Computer Security and Compliance Consulting

Introduction to Progent's Security and Compliance Consulting Services
Progent's industry certified network security professionals can provide a broad range of support services designed to help companies of any size to uncover and correct security weaknesses, defend against assaults, remediate any problems resulting from a breach of protection, and comply with regulatory requirements for protecting data and reporting security incidents. Progent can deliver advanced help for key cybersecurity and recovery solutions such as AI-driven End Point Protection and Response, Managed Detection and Response, complete system restoration validation, immutable backup, and off-premises backup.

Progent can provide a selection of service delivery modes:

• As-needed online and on-premises support invoiced by the minute
• Continual fully managed services billed at an affordable fixed monthly fee
• Set-price service bundles for a one-time security evaluation
• Urgent ransomware response. Progent will submit a bid based on an evaluation of the damage.
  (If your system has been breached by any strain of ransomware, do not panic. Get fast help by contacting Progent's 24-hour Ransomware Hot Line at 800-462-8800.)

Delivery options for Progent's on-demand support include:

• Remote Security Services
  Most security-related issues can be resolved online via a combination of phone-based support and an connection between Progent's Technical Response Center (TRC) and a client's computer. Progent's Technical Response Center can provide remote security help by offering easy access to consultants who have the background and resources to resolve some of the most challenging problems quickly, keeping your support expenses low and minimizing downtime.
• Onsite Security Support
  For cases where on-premises assistance is required, Progent can dispatch a technical professional to major metropolitan areas throughout the United States. Progent can also dispatch a security specialist with high-level certifications and advanced skills to any site in the country.

ProSight Low-Cost Managed Services for Information Assurance
Progent's low-cost ProSight family of network monitoring and management services is intended to provide small and mid-size businesses with enterprise-class support and cutting-edge technology for all facets of information assurance and compliance. Managed services offered by Progent include:

• ProSight Active Security Monitoring: Endpoint Protection and Ransomware Recovery
  Progent's ProSight Active Security Monitoring is an endpoint protection service that utilizes SentinelOne's next generation behavior-based machine learning tools to guard endpoints as well as physical and virtual servers against modern malware attacks such as ransomware and email phishing, which easily evade traditional signature-based anti-virus products. ProSight Active Security Monitoring safeguards on-premises and cloud-based resources and offers a unified platform to address the entire malware attack progression including blocking, infiltration detection, containment, remediation, and forensics. Key capabilities include one-click rollback using Windows VSS and real-time network-wide immunization against new threats. Progent is a SentinelOne Partner, dealer, and integrator. Find out more about Progent's ProSight Active Security Monitoring endpoint protection and ransomware defense based on SentinelOne technology.

• ProSight Reporting: Real-time and In-depth Reporting for Ticketing and Network Monitoring Platforms
  ProSight Reporting is a growing family of in-depth reporting utilities designed to work with the leading ticketing and network monitoring applications including ConnectWise Manage, ConnectWise Automate, Customer Thermometer, Auvik, and SentinelOne. ProSight Reporting uses Microsoft Graph and features color coding to highlight and contextualize critical issues such as inconsistent support follow-up or machines with missing patches. By identifying ticketing or network health problems concisely and in near-real time, ProSight Reporting improves productivity, lowers management overhead, and saves money. For details, visit ProSight Reporting for ticketing and network monitoring applications.

• ProSight Enhanced Security Protection: Unified Physical and Virtual Endpoint Security
  ProSight Enhanced Security Protection services deliver ultra-affordable multi-layer protection for physical servers and VMs, workstations, smartphones, and Exchange email. ProSight ESP utilizes contextual security and advanced machine learning for continuously monitoring and responding to security assaults from all vectors. ProSight ESP offers firewall protection, penetration alarms, device management, and web filtering via cutting-edge tools packaged within a single agent managed from a unified console. Progent's security and virtualization experts can help your business to plan and configure a ProSight ESP deployment that meets your organization's specific requirements and that allows you achieve and demonstrate compliance with government and industry information security regulations. Progent will help you define and implement security policies that ProSight ESP will manage, and Progent will monitor your network and react to alerts that call for urgent attention. Progent can also help your company to set up and verify a backup and restore solution such as ProSight Data Protection Services (DPS) so you can get back in business rapidly from a potentially disastrous cyber attack such as ransomware. Find out more about Progent's ProSight Enhanced Security Protection (ESP) unified physical and virtual endpoint protection and Exchange email filtering.

• ProSight DPS: Managed Cloud Backup
  ProSight Data Protection Services provide small and mid-sized organizations an affordable and fully managed service for secure backup/disaster recovery (BDR). Available at a low monthly cost, ProSight DPS automates and monitors your backup activities and allows fast recovery of critical data, apps and VMs that have become lost or damaged as a result of hardware breakdowns, software bugs, disasters, human error, or malicious attacks such as ransomware. ProSight DPS can help you back up, retrieve and restore files, folders, apps, system images, plus Hyper-V and VMware images. Critical data can be backed up on the cloud, to an on-pr1mises storage device, or mirrored to both. Progent's cloud backup specialists can deliver world-class expertise to configure ProSight DPS to to comply with government and industry regulatory requirements like HIPAA, FIRPA, PCI and Safe Harbor and, when necessary, can help you to restore your critical data. Learn more about ProSight Data Protection Services Managed Cloud Backup and Recovery.

• ProSight Email Guard: Inbound and Outbound Spam Filtering, Data Leakage Protection and Content Filtering
  ProSight Email Guard is Progent's email filtering and encryption platform that uses the technology of top data security companies to provide centralized control and world-class security for your email traffic. The powerful architecture of Progent's Email Guard integrates cloud-based filtering with an on-premises security gateway appliance to offer complete defense against spam, viruses, Denial of Service Attacks, Directory Harvest Attacks, and other email-borne threats. Email Guard's Cloud Protection Layer serves as a first line of defense and keeps most unwanted email from reaching your security perimeter. This decreases your exposure to inbound threats and conserves network bandwidth and storage space. Email Guard's onsite gateway appliance provides a further layer of analysis for incoming email. For outbound email, the on-premises gateway offers anti-virus and anti-spam protection, DLP, and encryption. The on-premises gateway can also assist Microsoft Exchange Server to track and protect internal email traffic that originates and ends inside your corporate firewall. Find out more about Progent's ProSight Email Guard spam filtering, virus defense, content filtering and data loss protection.

• ProSight Duo MFA: Two-Factor Authentication
  ProSight Duo is a suite of managed service plans utilizing top-ranked technology developed by Duo, a Cisco company, to create two-factor authentication environments. 2FA uses an out-of-band device to validate user identity, offering a second level of access security over and above merely passwords. This protects against the majority of cybersecurity breaches like social engineering, brute-force password attacks, and purloined credentials. Duo's push technology can save time and minimize hassle by permitting users anywhere to prove their identity simply by clicking "Approve" on the authentication box on their own personal device, which could be a phone, a smart watch, or other compatible out-of-band device. This one-tap verification process avoids the requirement to open an email or text message and manually transcribe a security code. Learn more about Progent's ProSight Duo MFA multi-factor authentication services.

• ProSight WAN Watch: Infrastructure Management
  ProSight WAN Watch is an infrastructure management service that makes it easy and affordable for small and mid-sized organizations to map, track, optimize and debug their connectivity appliances such as routers, firewalls, and wireless controllers plus servers, printers, client computers and other devices. Using state-of-the-art RMM technology, WAN Watch makes sure that network diagrams are always updated, captures and manages the configuration information of almost all devices connected to your network, tracks performance, and generates alerts when issues are discovered. By automating time-consuming network management activities, WAN Watch can cut hours off common chores such as making network diagrams, expanding your network, finding appliances that need critical updates, or identifying the cause of performance issues. Learn more about ProSight WAN Watch network infrastructure management consulting.

• ProSight LAN Watch: Server and Desktop Monitoring and Management
  ProSight LAN Watch is Progent's server and desktop monitoring managed service that incorporates state-of-the-art remote monitoring and management techniques to help keep your IT system running at peak levels by checking the health of critical computers that power your information system. When ProSight LAN Watch detects a problem, an alert is sent immediately to your specified IT staff and your Progent consultant so any potential issues can be resolved before they can disrupt productivity Learn more details about ProSight LAN Watch server and desktop monitoring services.

• ProSight Virtual Hosting: Hosted Virtual Machines at Progent's World-class Data Center
  With ProSight Virtual Hosting service, a small or mid-size business can have its critical servers and applications hosted in a secure fault tolerant data center on a high-performance virtual machine host set up and maintained by Progent's network support experts. Under the ProSight Virtual Hosting service model, the customer retains ownership of the data, the OS software, and the apps. Since the environment is virtualized, it can be ported immediately to a different hardware environment without a time-consuming and technically risky configuration process. With ProSight Virtual Hosting, your business is not locked into one hosting service. Learn more details about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Documentation Management
  Progent's ProSight IT Asset Management service is an IT infrastructure documentation management service that makes it easy to create, update, find and protect data about your IT infrastructure, procedures, applications, and services. You can instantly find passwords or serial numbers and be alerted about impending expirations of SSL certificates ,domains or warranties. By updating and organizing your IT infrastructure documentation, you can save as much as 50% of time thrown away searching for critical information about your network. ProSight IT Asset Management features a centralized location for storing and collaborating on all documents required for managing your business network like recommended procedures and self-service instructions. ProSight IT Asset Management also offers advanced automation for collecting and relating IT information. Whether you're making improvements, doing maintenance, or reacting to a crisis, ProSight IT Asset Management delivers the knowledge you require the instant you need it. Find out more about ProSight IT Asset Management service.

The ProSight Ransomware Preparedness Report Service
Progent's ProSight Ransomware Preparedness Report is a low-cost service centered on a brief interview with a Progent backup/recovery consultant. The interview is designed to assess your organization's preparedness to stop or recover quickly following an attack by a ransomware strain like Ryuk, WannaCry, MongoLock, or Locky. Progent will work with you directly to collect information concerning your existing cybersecurity profile and backup platform, and Progent will then produce a custom Basic Security and Best Practices Report describing how you can apply industry best practices to build a cost-effective security and backup/recovery environment that meets your business requirements. For more information, refer to The ProSight Ransomware Preparedness Report Service.

Set-price Security Assessment and Validation Packages
Progent has put together a portfolio of flat-rate security and compliance evaluation bundles that deliver exceptional value by deploying Progent's advanced network monitoring and analysis software as well as Progent's consulting experience to create an objective and thorough evaluation of your IT environment security posture.

• Security Assessment Service Packages for Small Businesses
  Progent offers two value-priced security inventory packages designed to enable small organizations to get an objective security evaluation from an accredited security consultant. With Progent's External Security Inventory Scan, an engineer administers an extensive assessment of your network from outside your corporate firewall to identify possible gaps in the security posture you present to the public. With Progent's Internal Security Inventory Scan, a security consultant runs a system scan from an authorized machine within your firewalled perimeter to evaluate your exposure to inside attacks. These two security inventory scans are set up and run from a secured offsite location. The project is managed by a consultant who has earned high-level security certifications and who produces a report that describes and interprets the information collected by the security scan and suggests various enhancements where required.
• Security Vulnerability Evaluation Packages for Enterprises
  Progent has developed three levels of set-price security evaluation service bundles intended for large organizations who want to meet compliance standards required by state or industry agencies. Progent's security evaluation service packages offer enterprises an opportunity to obtain a professional look at the strength of their security posture. For each security assessment bundle, Progent consultants with advanced security credentials study and report on collected data and offer recommendations for efficient remediation. All the network security assessment packages include an extra-cost option for onsite engineers anywhere in the United States.
• Consulting Services for Horizon3.ai's NodeZero PEN Testing Platform
  NodeZero from Horizon3.ai is a cutting-edge penetration test (pentest) product family that can deliver continuous, concurrent, automated testing of your internal and perimeter network to help you uncover, prioritize, fix, and confirm security vulnerabilities before malicious hackers can take advantage of them. Progent offers the expertise of a NodeZero Certified Operator (NCO) who can assist you to deploy NodeZero to perform comprehensive penetration tests of your network perimeter and your internal IT infrastructure in order to determine your present security posture. Progent's NodeZero experts can also help you to strengthen your network security and can assist you to plan and implement a unified cybersecurity ecosystem that streamlines management and provides optimum protection for on-premises, multi-cloud, and perimeter IT assets. To find out additional information about Progent's threat analysis solutions based on on NodeZero's pentest products, see Consulting Services for NodeZero's PEN Test Products.
• Stealth Penetration Testing Services
  Stealth penetration testing, often known as PEN testing, is a vital tool for helping organizations to find out how vulnerable their IT systems are to modern threats. Progent's stealth penetration testing test how well your corporate security policies and platforms resist authorized but unannounced penetration attempts managed by Progent's experienced security specialists utilizing advanced hacking methods. Read about Progent's stealth penetration testing services.

We've Been Hacked: What Should We Do Now?
If you are now fighting a network security emergency and you have not prepared a formal response plan, refer to Progent's Online Technical Support to find out how to receive immediate assistance. Progent offers online assistance from skilled engineers and can escalate problems to high-level security experts if necessary. Your company does not need to be a registered Progent client to receive urgent help for a security breach, but you can register as a Progent customer in advance for free and your status as a current customer can save precious time during an emergency.

Typically, smaller companies have no response procedure in case of a successful penetration. This is not good, since the cost of a serious security assault can be even more catastrophic for a small company than for a large corporation. Progent's security consultants can assist your business to create a practical response and event reporting procedure that reduces the IT system disruption following a security breach. The formal post-attack response model promoted by Global Information Assurance Certification is Progent's suggested method for responding to a major security penetration.

Advanced Security Expertise Available from Progent
Progent's veteran engineers can provide world-class consulting in key areas of IT protection including:

• Vulnerability Audits and Compliance Testing
  Progent offers experience with security evaluation tools like Microsoft Baseline Security Analyzer and LANguard for conducting a set of comprehensive network scans to reveal possible security problems. Progent has broad experience with monitoring utilities and can help you to understand audit results and react efficiently. Progent's security engineers also provide web application testing and can conduct thorough assessments of corporate-wide security to verify your organization's compliance with key industry security standards including HIPAA, NIST, and ISO. In addition, Progent can assess the effectiveness of your wireless security including fixed wireless appliances as well as mobile handsets. Read more information concerning Progent's Vulnerability Evaluation and Security Compliance Assessment.
• Planning, Implementing, and Validating Protected Environments
  Every organization should develop a thoroughly thought out security strategy that includes both proactive and responsive activity. The pre-attack plan is a set of steps that works to reduce vulnerabilities. The reactive plan defines procedures to help security staff to inventory the losses caused by a breach, repair the damage, record the experience, and revive network functions as quickly as possible. Progent can show you how to build security into your business processes, install auditing utilities, define and build a safe computer architecture, and propose processes and policies that will maximize the safety of your network. Progent's security professionals are ready to assist you to set up a firewall, deploy protected offsite connectivity to email and files, and install an efficient virtual private network. If your company is looking for an economical option for outsourcing your network security administration, Progent's Round-the-clock Network Support Services include non-stop online network monitoring and immediate resolution of emergencies.
• System Restoration and Security Forensics
  Progent provides expertise in recovering systems and servers that have been hacked, are in question, or have stopped working as a result of a security breakdown. Progent can show you how to determine the damage caused by the attack, return your company to ordinary business operations, and retrieve data lost owing to the attack. Progent's security specialists can also manage a thorough forensic analysis by examining event logs and using other advanced assessment techniques. Progent's background with security problems minimizes your off-air time and allows Progent to suggest efficient strategies to prevent or mitigate future attacks.
• Cisco ASA 5500-X Firewalls with Firepower, ASA 5500 Series Firewalls, and PIX Firewalls Integration and Troubleshooting
  The current ASA 5500-X Family Next-Generation Firewalls with Firepower Services deliver substantially more bang for the buck than Cisco's previous firewalls and have replaced the ASA 5500 and PIX 500 firewalls for new installations. After Cisco's purchase of Sourcefire, the entire family of Cisco ASA 5500-X devices can be provisioned to support Firepower Services, built on Sourcefire's Snort technology, which is the market's most popular intrusion protection system (IPS). Firepower services provide enhanced features such as advanced malware protection (AMP), URL filtering, dynamic threat analytics, and automation. Progent's Cisco-certified CCIE network experts can help you to maintain your current PIX or ASA 5500 security appliances and upgrade efficiently to Cisco ASA 5500-X firewalls with Firepower Services. Progent's consultants offer remote and onsite help with ASA 5500-X firewalls with Firepower Services and can help your organization to plan, configure, tune, administer and troubleshoot firewall environments built on Cisco ASA 5500-X firewalls with Firepower Services. See additional details about Cisco ASA 5500-X Firewalls with Firepower Services configuration and troubleshooting services.
• Other Firewall and VPN Technologies Offered by Progent
  In addition to supporting a wide range of network security solutions available from Microsoft and Cisco, Progent offers small organizations top-tier engineering services for solutions from other popular firewall and Virtual Private Network vendors by providing services including:
  • Palo Alto Networks integration expertise
    
  • Check Point Software technical assistance
  • WatchGuard Technologies Inc support
  • Juniper Networks integration expertise
  • SonicWall integration expertise
  • Fortinet FortiGate Firewall consulting
    
  • Symantec integration expertise
  • Barracuda CloudGen Firewall Consulting
• SIEM Solutions
  Security information and event management (SIEM) software and services are intended to digest the enormous quantity of information represented by security incident logs created by a wide range of sources including network infrastructure appliances, operating systems, and application software and tools. SIEM software organizes the security logs from these various sources and creates summary reports of security incidents as required by state regulations and industry compliance standards. Progent's GIAC-certified network security experts and Cisco-certified network consultants can assist businesses to plan, deploy and manage a SIEM system that helps them to see the progress of security incidents and comply with security incident reporting requirements. (Visit Progent's Security information and Event Management (SIEM) solutions.)
• Software Update Management Services
  Software update management entails installing software or firmware updates to operating systems and apps, physical and virtual servers and endpoints, peripherals like printers and scanners, network infrastructure appliances like routers and Wi-Fi access points, and Internet-of-Things (IoT) devices such as alarms and robotics. Timely and properly managed updating optimizes security, compliance, uptime, and functionality. Sporadic software update management can cause security vulnerabilities, compatibility problems, sluggish or inconsistent responsiveness, excessive offline stretches, or loss of key features. Progent's support services for patch management provide organizations of all sizes a versatile and affordable solution for evaluating, validating, scheduling, applying, and tracking software and firmware updates to your ever-evolving information system. (See Progent's software update management services.)

• CISM Security Support Expertise
  Certified Information Security Manager identifies the basic skills and worldwide benchmarks of service that IT security managers are expected to achieve. CISM offers business management the confidence that those who have earned their CISM have the background and skill to offer efficient security administration and engineering support. Progent can provide a CISM expert to help your organization in key security areas such as information security governance, risk management, information protection program management, and crisis response management. Get more information concerning Progent's Certified Information Security Manager Security Consulting Services.

• CISSP Security Consulting Services
  Progent's Certified Information Systems Security Professionals (CISSPs) are security engineers who have earned CISSP accreditation through verified professional work, rigorous study, and formal testing. CISSP qualification indicates mastery of an international standard for information security. American National Standards Institute has granted the CISSP credential accreditation in the area of IT security under ISO/IEC 17024. Fields of expertise included within CISSP include security administration procedures, security architecture and models, connection permission systems, software development security, operations security, physical security, cryptography, communications, network security, and disaster recovery planning. Read additional details concerning Progent's CISSP Consulting Expertise.

• CISSP-ISSAP Cybersecurity Architecture Consulting Expertise
  Progent's CISSP-ISSAP Premier security architecture experts have earned ISSAP status after thorough examination and substantial hands-on work with network security design. ISSAP consultants have in-depth understanding of access management systems and methodologies, phone system and network security, cryptography, requirements analysis, BCP and disaster recovery, and physical security. Progent's CISSP-ISSAP-premier security specialists can help your business with all aspects of secure network architecture. Find out additional details about Progent's ISSAP Accredited Secure IT Infrastructure Consulting Services.

• Certified Information Systems Auditor (CISA) Professional Expertise
  The CISA credential is a globally recognized achievement that represents expertise in network security auditing. Accredited by the American National Standards Institute, the CISA accreditation has consultants undergo an exhaustive test administered by the ISACA international professional group. Progent can provide the expertise of a CISA-Certified security audit professional able to assist businesses in the fields of information systems audit process, information technology governance, network assets and infrastructure planned useful life, IT support, safeguarding data resources, and disaster recovery preparedness. Read additional information concerning Progent's CISA Consulting Expertise.

• CRISC IT Risk Management Specialists
  The Certified in Risk and Information Systems Control (CRISC) program was established by ISACA in 2010 to verify an IT professional's skills to plan, deploy, and maintain IS control mechanisms to mitigate network risk. Progent offers the services of a CRISC-certified consultant to help you to develop and carry out a workplace continuity or disaster recovery strategy that follows leading practices identified by CRISC and crafted to align with your organization's risk appetite, business objectives, and budgetary guidelines. Progent's network risk management expertise is a good fit the services provided by Progent's CISA-Premier security engineers for objectively evaluating your IT control mechanisms and also with the services of Progent's CISM support professionals for implementing company-wide security policies and procedures. Learn additional information concerning Progent's CRISC-certified Network Risk Management Support.

• GIAC Professional Services
  GIAC was established in 1999 to certify the skill of IT security engineers. GIAC's mission is to verify that a certified security consultant possesses the skills necessary to deliver services in important categories of system, information, and application software security. GIAC accreditations are recognized by businesses and institutions around the world including and the U.S. NSA. Progent can provide the help of certified professionals for any of the security services addressed under GIAC certification topics such as assessing networks, security incident handling, intrusion detection, and web-based services security. Read the details about Progent's Global Information Assurance Certification Consulting Services.