Computer Security and Compliance Consulting

Introduction to Progent's Security and Compliance Consulting Services
Progent's industry certified network security and compliance experts can provide a broad selection of support services designed to help organizations of any size to identify and correct security weaknesses, defend against malicious attacks, remediate any issues resulting from a breakdown of protection, and meet government requirements for guarding information and reporting incidents. Progent can provide advanced guidance for key security and recovery solutions like AI-driven EDR (End Point Protection and Response), MDR (Managed Detection and Response), complete system restoration validation and testing, immutable backup, and off-premises backup.

Progent can provide a selection of service delivery modes:

• On-demand remote and on-site support billed by the minute
• On-going fully managed services invoiced at an affordable flat monthly rate
• Set-price service packages for a single security assessment
• Emergency ransomware recovery. Progent will submit a bid based on an evaluation of the damage.
  (If your system has been victimized by any strain of crypto-ransomware, do not panic. Get fast assistance by calling Progent's 24x7 Ransomware Hot Line at 800-462-8800.)

Delivery alternatives for Progent's as-needed support services include:

• Online Security Support Services
  The majority security-related problems can be resolved remotely via a mix of phone-based support and an Internet connection between Progent's Technical Response Center (TRC) and a client's network. Progent's Technical Response Center can provide online security help by offering efficient access to consultants with the experience and technical resources to fix many of the most difficult issues quickly, making your service costs affordable and reducing downtime.
• Onsite Security Support
  For cases where on-premises assistance is necessary, Progent can send a technical expert to major metropolitan areas across the U.S. Progent can also send a security consultant with high-level certifications and world-class skills to any site in the U.S.

ProSight Fixed-price Managed Services for Information Assurance
Progent's affordable ProSight series of managed services is intended to provide small and mid-size businesses with enterprise-class support and state-of-the-art technology for all aspects of information assurance and compliance. ProSight managed services offered by Progent include:

• ProSight Active Security Monitoring: Endpoint Protection and Ransomware Recovery
  ProSight Active Security Monitoring (ASM) is an endpoint protection service that utilizes SentinelOne's next generation behavior-based machine learning tools to guard endpoints as well as physical and virtual servers against modern malware attacks such as ransomware and file-less exploits, which easily evade legacy signature-matching AV products. ProSight Active Security Monitoring protects local and cloud resources and offers a single platform to automate the entire malware attack lifecycle including protection, detection, mitigation, cleanup, and post-attack forensics. Top capabilities include one-click rollback using Windows Volume Shadow Copy Service (VSS) and real-time system-wide immunization against new attacks. Progent is a SentinelOne Partner, dealer, and integrator. Learn more about Progent's ProSight Active Security Monitoring endpoint protection and ransomware recovery based on SentinelOne technology.

• ProSight Reporting: Real-time and In-depth Reporting for Ticketing and Network Monitoring Platforms
  ProSight Reporting is a growing family of in-depth management reporting utilities created to work with the leading ticketing and network monitoring programs such as ConnectWise Manage, ConnectWise Automate, Customer Thermometer, Auvik, and SentinelOne. ProSight Reporting incorporates Microsoft Graph and utilizes color coding to highlight and contextualize critical issues such as spotty support follow-up or machines with missing patches. By exposing ticketing or network health problems clearly and in near-real time, ProSight Reporting improves network value, reduces management overhead, and saves money. For details, visit ProSight Reporting for ticketing and network monitoring platforms.

• ProSight Enhanced Security Protection: Unified Physical and Virtual Endpoint Security
  ProSight Enhanced Security Protection (ESP) services offer affordable multi-layer protection for physical servers and VMs, workstations, smartphones, and Exchange email. ProSight ESP utilizes adaptive security and advanced heuristics for round-the-clock monitoring and reacting to security assaults from all vectors. ProSight ESP offers firewall protection, intrusion alerts, endpoint management, and web filtering via cutting-edge technologies packaged within one agent accessible from a unified control. Progent's security and virtualization experts can help you to plan and implement a ProSight ESP deployment that addresses your company's specific requirements and that helps you achieve and demonstrate compliance with government and industry data security regulations. Progent will assist you specify and configure security policies that ProSight ESP will enforce, and Progent will monitor your network and react to alerts that call for immediate attention. Progent's consultants can also help you to install and test a backup and restore system like ProSight Data Protection Services so you can get back in business quickly from a destructive cyber attack such as ransomware. Read more about Progent's ProSight Enhanced Security Protection unified endpoint protection and Microsoft Exchange filtering.

• ProSight DPS: Managed Backup
  ProSight Data Protection Services provide small and medium-sized businesses a low cost and fully managed solution for reliable backup/disaster recovery. For a fixed monthly rate, ProSight Data Protection Services automates your backup processes and enables fast recovery of vital files, apps and VMs that have become lost or damaged as a result of component breakdowns, software bugs, disasters, human mistakes, or malware attacks like ransomware. ProSight Data Protection Services can help you protect, retrieve and restore files, folders, applications, system images, as well as Hyper-V and VMware images. Important data can be protected on the cloud, to a local storage device, or mirrored to both. Progent's cloud backup specialists can deliver advanced support to set up ProSight DPS to be compliant with government and industry regulatory standards like HIPAA, FIRPA, and PCI and, whenever needed, can help you to restore your business-critical data. Read more about ProSight Data Protection Services Managed Backup.

• ProSight Email Guard: Spam Filtering, Data Leakage Protection and Content Filtering
  ProSight Email Guard is Progent's email filtering and encryption solution that incorporates the services and infrastructure of top information security companies to provide centralized management and comprehensive protection for all your inbound and outbound email. The powerful architecture of Email Guard combines a Cloud Protection Layer with an on-premises gateway appliance to offer advanced protection against spam, viruses, Denial of Service Attacks, Directory Harvest Attacks, and other email-based malware. Email Guard's Cloud Protection Layer serves as a preliminary barricade and blocks most threats from making it to your security perimeter. This decreases your vulnerability to external threats and saves network bandwidth and storage space. Email Guard's onsite security gateway appliance provides a further layer of inspection for inbound email. For outgoing email, the local security gateway provides anti-virus and anti-spam filtering, DLP, and email encryption. The onsite gateway can also help Exchange Server to track and safeguard internal email traffic that stays inside your security perimeter. Find out more about Progent's ProSight Email Guard spam filtering, virus defense, email content filtering and data leakage prevention.

• ProSight Duo MFA: Two-Factor Identity Authentication
  ProSight Duo MFA is a selection of managed service plans incorporating industry-leading cybersecurity technology from Duo, a Cisco company, to create two-factor authentication (2FA) solutions. 2FA uses an outside-channel endpoint to validate identity, offering an additional layer of protection beyond just passwords. This counters the most common causes of IT security breaches like social engineering, brute-force password guessing, and burglarized credentials. Duo's push capability can save time and minimize annoyance by permitting users anywhere to verify their identity simply by tapping "Approve" on the authentication prompt on their personal device, which can be a phone, a smart watch, or other compatible endpoint. This one-tap process avoids the requirement to find an email or text and manually copy a security passcode. Find out more about Progent's ProSight Duo MFA multi-factor identity authentication services.

• ProSight WAN Watch: Network Infrastructure Remote Monitoring and Management
  ProSight WAN Watch is a network infrastructure management service that makes it simple and affordable for small and mid-sized organizations to diagram, monitor, reconfigure and debug their connectivity appliances like routers and switches, firewalls, and load balancers as well as servers, printers, endpoints and other devices. Incorporating cutting-edge Remote Monitoring and Management technology, WAN Watch ensures that network maps are kept updated, captures and manages the configuration information of almost all devices on your network, tracks performance, and generates notices when problems are discovered. By automating tedious management and troubleshooting processes, ProSight WAN Watch can knock hours off common tasks like network mapping, reconfiguring your network, finding devices that need important software patches, or identifying the cause of performance issues. Learn more details about ProSight WAN Watch network infrastructure management services.

• ProSight LAN Watch: Server and Desktop Remote Monitoring and Management
  ProSight LAN Watch is Progent's server and desktop monitoring service that incorporates advanced remote monitoring and management technology to keep your network operating efficiently by checking the state of vital assets that power your information system. When ProSight LAN Watch detects a problem, an alarm is transmitted automatically to your designated IT personnel and your Progent consultant so that any looming issues can be addressed before they can impact productivity Find out more details about ProSight LAN Watch server and desktop monitoring consulting.

• ProSight Virtual Hosting: Hosted VMs at Progent's Tier III Data Center
  With ProSight Virtual Hosting service, a small business can have its critical servers and apps hosted in a protected fault tolerant data center on a fast virtual host set up and maintained by Progent's IT support experts. With the ProSight Virtual Hosting service model, the customer owns the data, the OS platforms, and the apps. Since the environment is virtualized, it can be ported easily to a different hardware solution without a lengthy and difficult reinstallation procedure. With ProSight Virtual Hosting, your business is not tied a single hosting provider. Find out more about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Infrastructure Documentation Management
  Progent's ProSight IT Asset Management service is a cloud-based IT documentation management service that allows you to create, update, retrieve and safeguard data related to your network infrastructure, processes, applications, and services. You can quickly find passwords or IP addresses and be warned automatically about impending expirations of SSLs or warranties. By updating and managing your IT infrastructure documentation, you can save up to half of time spent trying to find critical information about your network. ProSight IT Asset Management features a centralized location for holding and collaborating on all documents required for managing your business network such as standard operating procedures (SOPs) and How-To's. ProSight IT Asset Management also supports advanced automation for collecting and associating IT information. Whether you're planning enhancements, performing regular maintenance, or responding to a crisis, ProSight IT Asset Management delivers the knowledge you need when you need it. Learn more about Progent's ProSight IT Asset Management service.

Progent's ProSight Ransomware Preparedness Report
The ProSight Ransomware Preparedness Report service is a low-cost service centered on a phone discussion with a Progent backup/recovery consultant. The fact-finding interview is intended to evaluate your company's preparedness to block or recover rapidly following an attack by a ransomware variant such as Ryuk, WannaCry, NotPetya, or Hermes. Progent will work with you personally to collect information about your existing security profile and backup platform, and Progent will then produce a written Basic Security and Best Practices Report describing how you can follow best practices to create a cost-effective AV and backup/recovery environment that meets your business requirements. For additional information, visit The ProSight Ransomware Preparedness Report Service.

Fixed-price Security Assessment and Validation Bundles
Progent offers a variety of fixed-price security assessment packages that deliver exceptional value by utilizing Progent's advanced network monitoring and analysis tools plus Progent's technical skills to create an objective and comprehensive assessment of your network security profile.

• Security Inventory Service Bundles for Small Businesses
  Progent offers two ultra-affordable security inventory service packages intended to enable small businesses to obtain a professional security evaluation from a certified security engineer. With Progent's External Security Inventory Scan, an engineer manages a comprehensive assessment of your network from beyond your firewalled perimeter to determine potential gaps in the security posture you expose to the outside world. With Progent's Internal Security Inventory Scan, a security expert executes a system scan using an authorized computer within your corporate firewall to assess your exposure to inside threats. The two security inventory services are configured and executed from a secured offsite location. The project is managed by a consultant who has earned advanced security certifications and who produces a report that details and interprets the data captured by the scan and suggests various enhancements where appropriate.
• Security Vulnerability Assessment Bundles for Large Businesses
  Progent has developed three levels of flat-rate security evaluation service bundles intended for large organizations who want to meet security standards required by state or industry agencies. Progent's security assessment service bundles offer larger organizations a chance to get an objective look at the strength of their security posture. For each security assessment bundle, Progent engineers with advanced security credentials analyze and report on captured data and offer suggestions for cost-effective remediation. Each of the network security audit bundles include an extra-cost option for onsite engineers anywhere in the U.S.
• Support for Horizon3.ai's NodeZero Pentest Platform
  NodeZero from Horizon3.ai is a cutting-edge penetration test (pentest) product family that supports continuous, concurrent, automated assessment of your internal and perimeter network so you can find, prioritize, remediate, and confirm security vulnerabilities before malicious hackers can take advantage of them. Progent can provide the expertise of a NodeZero Certified Operator (NCO) who can help you to deploy NodeZero to perform comprehensive penetration tests of your network perimeter and your internal network so you can determine your current security posture. Progent's NodeZero experts can also help you to strengthen your network security and can assist you to design and deploy a cohesive cybersecurity strategy that simplifies management and provides maximum protection for on-premises, cloud-based, and perimeter IT assets. To find out additional information about Progent's vulnerability analysis services based on on NodeZero's pentest platform, visit Consulting Services for NodeZero's Penetration Test Platform.
• Stealth Penetration Testing
  Stealth penetration testing, commonly called PEN testing, is an accepted tool for allowing businesses to determine how open their IT environments are to current-generation attacks. Progent's stealth penetration testing test how effectively your existing security procedures and technologies stand up to authorized but unannounced penetration attempts launched by Progent's experienced security experts using cutting-edge hacking methods. Read about Progent's stealth penetration testing (PEN Test) services.

Our Network Has Been Hacked: What Are We Supposed to Do Now?
If your company is now faced with a security emergency and you have not prepared a detailed recovery procedure, refer to Progent's Online Technical Help to find out how to receive immediate assistance. Progent provides remote assistance from experienced network technicians and can refer problems to high-level security specialists if required. Your business does not have to be a registered Progent customer to get emergency support for a security breakdown, but you can sign up as a Progent client in advance for free and your status as a registered client can save valuable time in a crisis.

Typically, smaller organizations have not documented a recovery procedure in case of a damaging penetration. This is not good, since the cost of a successful security assault can be even more catastrophic for a small business than for a large corporation. Progent's security specialists can assist your you to design a sensible recovery and incident reporting plan that reduces the IT system disruption resulting from an attack. The formal incident response model outlined by Global Information Assurance Certification is Progent's recommended method for responding to a serious security incident.

High-value Security Services Available from Progent
Progent's certified security engineers offer expertise in vital facets of computer protection including:

• Information Risk Audits and Compliance Assessment
  Progent provides experience with information risk auditing tools like Microsoft Baseline Security Analyzer and LANguard for performing a set of automatic network tests to uncover potential security problems. Progent has extensive skills with these tools and can help you to understand assessment results and react efficiently. Progent's security consultants also can perform web software testing and can conduct expert evaluation of enterprise-wide security to determine your organization's compliance with major worldwide security specifications such as FISMA, PCI, and ISO. Also, Progent can evaluate the effectiveness of your wireless protection covering stationary wireless equipment as well as portable handsets. Read additional information about Progent's Information Risk Audits and Compliance Testing.
• Designing, Implementing, and Testing Protected Networks
  Any company should develop a carefully considered security plan that includes both preventive and responsive activity. The proactive plan is a collection of steps that helps to minimize vulnerabilities. The post-attack strategy specifies procedures to help IT staff to assess the losses caused by a breach, repair the damage, document the experience, and restore network functions as quickly as feasible. Progent can show you how to design protection into your business processes, install scanning utilities, define and implement a safe computer infrastructure, and recommend processes and policies to maximize the safety of your network. Progent's security experts are available to assist you to set up a firewall, deploy secure remote access to e-mail and data, and install an efficient virtual private network. If you are looking for an economical way for outsourcing your security management, Progent's 24x7 Network Support Services feature continual online system tracking and quick response to emergencies.
• System Recovery and Failure Analysis
  Progent has expertise in recovering systems and servers that have been compromised, are suspect, or have stopped working following a security breakdown. Progent can help determine the damage resulting from the attack, return your company to normal business operations, and recover data compromised as a result of the attack. Progent's security specialists can also perform a comprehensive forensic analysis by going over event logs and using a variety of proven forensics tools. Progent's experience with security problems minimizes your downtime and permits Progent to propose efficient strategies to avoid or mitigate future assaults.
• Cisco ASA 5500-X Firewalls with Firepower, ASA 5500 Firewalls, and PIX 500 Firewalls Integration and Troubleshooting
  The new Cisco ASA 5500-X Family Next-Generation Firewalls with Firepower Services offer substantially more bang for the buck than Cisco's earlier firewalls and have superseded the ASA 5500 and PIX firewalls for new installations. Since Cisco's acquisition of Sourcefire, the entire line of ASA 5500-X firewalls can be configured to enable Firepower Services, built on Sourcefire's Snort product, which is the world's most popular network intrusion protection system (IPS). Firepower services provide enhanced features including advanced malware protection (AMP), URL filtering, real-time threat analytics, and security automation. Progent's Cisco-certified CCIE network consultants can assist you to manage your legacy PIX or ASA 5500 security appliances and migrate efficiently to ASA 5500-X firewalls with Firepower Services. Progent's consultants offer online and onsite support for ASA 5500-X firewalls with Firepower Services and can help your organization to design, configure, optimize, administer and debug firewall environments based around Cisco ASA 5500-X firewalls with Firepower Services. Learn additional details about ASA Firewalls with Firepower Services configuration and troubleshooting support.
• Other Firewall and Virtual Private Network (VPN) Solutions Provided by Progent
  In addition to offering support for a wide range of network security technologies from Microsoft and Cisco, Progent can provide small companies top-tier engineering services for security products from other important firewall and Virtual Private Network suppliers by offering services such as:
  • Palo Alto Networks technical assistance
    
  • Check Point Software Technologies Ltd engineering services
  • WatchGuard Technologies Inc support
  • Juniper engineering services
  • SonicWall help
  • Fortinet FortiGate Firewall engineering services
    
  • Symantec integration expertise
  • Barracuda CloudGen Firewall Consultants
• SIEM Security Information and Event Management Integration and Support
  Security information and event management (SIEM) software and services are designed to make sense the massive quantity of data collected in security event records generated by multiple sources including network infrastructure appliances, operating systems, and application software and monitoring tools. SIEM applications analyzes the security event records from these various sources and creates summary reports of security incidents as mandated by state regulations and business compliance standards. Progent's GIAC-certified computer security experts and Cisco-certified network infrastructure experts can help businesses to plan, install and manage a SIEM solution that enables them to see the behavior of attacks and comply with security incident reporting regulations. (Visit Progent's SIEM solutions.)
• Patch Management Solutions
  Patch management includes applying software updates to operating systems and applications, physical and virtual servers and endpoints, peripherals like printers, network appliances such as routers and wireless APs, and Internet-of-Things devices such as sensors and health monitors. Prompt and correctly managed patching maximizes cybersecurity, regulatory compliance, availability, and capability. Haphazard patch management can result in security gaps, compatibility problems, sluggish or inconsistent responsiveness, needless downtime, or unavailability of key functions. Progent's support services for patch management provide businesses of any size a flexible and cost-effective alternative for assessing, validating, scheduling, applying, and documenting software and firmware updates to your dynamic information system. (Visit Progent's patch management service plans.)

• CISM Security Support Expertise
  Certified Information Security Manager identifies the core skills and worldwide standards of service that information technology security professionals are required to master. It offers business management the assurance that those who have earned their accreditation have the experience and knowledge to provide effective security administration and engineering support. Progent can offer a CISM consultant to help your enterprise in key security disciplines such as data protection governance, vulnerability management, data security program control, and crisis response support. Find out more details about Progent's Certified Information Security Manager (CISM) Security Support Assistance.

• CISSP Security Support Services
  Progent's Certified Information Systems Security Professionals (CISSPs) are security specialists who have been awarded CISSP accreditation through demonstrated professional work, extensive study, and exhaustive testing. CISSP Certification indicates mastery of a worldwide standard for information security. ANSI has given the CISSP credential accreditation in the field of IT security under ISO/IEC 17024. Areas of expertise included within CISSP include security management procedures, security architecture and models, access control methodology, software development security, operations security, hardware security, cryptography, telecommunications, network security, and business continuity planning. Read more information concerning Progent's Certified Information Systems Security Professionals (CISSP) Support Services.

• CISSP-ISSAP Cybersecurity Architecture Consulting Expertise
  Progent's CISSP-ISSAP Certified cybersecurity architecture experts have been awarded ISSAP status following rigorous examination and significant experience. field experience with network security design. ISSAP security experts possess comprehensive knowledge of access management mechanisms and methodologies, phone system and network protection, cryptography, needs evaluation, business continuity and disaster recovery, and physical security integration. Progent's CISSP-ISSAP-premier security experts can assist your business with all aspects of architecture security. Learn additional details concerning Progent's ISSAP Accredited Secure IT Infrastructure Consulting Support.

• Certified Information Systems Auditor Professional Expertise
  The CISA accreditation is a recognized achievement that indicates mastery in network security audit and control. Certified by the American National Standards Institute (ANSI), the CISA accreditation requires that candidates pass an exhaustive examination administered by the ISACA international professional association. Progent can provide the expertise of a CISA-Premier security audit professional trained to assist businesses in the fields of IS audit services, IT governance, network assets and infrastructure lifecycle, IT support, protecting information assets, and business continuity planning. Read additional details about Progent's Certified Information Systems Auditor Consulting Services.

• CRISC-certified Risk Mitigation Consultants
  The CRISC certification program was initiated by ISACA to verify a consultant's ability to design, deploy, and support information system controls to mitigate network risk. Progent can provide the services of a CRISC-certified engineer to help your company to develop and carry out a business continuity plan based on industry best practices identified by CRISC and geared to match your company's risk tolerance, business goals, and IT budget. Progent's risk mitigation services are a good fit the services available from Progent's CISA-Premier consultants for impartially auditing your IT control mechanisms and with the expertise of Progent's CISM-certified experts for implementing security policies and procedures. Get more information concerning Progent's CRISC Network Risk Management Support.

• GIAC (Global Information Assurance Certification) Support Services
  GIAC (Global Information Assurance Certification) was established in 1999 to validate the skill of computer security engineers. GIAC's mission is to assure that a certified security consultant possesses the knowledge necessary to provide support in important areas of network, information, and application security. GIAC accreditations are acknowledged by companies and government organizations all over the world including and the U.S. NSA. Progent can provide the expertise of certified consultants for all of the network security services covered under GIAC accreditation programs including assessing networks, security incident handling, intrusion detection, and web application security. Learn more details about Progent's GIAC (Global Information Assurance Certification) Professional Services.