Information Security Services

Managed Security Service Offerings - Overview

From our Security Operations Centers spread across the central and eastern United States, we offer managed security services, which can be either remote, onsite or a combination of the two. The level of the service can begin with something as simple as periodic log analysis, going right up to the use of Security Information Management (SIM) products. Again, the monitoring could be limited to once a week, or 24/7. We support an extensive list of security devices and systems, using our patent pending Heuristically Advanced Warnking Konsole (HAWK) SIM.

Our security monitoring experts provide the support of analyzing incidents, deal with false positives, and respond appropriately to critical events.

 Click Here to Learn More!

Network Security Monitoring service

As part of Network Monitoring we will help you

• Identify your online information assets to evaluate their importance
• Measure your current network security effectiveness
• Implement Managed Security Monitoring
• Commence 24x7 Real-time Information Security Surveillance of your network
• Secure your network with real-time countermeasures

Gaining real-time visibility into threats is one the most difficult challenges confronting security professionals. However, monitoring and management goes beyond simply seeing the threat; it is even as critical to be able to prioritize the impact and the extent of the threat. Given insider threats and compliance requirements such as Sarbanes-Oxley, HIPAA, GLBA, and PCI, organizations that monitor requirements are expanding from a handful of firewalls and intrusion prevention and detection systems to applications, databases, networks and systems across the full enterprise. Monitoring solutions must now scale to support these requirements while being more cost-effective than ever before. The real challenge: How is this managed?

Service Description

For organizations that do not need 24/7 real-time security monitoring or wish to perform this function inhouse, HAWK Network Defense offers a fully managed event correlation and information management solution.

HAWK teams with each organization to identify which assets to monitor - based on each company's unique business and compliance requirements. HAWK will then implement a turnkey event correlation and information management service, powered by our patented, award-winning HAWK (Heuristically Advanced Warning Konsole) technology. HAWK analyzes and correlates logs from security and non-security devices and applications to identify potential security events. Clients can then investigate these events, analyze security trends, and view reports via our secure web portal.

• Fully managed solution to decrease support costs, reduce implementation times, and virtually eliminate project risk.
  
• Comprehensive data collection by monitoring more types of devices than other outsourced solutions, including firewalls, network and host IDS/IPSs, VPNs, routers, switches, operating systems, databases, and applications.
  
• Advanced threat detection using multiple algorithms and non-filtered log analysis over multiple time windows to identify immediate threats and harder to detect slow attacks.
  
• Reduced and prioritized false positive and non-impacting events.
  
• Trending and analysis to enable organizations to review their current security status, analyze trends, and improve security performance over time. And global trending capabilities ensure customers know in advance, what others have experienced that could ultimately impact them.
  
• Process-driven, documented response process facilitated by rule-based workflow communications and tracking, providing clients with an auditable incident response process that meets compliance requirements.
  

HAWK (Heuristically Advanced Warning Konsole), our patent-pending enterprise security monitoring and information management platform, integrates and correlates information from devices and applications in the enterprise environment, adding context to reduce logging 'noise' to a manageable number of security events worthy of further investigation
HAWK cross correlates: correlates and analyzes logs from a wide variety of applications, databases, systems, and network components as well as traditional security devices, providing a true enterprise monitoring solution.

 Click Here to Learn More!

Service Benefits

Improved security by being able to detect and respond to security events.
Meet compliance requirements by ensuring that your incident response plan is followed and actions are appropriately documented in an auditable online archive.

Reduce monitoring costs and avoid the distraction of complex software implementations by leveraging HAWK's event correlation and information management infrastructure.