Data Security and Compliance Consulting

Overview of Progent's Security and Compliance Consulting Services
Progent's industry certified network security and compliance experts can provide a broad range of support services designed to assist businesses of all sizes to detect and correct security weaknesses, block assaults, remediate any issues resulting from a breach of security, and comply with government requirements for protecting data and reporting incidents. Progent can deliver world-class help for critical cybersecurity and restoration technologies like AI-driven EDR (End Point Protection and Response), Managed Detection and Response, complete system restore validation and testing, immutable backup, and off-premises backup.

Progent offers a selection of service delivery models:

• On-demand remote and on-premises support invoiced to the nearest minute
• On-going managed services invoiced at an affordable fixed monthly fee
• Value-priced service bundles for a single security and compliance evaluation
• Emergency ransomware recovery. Progent will submit a bid based on an evaluation of the damage.
  (If your system has been penetrated by any version of crypto-ransomware, don't panic. Get fast assistance by calling Progent's 24x7 Ransomware Hot Line at 800-462-8800.)

Delivery alternatives for Progent's as-needed support include:

• Remote Security Services
  The majority security issues can be handled remotely through a mix of phone support and an Internet connection between Progent's Technical Response Center (TRC) and a client's network. Progent's TRC group can deliver online security support by offering easy access to consultants with the experience and technical resources to fix many of the most challenging issues quickly, making your service expenses low and reducing downtime.
• Onsite Security Services
  For instances where on-premises support is necessary, Progent can dispatch a technical expert to major cities across the United States. Progent can also dispatch a security specialist with top certifications and advanced skills to any site in the U.S.

ProSight Fixed-price Managed Services for Information Assurance
Progent's low-cost ProSight portfolio of managed services is intended to provide small and mid-size organizations with enterprise-class support and state-of-the-art technology for all facets of information assurance. Managed services available from Progent include:

• ProSight Active Security Monitoring: Endpoint Protection and Ransomware Recovery
  ProSight Active Security Monitoring (ASM) is an endpoint protection service that utilizes SentinelOne's cutting edge behavior analysis tools to defend endpoints and servers and VMs against new malware attacks such as ransomware and file-less exploits, which easily escape legacy signature-based AV tools. ProSight ASM safeguards local and cloud resources and offers a unified platform to manage the complete threat progression including filtering, infiltration detection, containment, remediation, and post-attack forensics. Key capabilities include one-click rollback with Windows Volume Shadow Copy Service and automatic system-wide immunization against new attacks. Progent is a SentinelOne Partner, dealer, and integrator. Learn more about Progent's ProSight Active Security Monitoring endpoint protection and ransomware recovery powered by SentinelOne technology.

• ProSight Reporting: Real-time Reporting for Ticketing and Network Monitoring Platforms
  ProSight Reporting is an expanding line of real-time management reporting plug-ins designed to integrate with the top ticketing and remote network monitoring programs including ConnectWise Manage, ConnectWise Automate, Customer Thermometer, Auvik, and SentinelOne. ProSight Reporting uses Microsoft Graph and features color coding to surface and contextualize key issues such as inconsistent support follow-through or endpoints with missing patches. By exposing ticketing or network health concerns clearly and in near-real time, ProSight Reporting improves network value, lowers management overhead, and saves money. For details, see ProSight Reporting for ticketing and network monitoring applications.

• ProSight Enhanced Security Protection (ESP): Unified Physical and Virtual Endpoint Protection
  Progent's ProSight Enhanced Security Protection managed services deliver ultra-affordable in-depth protection for physical and virtual servers, workstations, smartphones, and Microsoft Exchange. ProSight ESP utilizes contextual security and modern behavior analysis for continuously monitoring and reacting to security threats from all vectors. ProSight ESP delivers firewall protection, intrusion alarms, endpoint control, and web filtering via leading-edge tools incorporated within a single agent managed from a single control. Progent's data protection and virtualization experts can assist your business to plan and implement a ProSight ESP environment that addresses your organization's specific requirements and that allows you prove compliance with government and industry data security regulations. Progent will assist you define and configure security policies that ProSight ESP will manage, and Progent will monitor your network and respond to alarms that call for urgent action. Progent's consultants can also help you to install and test a backup and disaster recovery system like ProSight Data Protection Services (DPS) so you can get back in business rapidly from a destructive cyber attack like ransomware. Read more about Progent's ProSight Enhanced Security Protection (ESP) unified endpoint protection and Microsoft Exchange email filtering.

• ProSight Data Protection Services: Managed Cloud Backup and Recovery
  ProSight Data Protection Services offer small and medium-sized organizations a low cost end-to-end solution for secure backup/disaster recovery. For a fixed monthly price, ProSight Data Protection Services automates and monitors your backup processes and allows rapid recovery of critical files, applications and VMs that have become lost or corrupted due to hardware failures, software glitches, natural disasters, human mistakes, or malicious attacks like ransomware. ProSight DPS can help you back up, retrieve and restore files, folders, applications, system images, as well as Microsoft Hyper-V and VMware virtual machine images. Important data can be backed up on the cloud, to an on-pr1mises storage device, or mirrored to both. Progent's BDR specialists can deliver advanced expertise to set up ProSight DPS to to comply with regulatory requirements such as HIPAA, FINRA, PCI and Safe Harbor and, whenever needed, can help you to restore your business-critical information. Find out more about ProSight Data Protection Services Managed Backup and Recovery.

• ProSight Email Guard: Spam Filtering, Data Leakage Protection and Email Encryption
  ProSight Email Guard is Progent's email security platform that uses the services and infrastructure of leading data security companies to deliver centralized management and world-class security for all your inbound and outbound email. The powerful structure of Progent's Email Guard managed service integrates a Cloud Protection Layer with a local security gateway device to provide complete defense against spam, viruses, Denial of Service (DoS) Attacks, Directory Harvest Attacks (DHAs), and other email-borne threats. Email Guard's cloud filter serves as a preliminary barricade and blocks most unwanted email from reaching your security perimeter. This reduces your vulnerability to external attacks and conserves network bandwidth and storage. Email Guard's on-premises gateway device provides a deeper level of analysis for inbound email. For outgoing email, the on-premises security gateway provides anti-virus and anti-spam protection, protection against data leaks, and email encryption. The onsite security gateway can also help Microsoft Exchange Server to monitor and protect internal email traffic that stays inside your security perimeter. Learn more about Progent's ProSight Email Guard spam filtering, virus blocking, email content filtering and data loss protection.

• ProSight Duo MFA: Two-Factor Authentication
  ProSight Duo MFA is a selection of managed service plans incorporating industry-leading technology developed by Duo, a Cisco-owned company, to create two-factor authentication environments. 2FA uses an outside-channel endpoint to confirm identity, providing a second layer of access security over and above just passwords. This counters the majority of network security breaches like social engineering, brute-force password attacks, and purloined credentials. Duo's push technology can avoid wasted time and reduce annoyance by allowing users to verify their identity simply by tapping "Approve" on the authentication box on their own personal device, which can be an Android or iOS smartphone, a smart watch, or other compatible out-of-band endpoint. This one-tap procedure avoids the requirement to open an email or text message and transcribe a security passcode. Find out more about Progent's ProSight Duo MFA two-factor identity authentication service plans.

• ProSight WAN Watch: Network Infrastructure Management
  ProSight WAN Watch is an infrastructure management service that makes it simple and inexpensive for smaller businesses to map out, monitor, optimize and debug their connectivity appliances such as switches, firewalls, and access points as well as servers, printers, client computers and other devices. Using state-of-the-art RMM technology, ProSight WAN Watch ensures that network diagrams are always current, copies and displays the configuration of virtually all devices connected to your network, monitors performance, and sends alerts when potential issues are detected. By automating complex management and troubleshooting activities, ProSight WAN Watch can knock hours off common chores such as network mapping, reconfiguring your network, finding devices that require critical updates, or isolating performance bottlenecks. Learn more about ProSight WAN Watch network infrastructure monitoring and management services.

• ProSight LAN Watch: Server and Desktop Monitoring and Management
  ProSight LAN Watch is Progent's server and desktop remote monitoring service that uses state-of-the-art remote monitoring and management techniques to keep your IT system operating at peak levels by checking the state of critical assets that power your information system. When ProSight LAN Watch uncovers a problem, an alarm is sent automatically to your designated IT personnel and your assigned Progent consultant so all potential problems can be addressed before they have a chance to disrupt your network Find out more details about ProSight LAN Watch server and desktop monitoring services.

• ProSight Virtual Hosting: Hosted VMs at Progent's Tier III Data Center
  With Progent's ProSight Virtual Hosting service, a small organization can have its critical servers and apps hosted in a protected Tier III data center on a fast virtual machine host set up and maintained by Progent's network support professionals. Under Progent's ProSight Virtual Hosting service model, the client owns the data, the operating system software, and the applications. Since the system is virtualized, it can be moved easily to an alternate hosting environment without requiring a lengthy and technically risky reinstallation process. With ProSight Virtual Hosting, your business is not tied a single hosting provider. Learn more details about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Documentation Management
  Progent's ProSight IT Asset Management service is a cloud-based IT documentation management service that allows you to capture, maintain, retrieve and safeguard data related to your IT infrastructure, procedures, applications, and services. You can quickly locate passwords or serial numbers and be warned automatically about impending expirations of SSL certificates or warranties. By cleaning up and organizing your IT documentation, you can save as much as half of time spent looking for critical information about your IT network. ProSight IT Asset Management includes a common location for storing and collaborating on all documents related to managing your network infrastructure such as standard operating procedures and self-service instructions. ProSight IT Asset Management also supports advanced automation for collecting and associating IT information. Whether you're planning improvements, performing maintenance, or reacting to an emergency, ProSight IT Asset Management gets you the data you need as soon as you need it. Find out more about ProSight IT Asset Management service.

Progent's ProSight Ransomware Preparedness Report Service
Progent's ProSight Ransomware Preparedness Report is a low-cost service built around a brief phone discussion with a Progent information assurance consultant. The interview is designed to assess your organization's preparedness either to stop or recover rapidly following an assault by a ransomware strain such as Ryuk, WannaCry, MongoLock, or Hermes. Progent will consult with you directly to gather information concerning your current AV defense and backup platform, and Progent will then produce a written Basic Security and Best Practices Report document describing how you can apply industry best practices to create a cost-effective AV and backup/recovery system that meets your business requirements. For more information, refer to Progent's ProSight Ransomware Preparedness Report.

Flat-rate Security Evaluation and Validation Packages
Progent has put together a number of fixed-price security evaluation packages that deliver high value by deploying Progent's enterprise-class system monitoring tools plus Progent's consulting experience to create an unbiased and thorough evaluation of your IT environment security profile.

• Security Assessment Service Packages for Small Organizations
  Progent offers two value-priced security inventory scanning packages intended to enable small businesses to obtain an objective security evaluation from a certified security engineer. With Progent's External Security Inventory Scan, an engineer administers an extensive assessment of your network from beyond your firewalled perimeter to identify potential gaps in the security posture you expose to the outside world. With Progent's Internal Security Inventory Scan, a certified security expert executes a system scan using an authorized machine inside your firewalled perimeter to evaluate your vulnerability to inside threats. The two security inventory scanning services are configured and run from a secured offsite location. The project is managed by an engineer who has been awarded high-level security certifications and who produces a report that details and interprets the information collected by the scan and suggests various improvements where required.
• Security Vulnerability Evaluation Packages for Large Organizations
  Progent has developed three levels of fixed-price security assessment service bundles intended for large organizations who want to meet security standards required by state or industry agencies. Progent's security assessment service packages offer enterprises a chance to obtain a professional look at the viability of their security posture. For each security evaluation package, Progent engineers with advanced security credentials analyze and report on captured data and offer recommendations for efficient improvements. All the network security audit bundles include an extra-cost option for onsite consultants anywhere in the U.S.
• Consulting Services for Horizon3.ai's NodeZero Pentest Solutions
  NodeZero from Horizon3.ai is a leading-edge penetration test (pentest) platform that can deliver repeated, concurrent, programmable assessment of your internal and perimeter network to help you uncover, rank, remediate, and verify cybersecurity vulnerabilities before malicious hackers can exploit them. Progent offers the support of a NodeZero Certified Operator who can help you to use NodeZero to carry out thorough penetration tests of your perimeter and your internal network so you can determine your current security profile. Progent's NodeZero experts can also assist you to harden your network security and can help you to plan and deploy a unified cybersecurity strategy that streamlines management and delivers maximum protection for on-premises, multi-cloud, and perimeter IT resources. To find out more information about Progent's threat assessment solutions based on on NodeZero's PEN test products, refer to Consulting Support for NodeZero's Penetration Test Platform.
• Stealth Penetration Testing Services
  Stealth penetration testing, often called PEN testing, is a critical tool for allowing organizations to determine how vulnerable their IT systems are to current-generation threats. Progent's stealth penetration testing test how well your corporate security procedures and platforms resist authorized but unannounced intrusion attempts managed by Progent's certified security specialists using cutting-edge hacking techniques. Find out about Progent's stealth penetration testing services.

Our Network Has Been Hacked: What Should We Do Now?
If your company is now experiencing a network security crisis and you have no formal recovery plan, go to Progent's Online Technical Support to learn how to receive fast assistance. Progent offers remote help from experienced network technicians and can escalate problems to certified security experts if required. Your business does not need to be a current Progent client to receive urgent support for a security breakdown, but you can sign up as a Progent customer in advance for free and your status as a current customer could save precious time when there is a crisis.

Typically, smaller organizations have not documented a recovery plan in the event of a damaging security breach. This is risky, since the cost of a successful security attack can be more devastating for a small company than for a big corporation. Progent's security engineers can assist your company to create a sensible response and event reporting procedure that minimizes the network disruption following an attack. The step-by-step post-attack response procedure outlined by Global Information Assurance Certification is Progent's suggested procedure for responding to a major security penetration.

Advanced Security Services Offered by Progent
Progent's veteran engineers offer consulting support in key areas of IT compliance such as:

• Security Vulnerability Audits and Security Compliance Testing
  Progent provides expertise with information risk auditing utilities like MS Baseline Security Analyzer and LANguard from GFI for conducting a variety of comprehensive network tests to identify possible security gaps. Progent has extensive experience with monitoring utilities and can help you to analyze audit results and respond efficiently. Progent's security engineers also offer web application validation and can perform thorough evaluation of corporate-wide security to validate your company's compliance with key global security standards such as HIPAA, PCI, and ISO. In addition, Progent can evaluate the strength of your wireless protection including fixed wireless appliances as well as portable devices. Learn additional details concerning Progent's Information Risk Evaluation and Security Compliance Testing.
• Planning, Implementing, and Validating Protected Networks
  Every business ought to develop a carefully thought out security plan that includes both preventive and reactive activity. The pre-attack strategy is a set of steps that works to reduce vulnerabilities. The post-attack plan specifies activities to help security staff to inventory the damage resulting from a breach, remediate the damage, document the event, and restore network functions as soon as feasible. Progent can advise you how to incorporate security into your company operations, set up auditing software, define and execute a secure computer infrastructure, and propose procedures and policies that will optimize the safety of your computing environment. Progent's security experts are available to help you to set up a firewall, design secure online and mobile connectivity to email and data, and install an efficient virtual private network (VPN). If you are interested in an affordable way for outsourcing your security management, Progent's 24x7 Monitoring Options feature automated remote server tracking and immediate response to problems.
• System Restoration and Failure Analysis
  Progent provides skill in recovering networks and devices that have been compromised, are in question, or have stopped working following a security penetration. Progent can show you how to assess the losses resulting from the assault, return your company to ordinary business operations, and recover data compromised as a result of the assault. Progent's security specialists can also perform a thorough forensic analysis by examining event logs and using a variety of advanced assessment techniques. Progent's experience with security consulting reduces your business disruption and permits Progent to recommend effective strategies to avoid or mitigate future attacks.
• Cisco ASA 5500-X Firewalls with Firepower, ASA 5500 Series Firewalls, and PIX 500 Firewalls Integration and Troubleshooting
  The latest generation of ASA 5500-X Series of firewalls with Firepower Services provide substantially more value than Cisco's legacy PIX and ASA 5500 firewalls and have replaced the ASA 5500 and PIX 500 security appliances for new installations. After Cisco's acquisition of Sourcefire, the entire family of ASA 5500-X devices can be provisioned to support Firepower Services, built on Sourcefire's Snort product, which is the market's most deployed intrusion protection system. Firepower services bring enhanced capabilities such as advanced malware protection (AMP), URL filtering, real-time threat analytics, and automation. Progent's Cisco-premier CCIE network experts can assist your company to maintain your existing PIX or ASA 5500 security appliances and upgrade efficiently to ASA 5500-X firewalls with Firepower Services. Progent's consultants can provide remote and onsite support for ASA 5500-X firewalls with Firepower Services and can assist your business to plan, integrate, optimize, administer and troubleshoot firewall environments built around Cisco ASA 5500-X firewalls with Firepower Services. Learn more details about Cisco ASA 5500-X Firewalls with Firepower integration and troubleshooting support.
• Additional Firewall and VPN Solutions Offered by Progent
  In addition to supporting a wide array of security solutions available from Microsoft and Cisco, Progent offers small businesses top-tier engineering services for solutions from other important firewall and Virtual Private Network suppliers by delivering services including:
  • Palo Alto Networks support
    
  • Check Point Software technical assistance
  • WatchGuard Technologies Inc support
  • Juniper Networks Inc technical assistance
  • SonicWall engineering services
  • Fortinet FortiGate Firewall help
    
  • Symantec engineering services
  • Barracuda CloudGen Firewall Consulting
• SIEM Security Information and Event Management Integration and Support
  Security information and event management (SIEM) applications and services are designed to interpret the enormous amounts of information represented by security event logs created by a wide range of sources such as network infrastructure appliances, servers, and applications and tools. SIEM software organizes the security logs from these various sources and produces summary reports of security events as required by state regulations and industry compliance guidelines. Progent's GIAC-certified computer security consultants and Cisco CCIE certified network infrastructure experts can assist organizations to plan, deploy and operate a SIEM system that helps them to understand the behavior of attacks and comply with security incident reporting requirements. (See Progent's Security information and Event Management solutions.)
• Software Update Management Services
  Software update management includes installing software or firmware updates to operating systems and apps, physical and virtual servers and endpoint devices, peripherals like printers, network appliances such as routers and Wi-Fi access points, and IoT devices like alarms and health monitors. Prompt and correctly managed patching maximizes cybersecurity, compliance, uptime, and capability. Sporadic software update management can cause security gaps, compatibility problems, slow or erratic responsiveness, needless downtime, or loss of key features. Progent's support services for patch management offer businesses of any size a versatile and cost-effective solution for assessing, validating, scheduling, applying, and tracking updates to your ever-evolving information network. (See Progent's software update management service plans.)

• Certified Information Security Manager (CISM) Security Support Expertise
  CISM defines the fundamental skills and worldwide standards of performance that IT security professionals are expected to master. CISM offers business management the assurance that those who have been awarded their CISM have the experience and knowledge to provide efficient security management and engineering services. Progent can provide a CISM-certified expert to assist your organization in vital security disciplines such as information protection governance, vulnerability assessment, information security program control, and incident handling support. Learn more information about Progent's CISM Security Support Expertise.

• CISSP Security Support Expertise
  Progent's Certified Information Systems Security Professionals (CISSPs) are security engineers who have been awarded CISSP certification as a result of demonstrated professional work, extensive study, and exhaustive examination. CISSP qualification indicates expertise in an international standard for IT security. ANSI has given the CISSP credential official recognition in the field of information security under ISO/IEC 17024. Fields of expertise covered under CISSP include security administration practices, security design and test systems, access permission systems, software development security, business processes security, physical security, encryption, communications, Internet security, and business continuity planning. Read additional details about Progent's CISSP Support Services.

• CISSP-ISSAP Cybersecurity Architecture Consulting Support
  Progent's CISSP-ISSAP Certified cybersecurity architecture experts have earned ISSAP accreditation after rigorous testing and substantial hands-on work with information security design. ISSAP consultants have in-depth knowledge of access management systems and methodologies, telecommunications and network security, cryptography, requirements analysis, business continuity planning (BCP) and DRP, and physical security integration. Progent's CISSP-ISSAP-certified security specialists can assist your business with all phases of architecture security. Learn additional details about Progent's ISSAP Accredited Protected System Infrastructure Consulting Services.

• Certified Information Systems Auditor Consulting Services
  The CISA accreditation is a prestigious achievement that indicates mastery in IS security auditing. Accredited by the American National Standards Institute, the CISA credential has candidates undergo an exhaustive test given by the ISACA professional association. Progent offers the services of a CISA-Premier security audit consultant trained to assist businesses in the fields of information systems audit process, information technology administration, systems and architecture planned useful life, IT service delivery, safeguarding data resources, and disaster recovery planning. Get more details concerning Progent's Certified Information Systems Auditor Consulting Assistance.

• CRISC IT Risk Mitigation Consultants
  The Certified in Risk and Information Systems Control (CRISC) program was initiated by ISACA in 2010 to validate an IT professional's skills to design, implement, and support information system controls to mitigate network risk. Progent can provide the services of a CRISC-certified engineer to assist you to develop and carry out a workplace continuity plan that follows industry best practices identified by CRISC and geared to align with your company's risk tolerance, business goals, and budgetary guidelines. Progent's network risk mitigation services are complementary to the support provided by Progent's CISA-Certified security engineers for impartially assessing your IT control mechanisms and also with the services of Progent's CISM support professionals for implementing company-wide security policies. Learn additional details concerning Progent's CRISC Risk Management Expertise.

• GIAC Support Services
  Global Information Assurance Certification was founded in 1999 to validate the knowledge of information technology security experts. GIAC's mission is to verify that a certified professional has the skills appropriate to deliver support in key areas of system, information, and software security. GIAC accreditations are recognized by companies and government organizations around the world including and the United States National Security Agency (NSA). Progent can provide the assistance of certified consultants for any of the security disciplines covered within GIAC accreditation topics including auditing IT infrastructure, incident handling, intrusion detection, and web-based services security. Learn additional information concerning Progent's GIAC Support Services.