP), URL filtering, dynamic threat analytics, and security automation. Progent's Cisco-premier CCIE network consultants can help you to manage your existing PIX or Cisco ASA 5500 firewalls and migrate efficiently to ASA 5500-X firewalls with Firepower Services. Progent's consultants can provide remote and onsite help with ASA 5500-X firewalls with Firepower Services and can assist you to design, configure, optimize, administer and troubleshoot firewall environments built around Cisco ASA 5500-X firewalls with Firepower Services. Learn additional information about Cisco ASA Firewalls with Firepower integration and troubleshooting services.
• Additional Firewall and VPN Solutions Provided by Progent
  As well as offering support for a broad array of network security solutions available from Microsoft and Cisco, Progent offers small and mid-size companies top-tier engineering services for products from other important firewall and Virtual Private Network suppliers by delivering services such as:
  • Palo Alto Networks technical assistance
    
  • Check Point Software help
  • WatchGuard Technologies engineering services
  • Juniper Networks Inc engineering services
  • SonicWall Inc. help
  • Fortinet FortiGate Firewall technical assistance
    
  • Symantec integration expertise
  • Barracuda CloudGen Firewall Experts
• SIEM Integration and Support
  Security information and event management (SIEM) applications and services are intended to make sense the massive quantity of data collected in security event logs generated by multiple sources including network infrastructure appliances, servers, and applications and tools. SIEM software organizes the security logs from these diverse sources and produces summary reports of security events as required by government regulations and industry compliance standards. Progent's GIAC-certified information assurance experts and Cisco CCIE certified network infrastructure experts can assist businesses to plan, install and manage a SIEM solution that enables them to see the progress of attacks and comply with security incident reporting requirements. (See Progent's Security information and Event Management solutions.)
• Software Update Management Solutions
  Patch management includes applying software or firmware updates to operating systems and applications, servers and endpoint devices, peripherals such as printers, network appliances such as switches and Wi-Fi APs, and IoT devices such as alarms and health monitors. Timely and correctly managed patching maximizes cybersecurity, regulatory compliance, availability, and functionality. Haphazard patch management can result in security vulnerabilities, compatibility issues, sluggish or inconsistent performance, needless offline stretches, or unavailability of key functions. Progent's managed services for software and firmware patch management provide organizations of all sizes a flexible and cost-effective alternative for evaluating, validating, scheduling, applying, and documenting updates to your dynamic IT network. (See Progent's software update management services.)

• Certified Information Security Manager (CISM) Security Consulting Expertise
  CISM identifies the basic competencies and worldwide benchmarks of service that information technology security managers are expected to achieve. CISM provides executive management the assurance that those who have earned their accreditation have the background and skill to provide effective security administration and engineering services. Progent can provide a CISM expert to assist your organization in key security disciplines such as data security governance, risk management, data protection program management, and incident handling management. Read more details about Progent's CISM Security Consulting Expertise.

• CISSP Security Support Expertise
  Progent's CISSP consultants are security specialists who have earned CISSP certification as a result of verified professional work, rigorous study, and formal examination. CISSP Certification indicates mastery of an international standard for IT security. ANSI has granted the CISSP status official recognition in the area of information security under ISO/IEC 17024. Fields of knowledge covered within CISSP include security management practices, security architecture and models, connection permission systems, software development security, operations security, physical security, cryptography, telecommunications, Internet security, and business continuity planning. Find out additional details about Progent's Certified Information Systems Security Professionals (CISSP) Consulting Expertise.

• CISSP-ISSAP Security Architecture Consulting Expertise
  Progent's CISSP-ISSAP Certified security architecture consultants have been awarded ISSAP accreditation after thorough testing and significant hands-on work with network security design. ISSAP security experts have acquired comprehensive understanding of access control mechanisms and methodologies, phone system and network infrastructure security, cryptography, requirements analysis, business continuity planning (BCP) and disaster recovery planning (DRP), and physical security integration. Progent's CISSP-ISSAP-premier security consultants can help your company with all phases of secure network architecture. Learn more details concerning Progent's ISSAP Accredited Protected IT Architecture Consulting Assistance.

• Certified Information Systems Auditor Professional Expertise
  The CISA accreditation is a prestigious achievement that represents expertise in network security auditing. Accredited by the American National Standards Institute (ANSI), the CISA credential requires that candidates undergo an exhaustive test administered by the ISACA professional association. Progent can provide the expertise of a CISA-Premier security audit consultant trained to assist businesses in the areas of information systems audit process, IT governance, systems and architecture lifecycle, IT service delivery, protecting information assets, and disaster recovery preparedness. Read more information about Progent's Certified Information Systems Auditor Consulting Assistance.

• CRISC Network Risk Mitigation Experts
  The CRISC certification program was established by ISACA to verify an IT professional's ability to plan, deploy, and maintain IS control mechanisms to reduce risk. Progent offers the services of a CRISC-certified engineer to assist you to develop and execute a workplace continuity or disaster recovery strategy that follows leading practices identified by CRISC and geared to align with your organization's risk tolerance, business objectives, and budgetary guidelines. Progent's risk mitigation services are complementary to the services available from Progent's CISA-Certified consultants for impartially auditing your IT control mechanisms and also with the services of Progent's CISM consultants for defining company-wide security policies and procedures. Find out more information about Progent's CRISC IT Risk Management Support.

• GIAC Support Services
  GIAC (Global Information Assurance Certification) was founded in 1999 to validate the skill of network security engineers. GIAC's goal is to assure that a certified security consultant possesses the skills necessary to deliver services in critical categories of system, information, and application security. GIAC certifications are recognized by companies and government organizations all over the world including and the United States National Security Agency. Progent can provide the expertise of GIAC certified professionals for all of the security capabilities addressed under GIAC certification topics such as assessing IT infrastructure, security incident response, traffic analysis, and web-based application security. Get more details about Progent's GIAC Professional Expertise.