SERVICES | Port443 (Pty) Ltd

REQUEST A DEMO

Cyber Security automations and integrations

Compliance & Governance

OneView

Community Defense

Consulting

Compliance & Governance: Security Controls

A fortune is spent on security controls. In many instances the configuration of the controls is not optimal, resulting in the efficacy of the control being ineffectual. In some instances, a control is configured optimally, but not regularly checked. This "set and forget" approach results in the efficacy of the control being sub-optimal. Not only are changes made to the policies and configurations over time, but the threat landscape evolves, resulting in a depletion of the efficacy. A continuous process of validation and hardening is required.

Compliance & Governance: Security Posture

The attack surface has increased significantly with threat actors resorting to machine-based attacks. The traditional manual response to these threats is no longer effective. A contra-automated response is required to ensure the efficacy of the security posture.

Compliance & Governance: Automated Validations

The Port443 platform provides automated Compliance and Governance validations across multiple security controls, across multiple technologies. These automated validations run weekly and provide alerts where there is a change to critical policies that can result in potential vulnerabilities. These validations are executed against various frameworks including the National Institute for Security Technology (NIST) and Payment Card Industry (PCI). In addition, the platform uses the Vendor's best practice configurations to provide compliance scores and remediation guidance.

The 3 Frameworks Against Which The Platform Performs Validations

Regulatory Frameworks

Regulatory driven compliance of the configurations of the security controls. Examples include: PCI, GDPR and POPIA.

Industry Frameworks

The second category against which compliance is validated are industry frameworks. Examples include NIST, MITRE Att&ck and ISO27001.

Vendor Best Practice

Each vendor has a “best practice” when it comes to the optimal policy configurations

The Port443 platform uses these best practices, along with the regulatory and industry frameworks to ensure the ongoing hardening of the security controls.

Compliance & Governance

OneView

Port443 is dedicated to the development of services to enhance your overall security posture. Leveraging the existing investments, we provide insight and visibility into your cybersecurity and network controls across a plethora of mainstream vendors.

OneView Integration and Visualization

The Port443 platform addresses this requirement through expansive API integrations and visualisation across the estate. With intuitive dashboards providing insight into these threat vectors and metrics is now an affordable, consumption-based service to enhance your control and associated security posture.

Advisor using KPI Dashboard on virtual screen.Business finance data analytics graph.Financ

OneView

Community Defense

A framework ensuring a significantly enhanced security posture without having to introduce additional security controls. Cyber security controls operating in unison with other controls increases the overall efficacy. Each control, whilst optimal in its own right, is significantly enhanced if they form part of a broader ecosystem, where each control is aware of the status of the other controls. The triggering of one control could automatically trigger a different control, to mitigate and contain compromises.

EXAMPLE OF COMMUNITY DEFENSE

An email security control, which is directly integrated into the Port443 platform, picks up a suspicious URL:

Through integration, the Port443 platform identifies similar emails in the client’s estate, and automatically quarantines/deletes these emails.

A “Block URL” policy is initiated on the firewall for a period of time whilst it is being investigated.

A PAM control automatically restricts access to critical systems, until such time as the threat has been remediated.

Key Points

Attack vectors enable hackers to exploit system vulnerabilities.

Security controls operating in isolation are less effective than controls operating in unison.

The Port443 platform is built to integrate into multiple technologies across multiple controls.

Different controls should be “state aware” of each other to affect immediate containment and reduce the probability of lateral movement within the estate.

The Port443 platform integrates via API with these different controls and automatically triggers and remediates when an Indicator of Compromise is detected.

Community Defence

Consulting

Understanding your current risk and the optimization of an appropriate security posture.

Port443 has extensive experience in assessing the current Security Posture and the development of a roadmap to mature tp

Security Posture Assessments

Advisory engagements with the output being a comprehensive “as-is” state and a “to-be” state in order to optimize your security posture.

Incident Response process

Ensuring readiness of the organisation when it comes to handling a Cyber Security Incident requires a robust operational process that can be absorbed into the business. This would include process flows, classification and prioritisation of incidents and the understanding of the various roles and responsibilities of all parties. Following a globally aligned best practice process is imperative for the legal and regulatory position of the organisation. Port443 has extensive experience in the development of Incident Response Processes that can be operationally absorbed into the organisation.

Information Security Policy

People, Process and Technology come together to increase the overall efficacy of the security posture. A key component of Cyber Security is a mature Information Security Policy, which should form part of the companies' standard policies.
Port443 has extensive experience in developing Information Security Policies that cover all aspects of the identification, classification, management and control of information across the organization.

Consulting

Ready to get started?

Port443 has extensive experience in identifying candidates for automation and building these automations, so they can be consumed “as a service.”

GET STARTED NOW

Links

Compliance & Governance

Find us

Suite 6, 1st Floor, Building C, Monte Circle, 178 Monte Casino Boulevard, Sandton, 2191, South Africa.

+(27) 83 326 3456

Start the conversation

info@port443.co.za