Data Security and Compliance Consulting

Overview of Progent's Security and Compliance Support Services
Progent's industry certified network security experts can provide a broad selection of services intended to assist companies of any size to detect and eliminate security vulnerabilities, block assaults, recover from the damage caused by a breakdown of protection, and meet regulatory requirements for protecting data and reporting security incidents. Progent can provide expert help for key security and restoration solutions such as AI-driven End Point Protection and Response, Managed Detection and Response, full system restore validation, immutable backup, and off-premises backup.

Progent can provide a choice of service delivery models:

• As-needed online and on-premises assistance billed by the minute
• Continual managed services invoiced at an affordable fixed monthly fee
• Value-priced service bundles for a one-time security and compliance assessment
• Urgent ransomware response. Progent will submit a bid based on an evaluation of the extent of the damage.
  (If your network has been breached by any strain of ransomware, don't panic. Get fast assistance by contacting Progent's 24x7 Ransomware Hot Line at 800-462-8800.)

Delivery options for Progent's as-needed support include:

• Remote Security Support Services
  Most security-related issues can be resolved online via a mix of phone-based support and a remote connection between Progent's Technical Response Center (TRC) and a customer's network. Progent's TRC group can deliver remote security support by offering easy access to consultants with the background and resources to resolve some of the most difficult issues quickly, keeping your support expenses low and reducing lost productivity.
• Onsite Security Services
  For cases where onsite support is necessary, Progent can dispatch a technical professional to major metropolitan areas throughout the U.S. Progent can also send a security specialist with top certifications and advanced skills to any location in the country.

ProSight Low-Cost Managed Services for Information Assurance
Progent's affordable ProSight portfolio of managed services is designed to provide small and mid-size businesses with enterprise-class support and cutting-edge technology for all facets of information assurance. Managed services offered by Progent include:

• ProSight Active Security Monitoring: Next Generation Endpoint Protection and Ransomware Defense
  Progent's ProSight Active Security Monitoring is an endpoint protection solution that utilizes SentinelOne's next generation behavior-based machine learning technology to guard endpoint devices and servers and VMs against new malware assaults such as ransomware and file-less exploits, which easily evade legacy signature-matching anti-virus tools. ProSight Active Security Monitoring safeguards local and cloud resources and offers a single platform to automate the complete malware attack lifecycle including protection, detection, mitigation, cleanup, and forensics. Top features include single-click rollback with Windows Volume Shadow Copy Service and real-time system-wide immunization against newly discovered threats. Progent is a SentinelOne Partner, reseller, and integrator. Learn more about Progent's ProSight Active Security Monitoring endpoint protection and ransomware defense based on SentinelOne technology.

• ProSight Reporting: In-depth Reporting for Ticketing and Network Monitoring Applications
  ProSight Reporting is a growing family of real-time reporting plug-ins designed to integrate with the industry's leading ticketing and network monitoring programs including ConnectWise Manage, ConnectWise Automate, Customer Thermometer, Auvik, and SentinelOne. ProSight Reporting uses Microsoft Graph and utilizes color coding to highlight and contextualize key issues such as spotty support follow-through or endpoints with out-of-date AVs. By identifying ticketing or network health problems clearly and in near-real time, ProSight Reporting enhances network value, lowers management overhead, and saves money. For details, visit ProSight Reporting for ticketing and network monitoring platforms.

• ProSight Enhanced Security Protection: Unified Physical and Virtual Endpoint Protection
  ProSight Enhanced Security Protection (ESP) services deliver ultra-affordable in-depth protection for physical servers and VMs, workstations, smartphones, and Microsoft Exchange. ProSight ESP uses adaptive security and modern behavior analysis for continuously monitoring and reacting to security assaults from all attack vectors. ProSight ESP offers two-way firewall protection, penetration alerts, endpoint management, and web filtering via leading-edge technologies incorporated within a single agent accessible from a single control. Progent's data protection and virtualization consultants can help you to plan and implement a ProSight ESP environment that meets your organization's specific needs and that allows you demonstrate compliance with legal and industry data security standards. Progent will help you define and implement security policies that ProSight ESP will enforce, and Progent will monitor your network and respond to alerts that call for urgent attention. Progent can also help you to set up and test a backup and restore solution such as ProSight Data Protection Services (DPS) so you can get back in business quickly from a destructive cyber attack such as ransomware. Learn more about Progent's ProSight Enhanced Security Protection unified physical and virtual endpoint security and Exchange email filtering.

• ProSight Data Protection Services: Managed Cloud Backup and Recovery
  ProSight Data Protection Services provide small and medium-sized organizations a low cost end-to-end solution for reliable backup/disaster recovery (BDR). Available at a low monthly rate, ProSight DPS automates and monitors your backup activities and enables fast restoration of critical data, apps and VMs that have become unavailable or corrupted as a result of component failures, software bugs, natural disasters, human error, or malicious attacks like ransomware. ProSight DPS can help you back up, recover and restore files, folders, apps, system images, plus Microsoft Hyper-V and VMware images. Critical data can be backed up on the cloud, to a local device, or to both. Progent's backup and recovery consultants can provide world-class expertise to set up ProSight Data Protection Services to to comply with regulatory requirements like HIPAA, FINRA, and PCI and, whenever needed, can help you to restore your critical data. Learn more about ProSight Data Protection Services Managed Cloud Backup and Recovery.

• ProSight Email Guard: Spam Filtering, Data Leakage Protection and Content Filtering
  ProSight Email Guard is Progent's email filtering and encryption solution that uses the services and infrastructure of leading information security companies to provide web-based management and world-class security for your inbound and outbound email. The powerful structure of Email Guard managed service integrates a Cloud Protection Layer with an on-premises security gateway device to offer complete protection against spam, viruses, Denial of Service Attacks, Directory Harvest Attacks (DHAs), and other email-based malware. The Cloud Protection Layer acts as a first line of defense and keeps most threats from reaching your security perimeter. This decreases your exposure to inbound attacks and conserves network bandwidth and storage space. Email Guard's on-premises security gateway appliance provides a further layer of inspection for incoming email. For outbound email, the on-premises security gateway provides AV and anti-spam protection, policy-based Data Loss Prevention, and email encryption. The local gateway can also assist Exchange Server to track and safeguard internal email traffic that originates and ends within your corporate firewall. Learn more about Progent's ProSight Email Guard spam filtering, virus defense, email content filtering and data leakage prevention.

• ProSight Duo MFA: Two-Factor Authentication
  ProSight Duo MFA is a family of managed service plans utilizing industry-leading technology from Duo, a Cisco-owned company, to create two-factor authentication environments. Two-factor authentication uses an out-of-band endpoint to validate identity, providing a second level of access security rather than just passwords. This counters the majority of network security break-ins like social engineering, brute-force password guessing, and burglarized credentials. Duo's push technology can avoid wasted time and reduce hassle by permitting users to verify their identity as easily as clicking "Approve" on the authentication prompt on their personal endpoint, which can be a smartphone, a watch, or other compatible device. This one-tap process avoids the requirement to open an email or text message and manually copy a security code. Learn more about Progent's ProSight Duo MFA two-factor identity authentication services.

• ProSight WAN Watch: Network Infrastructure Remote Monitoring and Management
  ProSight WAN Watch is an infrastructure monitoring and management service that makes it easy and inexpensive for smaller organizations to map, monitor, optimize and troubleshoot their networking hardware like routers and switches, firewalls, and wireless controllers plus servers, endpoints and other networked devices. Incorporating cutting-edge Remote Monitoring and Management technology, WAN Watch makes sure that network diagrams are always current, copies and displays the configuration information of almost all devices connected to your network, tracks performance, and sends alerts when problems are detected. By automating time-consuming management processes, ProSight WAN Watch can cut hours off common tasks such as network mapping, reconfiguring your network, locating appliances that require important updates, or isolating performance problems. Find out more details about ProSight WAN Watch network infrastructure management services.

• ProSight LAN Watch: Server and Desktop Monitoring and Management
  ProSight LAN Watch is Progent's server and desktop monitoring service that incorporates advanced remote monitoring and management (RMM) techniques to help keep your network running at peak levels by checking the health of vital computers that power your information system. When ProSight LAN Watch uncovers an issue, an alarm is transmitted immediately to your specified IT management staff and your assigned Progent engineering consultant so that all potential issues can be addressed before they have a chance to impact your network Find out more details about ProSight LAN Watch server and desktop monitoring services.

• ProSight Virtual Hosting: Hosted VMs at Progent's World-class Data Center
  With ProSight Virtual Hosting service, a small or mid-size business can have its critical servers and applications hosted in a secure fault tolerant data center on a fast virtual host set up and managed by Progent's network support experts. With the ProSight Virtual Hosting service model, the client retains ownership of the data, the OS platforms, and the applications. Because the system is virtualized, it can be moved easily to an alternate hardware environment without requiring a lengthy and technically risky reinstallation procedure. With ProSight Virtual Hosting, your business is not locked into a single hosting service. Find out more details about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Documentation Management
  ProSight IT Asset Management service is a cloud-based IT documentation management service that makes it easy to create, maintain, find and protect information about your network infrastructure, processes, applications, and services. You can quickly find passwords or IP addresses and be alerted about impending expirations of SSL certificates or domains. By updating and managing your network documentation, you can save as much as 50% of time spent searching for critical information about your network. ProSight IT Asset Management features a centralized location for holding and sharing all documents related to managing your network infrastructure such as standard operating procedures and self-service instructions. ProSight IT Asset Management also supports advanced automation for collecting and relating IT information. Whether you're making improvements, performing regular maintenance, or responding to a crisis, ProSight IT Asset Management delivers the data you need as soon as you need it. Find out more about Progent's ProSight IT Asset Management service.

The ProSight Ransomware Preparedness Report Service
Progent's ProSight Ransomware Preparedness Report is an affordable service built around a brief interview with a Progent information assurance expert. The interview is intended to help evaluate your organization's preparedness either to block or recover rapidly after an assault by a ransomware variant like Ryuk, WannaCry, NotPetya, or Hermes. Progent will work with you personally to collect information concerning your current security profile and backup/recovery platform, and Progent will then deliver a written Basic Security and Best Practices Report document describing how you can follow best practices to create an efficient AV and backup/recovery system that aligns with your business needs. For more information, refer to Progent's ProSight Ransomware Preparedness Report Service.

Fixed-price Security Evaluation and Validation Packages
Progent offers a variety of fixed-price security assessment bundles that provide high value by deploying Progent's advanced network monitoring tools plus Progent's technical skills to produce an unbiased and thorough assessment of your network security posture.

• Security Inventory Service Packages for Small Organizations
  Progent offers two ultra-affordable security inventory packages intended to enable small businesses to get a professional security assessment from an accredited security engineer. With Progent's External Security Inventory Scan, a consultant administers an extensive assessment of your network from beyond your firewalled perimeter to determine possible risks in the security posture you present to the outside world. With Progent's Internal Security Inventory Scan, a certified security consultant executes a network scan from an authorized machine inside your firewalled perimeter to evaluate your vulnerability to internal attacks. These two security inventory services are set up and run from a secured offsite location. The scan is administered by an engineer who has earned high-level security certifications and who produces a document that details and interprets the information captured by the scan and suggests practical improvements where required.
• Security Vulnerability Assessment Bundles for Large Organizations
  Progent has developed three levels of flat-rate security assessment service bundles intended for enterprises who want to meet security standards required by state or industry regulators. Progent's security assessment service bundles offer larger businesses an opportunity to obtain an objective assessment at the strength of their security profile. For every security evaluation package, Progent consultants with top security credentials analyze and report on collected data and offer recommendations for cost-effective remediation. All the network security audit bundles include an extra-cost option for on-premises engineers anywhere in the U.S.
• Consulting Services for Horizon3.ai's NodeZero Penetration Testing Solutions
  NodeZero from Horizon3.ai is a cutting-edge penetration test (pentest) product family that supports repeated, simultaneous, automated testing of your network so you can expose, rank, remediate, and confirm cybersecurity vulnerabilities before threat actors can take advantage of them. Progent offers the skills of a NodeZero Certified Operator (NCO) who can assist you to use NodeZero to carry out comprehensive penetration tests of your perimeter and your internal network so you can determine your present security posture. Progent's NodeZero experts can also help you to strengthen your network security and can assist you to design and deploy a cohesive cybersecurity ecosystem that simplifies management and provides maximum protection for on-prem, multi-cloud, and perimeter IT resources. To learn additional details about Progent's vulnerability analysis solutions based on on NodeZero's PEN test products, see Consulting Support for NodeZero's Penetration Test Platform.
• Stealth Penetration Testing Services
  Stealth penetration testing, commonly called PEN testing, is a critical tool for helping organizations to determine how open their IT systems are to modern threats. Progent's stealth penetration testing test how effectively your corporate security procedures and platforms resist authorized but unannounced penetration attempts managed by Progent's experienced security experts utilizing advanced hacking methods. Find out about Progent's stealth penetration testing services.

Our System Has Been Hacked: What Are We Supposed to Do Now?
If you are now fighting a security crisis and you have no formal recovery procedure, visit Progent's Online Technical Support to learn how to get immediate help. Progent provides online assistance from experienced network technicians and can refer problems to high-level security experts if required. Your business does not need to be a current Progent customer to receive emergency support for a security breakdown, but you can sign up as a Progent client ahead of time at no cost and your status as a registered customer can save precious time during a crisis.

Usually, smaller organizations do not have a response procedure in the event of a successful penetration. This is not good, because the damage from a serious security attack can be even more devastating for a small company than for a big corporation. Progent's security specialists can assist your business to design an effective recovery and event reporting procedure that reduces the network disruption resulting from an attack. The formal post-attack response model outlined by GIAC (Global Information Assurance Certification) is Progent's preferred method for responding to a major security attack.

Advanced Security Services Offered by Progent
Progent's security engineers offer consulting support in key areas of IT protection such as:

• Vulnerability Audits and Compliance Assessment
  Progent offers experience with security evaluation tools such as MS Baseline Security Analyzer and LANguard for performing a set of automatic system scans to reveal possible security holes. Progent has broad skills with these and similar utilities and can help you to understand audit reports and respond efficiently. Progent's certified security consultants also offer web software testing and can perform expert assessments of enterprise-wide security to verify your organization's compliance with major industry security standards such as HIPAA, PCI, and ISO. Also, Progent can assess the strength of your wireless security covering fixed wireless equipment plus portable handsets. Read more details concerning Progent's Security Vulnerability Audits and Compliance Testing.
• Designing, Implementing, and Validating Protected Environments
  Any company ought to have a thoroughly considered security strategy that incorporates both preventive and reactive steps. The proactive plan is a collection of precautions that helps to minimize vulnerabilities. The reactive strategy specifies procedures to assist IT staff to evaluate the losses caused by an attack, repair the damage, document the experience, and revive network functions as quickly as possible. Progent can advise you how to incorporate protection into your company processes, configure scanning utilities, define and build a secure computer architecture, and recommend processes and policies that will maximize the safety of your information system. Progent's security professionals are available to help you to set up a firewall, deploy secure remote connectivity to email and data, and install an effective virtual private network (VPN). If you are looking for an affordable way for outsourcing your network security management, Progent's Round-the-clock Monitoring Packages feature automated remote server monitoring and immediate response to problems.
• Data Recovery and Failure Analysis
  Progent offers expertise in recovering systems and devices that have been compromised, are in question, or have ceased to function following a security penetration. Progent can show you how to evaluate the losses resulting from the assault, restore ordinary functions, and recover data lost owing to the breach. Progent's certified engineers can also manage a comprehensive forensic analysis by examining activity logs and using a variety of advanced forensics techniques. Progent's experience with security consulting reduces your off-air time and allows Progent to recommend effective ways to prevent or contain future attacks.
• Cisco ASA 5500-X Firewalls with Firepower, ASA 5500 Series Firewalls, and PIX Firewalls Integration and Troubleshooting
  The new Cisco ASA 5500-X Series Next-Generation Firewalls with Firepower Services deliver significantly more value than Cisco's previous PIX and ASA 5500 firewalls and have superseded the ASA 5500 and PIX 500 security appliances for all new installations. Following Cisco's acquisition of Sourcefire, the entire family of ASA 5500-X devices can be provisioned to enable Firepower Services, built on Sourcefire's Snort technology, which is the world's most popular network intrusion protection system (IPS). Firepower services provide enhanced capabilities such as advanced malware protection (AMP), URL filtering, real-time threat analytics, and automation. Progent's Cisco-premier CCIE network consultants can assist your company to manage your existing PIX or ASA 5500 security appliances and upgrade to ASA 5500-X firewalls with Firepower Services. Progent's consultants offer online and on-premises help with ASA 5500-X firewalls with Firepower Services and can assist your business to design, deploy, tune, administer and debug firewall environments based around Cisco ASA 5500-X firewalls with Firepower Services. Read additional details about ASA 5500-X Firewalls with Firepower Services integration and debugging support.
• Other Firewall and Virtual Private Network Consulting Services Offered by Progent
  In addition to offering support for a broad range of protection solutions from Microsoft and Cisco, Progent offers small and mid-size companies expert engineering services for products from other important firewall and VPN suppliers by delivering services including:
  • Palo Alto Networks help
    
  • Check Point technical assistance
  • WatchGuard Technologies technical assistance
  • Juniper integration expertise
  • SonicWall Inc. consulting
  • Fortinet FortiGate Firewall integration expertise
    
  • Symantec help
  • Barracuda CloudGen Firewall Experts
• SIEM Integration and Support
  Security information and event management (SIEM) applications and services are intended to digest the massive quantity of information collected in security event records created by multiple sources such as network infrastructure appliances, servers, and application software and tools. SIEM applications organizes the security event records from these various sources and produces consolidated reports of security incidents as required by government regulations and industry compliance standards. Progent's GIAC-certified information assurance experts and Cisco-certified network infrastructure experts can assist organizations to plan, deploy and manage a SIEM system that helps them to understand the behavior of attacks and comply with event reporting requirements. (See Progent's Security information and Event Management solutions.)
• Software Update Management Solutions
  Patch management includes applying software or firmware updates to operating systems and applications, physical and virtual servers and endpoints, peripherals such as printers and scanners, network infrastructure appliances such as switches and Wi-Fi APs, and Internet-of-Things (IoT) devices such as alarms and robotics. Prompt and properly managed patching optimizes security, compliance, availability, and functionality. Sporadic patch management can result in security vulnerabilities, compatibility issues, slow or inconsistent performance, needless downtime, or unavailability of important features. Progent's support services for software and firmware patch management provide organizations of all sizes a versatile and cost-effective alternative for evaluating, testing, scheduling, implementing, and documenting updates to your ever-evolving IT system. (Visit Progent's patch management service plans.)

• CISM Security Support Services
  Certified Information Security Manager (CISM) identifies the basic competencies and worldwide standards of performance that IT security managers are required to achieve. CISM offers executive management the confidence that consultants who have earned their certification have the background and knowledge to offer effective security administration and consulting support. Progent can offer a CISM-certified consultant to help your enterprise in critical security areas including information protection governance, risk assessment, information security program control, and crisis response support. Learn additional details concerning Progent's CISM Security Support Assistance.

• CISSP Security Support Services
  Progent's CISSP consultants are security specialists who have earned CISSP certification through demonstrated experience, rigorous study, and formal examination. CISSP Certification indicates mastery of an international standard for IT security. ANSI has granted the CISSP credential accreditation in the field of information security under ISO/IEC 17024. Fields of knowledge included within CISSP include security management practices, security architecture and test systems, connection control systems, applications development security, operations security, physical security, encryption, communications, Internet security, and disaster recovery planning. Read additional details concerning Progent's CISSP Support Services.

• CISSP-ISSAP Cybersecurity Architecture Consulting Expertise
  Progent's CISSP-ISSAP Premier cybersecurity architecture consultants have earned ISSAP accreditation as a result of rigorous examination and significant hands-on work with information security architecture. ISSAP security experts have comprehensive understanding of access control mechanisms and techniques, telecommunications and network infrastructure security, cryptography, needs evaluation, business continuity and DRP, and physical security integration. Progent's CISSP-ISSAP-premier security specialists can help your business with all aspects of secure network architecture. Find out the details concerning Progent's ISSAP Certified Protected System Architecture Consulting Services.

• CISA Professional Services
  The Certified Information Systems Auditor (CISA) credential is a prestigious achievement that represents mastery in information system security audit and control. Certified by the American National Standards Institute, the CISA accreditation requires that candidates pass an exhaustive test given by the ISACA professional association. Progent offers the expertise of a CISA-Premier security audit engineer able to help businesses in the areas of information systems audit process, IT governance, network assets and architecture lifecycle, information technology service delivery, protecting data assets, and disaster recovery preparedness. Get additional information about Progent's Certified Information Systems Auditor (CISA) Support Services.

• CRISC-certified IT Risk Management Specialists
  The Certified in Risk and Information Systems Control (CRISC) program was initiated by ISACA in 2010 to verify a consultant's skills to design, deploy, and support information system control mechanisms to mitigate risk. Progent can provide the services of a CRISC-certified consultant to assist your company to create and execute a workplace continuity plan based on leading practices promoted by CRISC and crafted to match your organization's risk appetite, business objectives, and budgetary guidelines. Progent's network risk mitigation expertise is complementary to the services provided by Progent's CISA-Certified consultants for impartially assessing your IS control mechanisms and also with the expertise of Progent's CISM-certified consultants for defining security policies. Learn additional details about Progent's CRISC-certified Risk Management Services.

• Global Information Assurance Certification Consulting Expertise
  Global Information Assurance Certification was founded in 1999 to certify the knowledge of IT security professionals. GIAC's mission is to assure that a certified security consultant possesses the knowledge needed to deliver services in key categories of network, information, and software security. GIAC accreditations are acknowledged by companies and institutions throughout the world including and the United States National Security Agency (NSA). Progent can provide the help of GIAC certified security engineers for all of the network security capabilities addressed within GIAC accreditation programs including auditing perimeters, security incident handling, traffic analysis, and web services security. Read the details about Progent's Global Information Assurance Certification Support Services.