Cetrom Security as a Service
There has been a spike in spear-phishing campaigns centered around the Coronavirus (COVID-19) health crisis, creating a new wave of cybersecurity threats that businesses need to combat.
Cyber threats are evolving and advancing daily for both large, medium, and small firms. While large organizations can afford an internal Cyber Team, most small and mid-sized organizations do not have an internal Cyber Team in place. However, to protect your organization, you need a strong, proven IT security capability with the experience and knowledge to help prevent, detect, and combat these detrimental cyber threats, and monitor your IT resources on an ongoing basis. Cetrom’s base-level Cyber Security Service is a fundamental component of our Cloud Offerings, with additional monitoring options.
Our goal is to provide you and your team with secure and reliable access to your data so that you can focus on doing your organization’s business. Our multi-factor cybersecurity methodology and a team of cybersecurity experts back our proven cloud solutions. Consider our team, tools, and the best practices we implement as your organization’s virtual Cyber Security Team. Our Cyber Service and offerings follow a Cyber Security Playbook that our team follows with the elements outlined below:
- Triple Data Backup Protection: Cetrom performs two daily backups using two different methodologies disconnected from the network. Additionally, they replicate their client data to a third-party vendor for a triple layer of redundancy. If desired, they also have an additional option (additional fees apply) to replicate client data to a device at their location.
- Proactive Patch Management: Cetrom performs regularly scheduled updates to patch system vulnerabilities and helps maintain overall platform security, performance, and stability. This effort is critical to reducing the risk of a cyberattack. Attackers often exploit unpatched systems to gain access to sensitive information. CPA firms should have a process for testing and applying patches and updates in a controlled and secure manner to ensure unintended consequences, such as compatibility issues or system downtime, do not impact systems.
- Least Privilege Model: This model restricts access to sensitive information and systems to only those users who need it to perform their job duties. It helps reduce the risk of unauthorized access and data breaches. In the most minimal privilege model, users are only granted the minimum access necessary to perform their job duties, which makes it easier to identify the source of a breach if one does occur.
- Implement Multi-factor Authentication (MFA) for Everything: MFA is essential in increasing a firm's cybersecurity posture. MFA requires users to provide two or more forms of authentication, such as a password and a security token, before accessing sensitive information. This added layer of security helps reduce the risk of unauthorized access and data breaches. MFA can also be implemented using biometric authentication, such as a fingerprint or facial recognition, in addition to a password.
- Deploy Multiple AI-based Security Products: Cetrom installs multiple AI-based products, including Endpoint Telemetry Data, DNS Filtering, Intrusion Prevention Systems, Reputation-Based Threat Prevention, Data Encryption, and more.
- Next-Generation Antivirus (NGAV): NGAV goes beyond traditional antivirus software's signature-based detection methods and employs a more proactive and behavior-based approach to threat detection and prevention at the cloud and local workstation level. Cetrom’s NGAV solution monitors and analyzes the activity and behavior of endpoints and uses various techniques to identify and alert potential threats. The NGAV tool then reports the data to Cetrom's EDR/MDR solution to analyze, isolate, and remediate in real time.
- Endpoint Detection and Response (EDR) and Managed Detection and Response (MDR): Cetrom takes it a step further with a service called EDR and MDR, which ingests “insight” data sent by NGAV. Cetrom's EDR and MDR solution combines advanced technology, 24/7 monitoring, expert analysts, proactive threat hunting, and rapid response and remediation capabilities to contain and eliminate attacks. If a real threat is detected, Cetrom’s MDR solution helps analyze, isolate, and remediate that threat in real time.
- Data Encryption at Rest & In Transit: Cetrom delivers encryption for data at rest, stored at our data centers, and when data is being transferred between networks. This method helps prevent unauthorized access to data at rest and third-party interception of that data while in transit.
- Deploy Intrusion Detection & Prevention Systems: Cetrom actively monitors network or system activities for malicious activities or policy violations and reviews these reports to gain visibility into existing weak entry points and help avoid possible breaches in the future.
- Cetrom Connect: Cetrom Connect is a universal API technology that enables secure and reliable communication between networks over the Internet. With Cetrom Connect, Cetrom can securely connect your networks, including the Cetrom virtual desktop, Microsoft 365, Active Directory Domain Services, your local network, cloud printing, and more, eliminating the need for local on-site servers. This solution helps satisfy FTC and IRS compliance regulations, which are now enforced. To learn more about Cetrom Connect, click here.
- Employee Cybersecurity Awareness Training: Cybercriminals often target employees to gain access to sensitive information and systems, making it crucial for employees to understand the risks and identify and respond to threats. Cetrom regularly sends security reminders and notices to educate its clients and provide ways to help keep data secure. We highly recommend adopting a cybersecurity awareness program like KnowBe4. To learn more about our Cybersecurity Awareness Training Program, click here.
- Verified & Tested Disaster Recovery Plan: Cetrom performs monthly disaster recovery plan drills to ensure quick response times. We also work with clients to help build their business continuity plan so that they can continue working in the event of an unexpected outage.
- Dedicated Cybersecurity Team: Our team of cybersecurity experts monitors our clients' network activity for potential threats, pushes critical security updates and patches to address vulnerabilities, and offers training opportunities and resources to help educate and protect client data.
By using both preventive and predictive security best practices, Cetrom can help prevent cyber threats from penetrating your network, keeping your valuable data secure and keeping your business up and operational.
Cetrom is independently audited and verified annually to ensure that all the layers of our cloud security exceed industry standards. We are SOC 2 and HIPAA certified, all equipment is FIPS 140-compliant, and our two data centers are both SSAE 16 and SOC 2-compliant. We have even been named the Top Hosting Provider in the industry by K2 Enterprises and rated 5 stars for our customer service and support by CPA Practice Advisor.
With Cetrom’s Security as a Service as an extension of your Cyber Team, you can be assured you’re keeping Cyber threats at bay.