Crafted to provide a comprehensive suite of cybersecurity services, SubRosa amalgamates preventive, detective, and responsive cybersecurity strategies into a single, cohesive service package. Tailored to your unique demands and constraints, these services can be engaged individually or collectively to provide a full-range, robust cyber defense mechanism.

thumbnail_Favicon.png

Favicon.png

SubRosa

Penetration testing is the ethical testing of a company's cyber security defences.

Penetration testing can be for a company's entire IT cloud and IT infrastructure, a single application, or for an IoT (Internet of Things) device.
 


A penetration test or "pen test" will emulate the full set of actions that are performed by cyber criminals.  These actions are identified in leading cybersecurity frameworks - and most clearly in the MITRE ATTACK framework.

The objective of a pen test is to report on vulnerabilities that could be exploited, and then report them back to the company, so that the vulnerabilities can be addressed before they are exploited by a cyber attacker.

Penetration testing can be restricted to testing the level of cyber resilience from a technology perspective, or can extend to simulated email phishing tests, where employee cyber awareness and resilience is tested.

Beyond Penetration testing, there is Red Teaming, where a team will test all elements of corporate security defences, including physical security, site access, cyber security, and social engineering elements.  Red Teaming is viewed either as additional to penetration testing, or as an advanced, next level form of penetration test.


Penetration testing

From a cyber security perspective, more often than not, it is a supplier failing that is at the root cause of a cyber security breach.  Supply Chain or Third Party Cyber Risk Management enables visibility on how cyber resilient your suppliers are, where the risks are, and allows you to identify steps to mitigate those risks. 

Third Party risk management is essential for maintaining cyber security resilience.  

Supply Chain Cyber Risk Management

Providing strategy and consultancy services so that appropriate corporate governance is in place, enterprise risk is managed, and regulations are complied with.

Providing technology platforms that assist with GRC.

GRC - Governance, Risk, and Compliance

Firstly email security is about protecting your organisation from cyber attacks delivered by incoming malicious or spam emails.

Secondly email security is about enabling your organisation to send emails that cannot be spoofed, and have a profile that will be trusted, so that they get delivered to the in-box, rather than get shunted to spam, or blocked as unsafe.  In order to achieve this your SPF, DKIM, DMARC, and BIMI should be configured correctly.

SPF, or Sender Policy Framework, is essential.  If it is not in place, then a cyber attacker can set up a mail server, and start sending spoof emails that look exactly as if they have come from your domain name.

DKIM, or Domain Keys Identified Mail,  is a further protection against the spoofing of your email.  With DKIM setup, your emails will have a "key" that means the recipient can trust them.

DMARC stands for Domain-based Message Authentication, Reporting & Conformance. DMARC is a record on a domain that provides instruction to an incoming mail server, should any emails come in, using that domain, that fail to meet SPF or DKIM standards, how to treat that email (either reject, or send to quarantine).

BIMI or Brand Indicators for Message Identification is a standard that attaches your brand's logo to your authenticated email messages. With this visual verification, recipients can recognize and trust the messages you send.

Email security

Endpoint security is providing protection against cyber attack for all an organisations' devices that exist on the edge of a corporate network. This can include servers, PCs, Macs, mobile phones, tablets, other user devices, and IoT (Internet of Things) devices. 

Endpoint security includes: 
EDR (endpoint detection and response), 
EPP (endpoint protection platforms), network firewalls 
IDPS, (intrusion detection and prevention systems), 
NDR (network detection and response), IAM (identity and access management), email security, mobile threat detection, 
SSE (security services edge), 
SIEM (Security Incident and Event Management), 
SOAR (security orchestration automation and response) 
...,all of which collectively are now known as XDR (Extended Detection and Response).

VPNs or Virtual Private Networks are an essential part of endpoint security, protecting against phishing or web-based attacks.

Endpoint Security

Providing the critical online or face to face training that helps staff protect themselves and the company against cyber crime. 

No matter how good your company cyber security technical defences are, your cyber security posture is weak at best, if you do not have Cyber Security Training in place for your staff.

Cyber security training can include face to face, online video training, awareness questionnaires, and attack simulation, including simulated phishing attacks, where employees are tested with regard  to their ability to spot and report phishing attempts.





Cyber Security Training

Implementing people, process, and technology solutions to help companies reduce the risk of cyber attack. Providing information and consultancy services to enable companies to be cyber secure.  

Cyber Security

The service of providing continuous monitoring and control for your entire IT network: a SOC (or CSOC - Cyber Security Operations Centre) includes a team managing automated monitoring services that plug into most or all of your cyber security defence technology, and flags  vulnerabilities and attacks as they occur.  

Also includes the tech platforms and service providers that enable and support efficient resilient security operations. 

The SOC team works with the broader IT team to implement protective and remediator steps when and as required,

Security Operations Centre: SOC Services

Understanding network, internet, and systems activity, and being able to flag events that are due to an attack or security breach.

IT is the world of Information Technology, and covers everything to to with computer hardware, computer software, information stored on computers, whether in the cloud, or on premise in your own data centre.

IT includes storing, processing, creating or changing data on a computer system - from managing your company accounts, to running your company factory, to creating amazing films, music, art and literature.

IT is at the heart of our world - with applications getting easier and faster to use, and doing more and more for us.

From smart fridges, to smart houses to smart cities - the beauty of efficiency and automation, versus the worries over data privacy, camera surveillance, and govt needs to know, versus an individual's right to privacy.

From cyber currency to cyber crime, from information clarity to online manipulation, troll farms, the dark web, and cyber crime.

This is all the area of IT.

Cybersecurity Simplified. Unparalleled Expertise: Delivered by seasoned professionals, effortlessly woven into your processes, and managed for continuous protection.