IT Security Services

Web Protection (DNS)

Did you know that email and web are collectively used to deploy 99% of malware-based cyberattacks? ^*

Adding our Web Protection service provides an additional layer of protection between an employee and the internet by blacklisting dangerous sites & filtering out unwanted content, in the office or at home. The domain name system (DNS) works like a phone book for the internet. When your employee enters a website, the DNS servers take that input and translate it into the unique internet protocol (IP) address that lets the browser open the desired site. DNS protocols are highly vulnerable to cyberattacks. By redirecting users’ web traffic through a cloud-based, DNS security solution, businesses can finely tune and enforce web access policies, ensure regulatory compliance, and stop threats at the network’s edge.

* Cisco Annual Cybersecurity Report for 2018

Security Awareness Training

Did you know that 77% of security professionals rank Awareness Training as the most effective tactic to prevent or block ransomware? ^*

More than ever, employees are the weak link in an organization’s network security. They are frequently exposed to sophisticated phishing and ransomware attacks. Employees need to be trained and remain on their toes with security top of mind.

Find out how we can help you manage the continuing problem of social engineering and create a human firewall.

Simulated Phishing Campaigns:

StratusPointIT will create a phishing simulation to test your employee’s awareness to potentially harmful emails, from who opened, clicked, and entered credentials. We will notify the employee that the email was a test and show them the key indicators within the email to watch out for, from incorrect/mis-spelled domain names to hovering over links within the email. In addition, we will provide management with a report of the results.

Training Videos and Newsletters:

StratusPointIT will provide access to training videos and newsletters focused on numerous areas for your respective business. From CEO Fraud, Credit Card Security, GDPR, Mobile Device Security, Ransomware, Strong Passwords, PCI compliance, Safe Web Browsing, and much more.

* Cybersecurity Insiders & Bitdefender 2017 Ransomware Report

Microsoft 365 / Google Workspace Back-up and Recovery

Did you know that 74% of security professionals rank Data Back-up & Recovery is the most effective solution to respond to a successful attack? ^*

Having your Microsoft 365 and/or Google Workspace backed-up provides a multi-layered approach to security against ransomware, compliance needs such as HIPAA, & advanced recovery features. It’s a common misconception among SaaS/Cloud users that doing back-ups isn’t necessary for their data because it exists in the cloud. From human error to phishing emails or malware can cause data loss. SaaS/Cloud providers protect your data from hardware failure, software failure, natural disaster, and power outages. While StratusPointIT can help protect your data from human error and malicious acts from internal or external sources.

Key Features:

• For Microsoft 365 protect your OneDrive, Contacts, Calendar, Mail, and SharePoint Online data that goes beyond Microsoft 365’s native recovery capabilities and retention period.
• For Google Workspace protect your Mail, Contacts, Calendar, and Drives (including Team).
• Automated backups once a day that capture point-in-time snapshots of each users’ relevant app data, with the option to perform additional backups at any time.
• Unlimited storage space.
• Detailed activity log with all administrator and user action records.
• Your data is secure, easily recoverable, and protected. SOC 2 Type II audited, supports HIPAA and GDPR compliance needs, data encryption both at rest and in transit.

* Cybersecurity Insiders & Bitdefender 2017 Ransomware Report

Multi-Factor Authentication

Did you know that 81% of breaches leverage stolen and/or weak passwords? ^*

Establishing multi-factor authentication (MFA) by sending a second randomly generated pass code to your phone will secure and protect your critical data, from sensitive applications to Microsoft 365, Google Workspace, User Workstations as well as VPN and RDP connections.

Key Features:

• Protect against credential theft
• Achieve regulatory compliance
• Reduce risk of data breaches

Better Protection. Better Security. A Better Business.

* Verizon 2017 Data Breach Investigations Report 10th edition

Network Infrastructure – Scans, Firewalls, and Monitoring

When was the last time you scanned your network for vulnerabilities?

At StratusPointIT we can scan, analyze, and remediate network vulnerabilities, and improve your security. A key element of protecting your Network is ensuring you have leading business-class firewalls installed with proper security controls. We can purchase, install, and manage the firewall environment for you.

Key Features:

• Active-device monitoring and alerting
• Remote configuration and troubleshooting
• Network scans for vulnerabilities
• Firewall solutions

Advanced Endpoint Security

Did you know 76% of respondents of a recent survey who had been compromised say the attack was a new or unknown zero-day attack? *

A key element to implementing a Detection and Response service is also utilizing Next-Gen Antivirus (NGAV).  NGAV uses a combination of innovative technologies to prevent known and unknown threats.  From known malware to detecting stealthy activities whether endpoints are on or off the network by using artificial intelligence, behavioral detection, and machine learning algorithms.  NGAV uses these innovative technologies to stop rapidly evolving threats by looking at the tactics, techniques, and procedures (TTPs) used by adversaries, not just the file signature like traditional (legacy) antivirus solutions.

Endpoint Detection and Response:

Endpoint Detection and Response (EDR) is a cybersecurity solution that uses Next-Gen Antivirus (NGAV) and also detects and mitigates cyber threats by continuously monitoring endpoint devices and analyzing endpoint data in real time. This solution will provide a platform for internal IT professionals to contain, investigate and remediate compromised systems.

Managed Detection and Response:

Managed Detection and Response (MDR) combines Endpoint Detection and Response (EDR) with a 24/7/365 Security Operations Center (SOC). Though an EDR solution provides you the platform to investigate and remediate threats, it still requires human intervention. A MDR solution provides a certified team of security professionals that will provide monitoring, incident response and remediation services to help keep your business safe.

* Ponemon Institute State of Endpoint Security Risk

Security Information & Event Management (SIEM)

Did you know 75% of business decision makers and 83% of IT decision makers are concerned their organization will be the target of a cybersecurity attack in the next 6 months? *

Monitor and safeguard your data by implementing a SIEM.

SIEM combines security information management (SIM) and security event management (SEM). Security Information and Event Management (SIEM) offers real-time monitoring and analysis of events as well as tracking and logging of security data for compliance or auditing purposes.

SIEM is a type of software that is used to detect, prevent, and help resolve cybersecurity incidents. It captures event data from a wide range of source across an organization’s entire network. Logs and flow data from users, applications, assets, cloud environments, and networks is collected, stored and analyzed in real-time.

Key Features:

• Collects log and event data from an organization’s network devices, firewalls, wireless access points, and more.
• Detecting threats on your network by continuous security monitoring of your network’s logs
• Established detection and response procedures to reduce or eliminate emerging threats.
• Solve regulatory and compliance requirements (HIPAA, NIST, CSF, CMMC).

* The State of SMB Cybersecurity in 2021 survey conducted by Vanson Bourne and commissioned by ConnectWise

Password Manager

Did you know 68% of workers put their employers at risk by using weak or reused passwords? *

How can you remember all your passwords? Poor password hygiene puts your company at risk of a data breach. The constant request of password resets reduces efficiencies within your team, and your IT organization. Implementing a Password Manager empowers your team by reducing unnecessary password resets, ensures employees are practicing strong password hygiene and allows for secure password sharing.

Key Features:

• Manage passwords from one place
• Protect your sensitive data
• Share passwords securely, between employees or external clients
• Customizable policies
• Audit Trails with advanced reporting
• SOC2, SOC3, C5 and GDPR compliant

* LastPass 2021 Report