Managed Security Protection & Outsourcing Services

Transcription

1 Managed Security Protection & Outsourcing Services Reduced Risk, Enhanced Compliance, Minimized Cost

2 Odyssey Managed Security Protection & Outsourcing Services Market understanding, knowledge and expertise, focus and persistence are all key ingredients to progress and success. That is why you need all your resources concentrating on these. Focus on your core business competencies. You do not have to worry about issues such as the security of your information, managing risk and meeting compliance requirements. We have you covered. This is our core business. Odyssey Managed Security Protection & Outsourcing Services, offered through our state of the art Security Operations Centers operating 24/7/365, delivered through our cloud-based MS&OS Web portal which allows for transparency, staffed with highly specialized, experienced, security experts, and with the support of our world class Threat Analysis and Security Advisory feed provided by IthacaLabs, are poised to meet the needs and exceed the expectations of diverse industry organizations and are flexible enough to change with them. Challenges faced by Organizations today As a modern organization-heavily depending on your technological infrastructure to meet business objectives, operating in an environment where the boundaries of the corporate network are increasingly getting more and more blurry, while new threats and vulnerabilities are threatening the Confidentiality, Integrity and Availability of your sensitive information, mission-critical systems and communication links-you are faced with a number of critical challenges: Managing the increased complexity of IT infrastructure including Internet & Intranet applications Proactively identifying and effectively addressing potential and actual Threats and Vulnerabilities, which emerge on a daily basis Reducing the costs associated with Information Security Management operations Increasing difficulty in maintaining sufficient in-house Information Security expertise Enhance Legal and Regulatory Compliance and/or Internal Audit requirements Being readily informed about the security posture of organizational mission-critical systems and communication links Minimizing RISK and ensuring that the INTEGRITY of systems and networks is not compromised Ensuring that you face these challenges in-house, requires both a high up-front investment as well as increasing running costs. Most importantly, it also means that as an organization, you divert your focus from your core activities and projects. As a regional leader in the provision of information security and managed security services for over a decade, with hundreds of clients in security sensitive industries such as banking, insurance, energy and healthcare, we have been exposed to these challenges and have heavily invested in addressing them in a manner that not only meets current needs, but is also flexible enough to evolve into accommodating emerging trends.

3 What sets us apart On your side 24/7/365 Odyssey Managed Security Protection & Outsourcing Services are delivered through our world class Security Operations Centers that operate on a 24/7/365 basis. With constant feeds on the latest information security research and Threat Intelligence from Odyssey IthacaLabs *, our MS&OS experts have the tools and means to monitor your environment, alerting you of any suspicious activity, even taking emergency steps towards responding to identified security incidents. * IthacaLabs is a group of specialized security engineers and researchers who scout the global IT Security environment with a two-fold mission; Remaining abreast of- and evaluating emerging information security trends and technologies; and identifying, analyzing, assessing and responding to emerging information security threats Tap into our diverse pool of experts Our MS&OS team is a particular mix of highly skilled system and network security experts with proven knowledge and deep expertise on how to reduce your risk. This means we have both, access to intelligence relating to upcoming vulnerability threats and exploits, but also a strong team of experienced engineers ready to effectively address these exploits in a structured, knowledgeable manner. Advanced 24/7/365 protection and management of your security devices, systems, applications, network infrastructure and communication links. Transparent Service Delivery cloud-based MS&OS Web Portal Odyssey MS&OS web portal provides you with a holistic management and delivery approach to our Managed Security Protection & Outsourcing Services. This service delivery vehicle nullifies the lines between your internal resources and our MS&OS services providing you with full visibility into your information security baseline and transparency into the services you receive, at any time. It integrates a host of valuable tools, skills, methodologies, intelligence and BigData Statistical and Behavioral Analytics, which collectively ensure the protection of your mission-critical systems and communication links. The fully customizable dashboards, drawing from real-time information, facilitate your decision making process as it provides you with a full and detailed view into the organization s information security posture. The intuitive design and layout of the cloud-based MS&OS web portal facilitates the easy navigation and understanding of your data. It also allows each user to tailor their work environment based on their needs, work responsibilities and habits. High Performance and Efficiency by design BigData Analytics With the utilization of BigData intelligent security capabilities, we introduce unparalleled performance capabilities to the services Investigation, Remediation, Statistical and User Behavioral Analytics (UBA) features; all, vital aspects for any organization that is serious about its information security capability.

4 Reporting We facilitate your cumbersome reporting responsibilities by providing you with the capability to produce predefined reports designed to meet the requirements of regulatory frameworks such as the PCI. This builtin capability of our cloud-based MS&OS web portal, also allows you to easily create, schedule and produce additional reports based on your business requirements, thus further simplifying the reporting process. BigData Analytics Using BigData Analytics, we are capable of intelligently processing and analyzing large volumes of structured and unstructured data, thus identifying threats, which would go unnoticed by traditional analysis tools and techniques. Information Dashboards The MS&OS web portal delivers a host of fully configurable dashboards, which can be customized, to meet your users needs and work habits. With smart drill-down capabilities, these dashboards allow users to have pertinent, real-time information right at their fingertips. Event Management Our team of experts efficiently and effectively monitors, classifies and manages events according to their severity, enabling your security staff to delegate actions and responsibilities internally. Compliance Through the built-in capabilities of our cloud-based MS&OS web portal, we provide you with the framework for understanding compliance behavior, since Information Security rules and regulations of the organization are the key to strengthening information security. Threat Intelligence by IthacaLabs Our MS&OS web portal is continuously enriched with evidence-based knowledge on existing and/or emerging Cyber Threats and Vulnerabilities. We feed this information into our Analysis and Correlation processes, thus further minimizing False-Positive Alerts; this intelligence can be utilized to enhance your decision making process when strategically planning your internal defenses against similar future threats. Performance & Availability We proactively monitor the performance and availability of your mission-critical systems and communication links. Vulnerability Management Through our cloud-based MS&OS web portal, you are able to import results from different vulnerability tools, which we use during the Analysis and Correlation process in order to further minimize False-Positive Alerts. Odyssey Managed Security Protection & Outsourcing Services Key Features Odyssey Managed Security Protection & Outsourcing service line combines a unique set of features and it is structured based on our proven Security Event Management Methodology. Together, they formulate a service line, which places Odyssey at the forefront of the global Managed Security Protection and Outsourcing services provider market. Copyright 2015 Odyssey Consultants LTD. All rights Reserved

5 Odyssey Managed Security Protection Services Our Managed Security Protection Services include Log Collection and Archiving, Monitoring, Analysis and Event Management. Through our MS&OS platform, logs from your mission-critical systems and communication links are collected and correlated on a 24/7/365 basis, both by using highly specialized technologies as well by our MS&OS experts. This process ensures early identification of potentially harmful threats and attacks against your network and system resources. In the event a suspected or a real threat is identified, MS&OS engineers may invoke a structured escalation process, which includes alerting you to the fact using the following communication methods: Sending , Push-Notifications* and/or SMS, accompanied with a brief summary of the incident including its severity level Updating the incident management dashboard with details regarding the raised incident, including suggested course of action Calling you for providing detailed information on an incident and how it might affect the Confidentiality, Integrity and Availability of your mission-critical systems and communication links Key Benefits Through Managed Security Protection Services, your organization can realize the following key benefits within the boundaries of a planned and definable budget: Enhanced 24/7/365 protection and monitoring of your mission-critical systems and communication links Continuous log analysis and correlation of log data with real-time Incident Escalation Focus internal resources on core organizational competencies Access to BigData Analytics platform which provides Smarter Statistical & Behavioral Analytics, including User Behavior Analytics UBA capabilities for identifying threats, which would go unnoticed by traditional analysis tools and techniques Threat Analysis and access to Security Advisories issued by IthacaLabs Minimized Mean Time to Restore/Recovery (MTTR) capability by proactive identification of Internet threats and malicious activities Push-Notifications SMS Incident Management Dashboard Call Facilitation of effective and efficient regulatory compliance Lower Total Cost of Ownership (TCO) by eliminating the need to recruit, train, and retain an in-house security capability Continuous monitoring of the performance and availability of your mission-critical systems and communication links In addition, our experts are always available to provide to you the assistance and guidance needed to enable you take the necessary actions against potential and/or actual intrusions. In such cases, if requested, our team may undertake to lead, or assist, the Incident Response Process. All related alerts, incidents, vulnerabilities and information regarding latest exploits and threats, reports and analysis tools, in addition to other key security data, are available for review at all times, through the MS&OS web portal. *For receiving Push-Notifications on smart-phones and tablets you should install Odyssey ClearSkies mobile application, which is available for Windows, ios and Android operating systems. Reduced Risk. Ensuring that the integrity of organizational systems and networks is not compromised.

6 Odyssey Outsourcing Services Once under an Outsourcing contract, you can rest assured that your in-scope security devices, systems and network infrastructure are maintained 24/7/365 in a top-notch operational, functional, and effectiveness state. Within the scope of our Outsourcing Services, our MS&OS experts will undertake to configure and diligently administrate your in-scope components so that they are updated with latest upgrades and bug fixes remaining impermeable to new and emerging vulnerabilities and related threats. Minimized Cost. Immediately improve your information security baseline without long deployment learning curves and no up- front investment Key Benefits Through our Outsourcing services, your organization can realize the following key benefits within the boundaries of a planned and definable budget: Lower Total Cost of Ownership (TCO) by eliminating the need to recruit, train, and retain an in-house security expertise Freeing internal resources to focus on core organizational competencies Odyssey Managed Security Protection & Outsourcing Service-Level Agreements Evolving to meet clients needs and changing environments Whether you want to subscribe to Odyssey Managed Security Protection services or decide to go for Outsourcing Services, our service models and SLAs can be tailored to meet your initial requirements and flexible enough to change along with your changing needs. Understanding the ever-changing nature of your organizational infrastructures and information security needs, your initial SLA agreement could be upgraded both in terms of breadth e.g. the number of systems/applications supported, as well as depth e.g. the level of service provided. What remains constant irrespective of the nature of your contract, is the capability to enjoy full transparency and visibility into your information security management operations and baseline security posture by opting for a hybrid service contract. This is feasible because, even if your Managed Security Protection or Outsourcing contract does not cover all of your information security assets, you can still be able to manage the assets you choose to protect internally by subscribing to our ClearSkies SECaaS SIEM service. Offered via private cloud, Odyssey ClearSkies SECaaS SIEM service, will provide you with all those tools and functionalities required to enable you manage those assets internally e.g. perform asset monitoring, log review and analysis, as well as manage events in a well structured and knowledge facilitated manner. Proactive policy configuration, patching and software upgrading of the in-scope devices Faster remediation and troubleshooting of in-scope devices problems 24/7/365 Minimized downtime and improved recovery by performing backup of the in-scope network and system configurations Minimized downtime due to security and administration configuration errors By transparently integrating a Managed Security Protection or Outsourcing service contract with a subscription to ClearSkies SECaaS SIEM service into a hybrid service contract, you can have a complete view of your organization s information security posture at all times.

7 Company Overview Odyssey Consultants is an ISO certified, Information Security, Infrastructure and Risk Management Solutions integrator and a Managed Security & Outsourcing Services Provider. Odyssey is accredited by the Payment Card Industry Security Standards Council (PCI SSC) as a Qualified Security Assessor (QSA) and an Approved Scanning Vendor (ASV). Our services and solutions span the whole spectrum of People, Process and Technology. Odyssey was founded in 2002 with the main objective of providing High-Quality, Cutting- Edge, Information Security, Infrastructure and Risk Management Services to organizations that value their information assets. Since then, and in keeping with market trends, we have evolved and pride ourselves for becoming a regional leader in the Managed Security & Outsourcing Services sector as well. Our Vision and Mission Our vision is to be the leading organization in the wider region in the areas of Information Security, Infrastructure and Risk Management Services and related Managed Security & Outsourcing Services, creating real and sustainable value to our clients, employees and shareholders. Our Mission is to be the recognized leader in the regional Information Security, Infrastructure, Risk Management and Managed Security & Outsourcing Services market, projecting trust in our experience and skills, and consistently delivering a high quality experience to our clients. Our Principles We Are Centered Around You Underlying our business mission is the unconditional requirement that our services fulfill our clients needs and exceed their expectations. Having this in mind, our business approach places the client in the center of our business equation. Building Value For Our Customers This statement underpins our philosophy in servicing our clients needs through robust cost - benefit analysis and approaches, which take a pragmatic and practical approach in balancing risks and controls. Our Values + Innovation We transform innovative ideas into progressive products and solutions that proactively address information security trends and challenges. + Passion for Perfection We strive for perfection by inspiring into our people the sense of leadership, ownership and perseverance that is supported by a culture of teamwork, mutual respect and professionalism. + Customer Focus Underlying our business mission is the unconditional commitment to be ahead of our customers needs and exceed their expectations, by delivering high quality, adaptive and robust solutions. For Sales Enquiries: sales@odysseyconsultants.com For General Enquiries: info@odysseyconsultants.com Headquarters Cyprus: 1 Lefkos Anastasiades str Strovolos, Nicosia, tel.: fax: Offices Greece: 7 Anastaseos str., 2nd floor, Holargos , Athens, tel.: fax: Serbia: Vladimira Popovica, 1st floor, , Belgrade, tel.: fax: Dubai: Dubai Internet City, tel.: fax: