Agile and  Modern IT Solutions

Due to insufficient security visibility, our retail clients are vulnerable to various cyberthreats, including malware, ransomware, and phishing attacks. Without clear insight into their security posture, these organizations face significantly increased risks that could compromise their operations and expose customer data.

To address these vulnerabilities, we implemented VMware Carbon Black’s Endpoint SecurityPlatform for our clients. This solution provided them with advanced visibility, proactive threat detection, and strong prevention measures against malware, ransomware, and phishing attacks. By leveraging these capabilities, our clients significantly strengthened their security posture, reinforcing their defense sagainst cyber threats and ensuring the protection of their critical assets and data.

The prominent hospital in southern California, operating across two locations, identified the imperative to revamp and streamline IT service management processes for heightened efficiency and effectiveness. Seeking to implement ServiceNow IT Service Management (ITSM) for a robust ticketing system and enhanced incident resolution capabilities, the challenge resided in configuring ServiceNow minimally while guaranteeing a seamless migration of ticket history from their current third-party vendor.

Our team initiated a thorough implementation process to address the challenge of implementing ServiceNow ITSM at the hospital. We opted for a base, vanilla installation of ServiceNow, focusing on essential functionalities without custom workflows or automation initiatives. This involved setting up 7-10 IT queues customised to meet specific requirements and configuring the default portal for user ticket submissions. Additionally, we integrated email (SMTP) services for streamlined communication and basic reporting capabilities for incident tracking and analysis. Our team meticulously managed the migration process, utilising available tools to preserve historical data and uninterrupted service continuity. Furthermore, we conducted tailored training sessions for the IT team, equipping them with the necessary knowledge and skills to leverage the ServiceNow platform effectively.

The client faced challenges in managing a high volume of security alerts (976+) across a mixed environment of 146 endpoints. Their infrastructure included a combination of Windows workstations, servers, VMware hosts, Office 365, and security tools like CrowdStrike EDR and Cisco Umbrella. Despite leveraging Arctic Wolf services for monitoring and alerting, they struggled to contextualize and prioritize alerts, evaluate risks, and efficiently remediate vulnerabilities. Additionally, undefined hardware details, complex configurations, and dependency risks added complexity to the remediation process.

Our team provided managed security services tailored to the client’s needs. We reviewed security alerts daily and conducted weekly sessions to contextualize findings, aligning priorities with their business requirements rather than generic industry standards. We assisted with risk assessment, provided pros and cons for mitigation options, and offered recommendations for configuration changes. By developing customized remediation plans and runbooks, we empowered the client to handle common issues effectively. Proactive measures included ensuring alignment with best practices, such as enabling MFA for AnyConnect users and addressing complex firmware risks.