Since our foundation in 2005, the CyberOne team has lived and breathed keeping our clients secure. In a field where every second counts, we keep you one step ahead of your adversaries with the latest assessment, detection and response technologies and tactics.

We empower security teams to do more with less, through the consolidation, simplification and automation of your security estate. But what truly sets us apart is our service – laser focused to empower your digital transformation and deliver measurable business outcomes.

We’re a team of vibrant authentic people who know their stuff and we love what we do, plain and simple. Our technical knowledge comes from our passion and our years of cyber security experience, along with our relentless push to improve.

thumbnail_cyberone.png

cyberone.png

Cyber One

Implementing people, process, and technology solutions to help companies reduce the risk of cyber attack. Providing information and consultancy services to enable companies to be cyber secure.  

Cyber Security

Services and solutions enabling detection of and response to cyber security breaches.   

Services include those delivered from a Cyber Security Operations Centre (SOC or CSOC) where a 24/7 team monitors for cyber breaches, and responds in real time when breaches are identified.

Solutions include technologies that firstly monitor for breaches, secondly flag when the occur, and thirdly facilitate remediation or best available response to a breach.

Managed Detection and Response (MDR) is generally the term used for the service, and Extended Detection and Response (XDR) is the term used for products or solutions used in MDR.

XDR is broken down into Network Detection and Response (NDR) - which deals with identifying threats at the network level, along with providing the appropriate response, and Endpoint Detection and Response (EDR), which deals with identifying threats at the endpoint, along with providing the appropriate response.

Managed Detection and Response  - MDR - and Extended Detection and Response - XDR

Endpoint security is providing protection against cyber attack for all an organisations' devices that exist on the edge of a corporate network. This can include servers, PCs, Macs, mobile phones, tablets, other user devices, and IoT (Internet of Things) devices. 

Endpoint security includes: 
EDR (endpoint detection and response), 
EPP (endpoint protection platforms), network firewalls 
IDPS, (intrusion detection and prevention systems), 
NDR (network detection and response), IAM (identity and access management), email security, mobile threat detection, 
SSE (security services edge), 
SIEM (Security Incident and Event Management), 
SOAR (security orchestration automation and response) 
...,all of which collectively are now known as XDR (Extended Detection and Response).

VPNs or Virtual Private Networks are an essential part of endpoint security, protecting against phishing or web-based attacks.

Endpoint Security

Providing the full range of cyber security services, including CISO (Chief Information Security Officer) support,  SOC (Security operations centre), SIEM (Security incident and event management) Anti Virus, and MDR (Managed Detection and Response) using both in house and partner technologies.

IT MSSP - IT Managed Security Services Provider

A single platform or set of services that cover all elements of cyber security, provided by a single vendor.

Unified cyber security can include only cyber tools and technologies provided by that vendor, or can include a range of cyber tools and technologies provided by a number of different vendors, but managed within, interfacing to, and overseen by a single platform.

Unified Cyber Security

Providing a platform or a service that enables the safeguarding of sensitive data from unauthorized access, disclosure, alteration, or destruction. 

Data Security Posture Management platform will support data classification, data identification, data location, data encryption, access control management, data flow oversight, and data loss prevention (DLP). 

Security policies and controls for DPSM are managed from the platform.



DSPM enables privacy and security regulations to be complied with,  prevents data breaches, and protects brand reputation.

In the event of a data breach, the necessary information to identify the affected data, assess the gravity and scope of the breach, and identify the remediation approach / next steps is facilitated by the DSPM platform.


Data Security Posture Management (DSPM) 

Services and technologies that enable your company to be sure that only the right people get access to the right systems at the right level to do what they need to do.  




IAM is the term used for the management of credentials and access levels of authorised staff to company systems.

CIAM - Customer Identity and Access Management - is the term used for the management of credentials and access levels of third party customers to externally facing applications.

At the heart of IAM and CIAM is the delivery of data security, and data governance controls: both for corporate data, and for the personal data of customers and employees.

Identity and Access Management - IAM

Providing strategy and consultancy services so that appropriate corporate governance is in place, enterprise risk is managed, and regulations are complied with.

Providing technology platforms that assist with GRC.

GRC - Governance, Risk, and Compliance

SASE - pronounced "sassy" is a "zero trust" network service, where all network equipment is virtualised, removing the requirement to manage, monitor, control, and update physical network infrastructure. 

SASE - Secure Access Service Edge 

Penetration testing is the ethical testing of a company's cyber security defences.

Penetration testing can be for a company's entire IT cloud and IT infrastructure, a single application, or for an IoT (Internet of Things) device.
 


A penetration test or "pen test" will emulate the full set of actions that are performed by cyber criminals.  These actions are identified in leading cybersecurity frameworks - and most clearly in the MITRE ATTACK framework.

The objective of a pen test is to report on vulnerabilities that could be exploited, and then report them back to the company, so that the vulnerabilities can be addressed before they are exploited by a cyber attacker.

Penetration testing can be restricted to testing the level of cyber resilience from a technology perspective, or can extend to simulated email phishing tests, where employee cyber awareness and resilience is tested.

Beyond Penetration testing, there is Red Teaming, where a team will test all elements of corporate security defences, including physical security, site access, cyber security, and social engineering elements.  Red Teaming is viewed either as additional to penetration testing, or as an advanced, next level form of penetration test.


Penetration testing

Understanding network, internet, and systems activity, and being able to flag events that are due to an attack or security breach.

Delivering resilience without compromise.