Trellix is trusted by the world's leading and largest organizations.

More than 40,000 customers, including 80% of the Fortune 100, rely on living security from Trellix.

Dynamic threats call for adaptive protection. As cybercriminals get smarter, what if your security could too?

thumbnail_trellix.png

trellix.png

Trellix

Implementing people, process, and technology solutions to help companies reduce the risk of cyber attack. Providing information and consultancy services to enable companies to be cyber secure.  

Cyber Security

Endpoint security is providing protection against cyber attack for all an organisations' devices that exist on the edge of a corporate network. This can include servers, PCs, Macs, mobile phones, tablets, other user devices, and IoT (Internet of Things) devices. 

Endpoint security includes: 
EDR (endpoint detection and response), 
EPP (endpoint protection platforms), network firewalls 
IDPS, (intrusion detection and prevention systems), 
NDR (network detection and response), IAM (identity and access management), email security, mobile threat detection, 
SSE (security services edge), 
SIEM (Security Incident and Event Management), 
SOAR (security orchestration automation and response) 
...,all of which collectively are now known as XDR (Extended Detection and Response).

VPNs or Virtual Private Networks are an essential part of endpoint security, protecting against phishing or web-based attacks.

Endpoint Security

The services that adopt the approach of zero trust in delivering cyber security to your organisation.


The old school methodology is to assume a perimeter, and inside that perimeter, devices and applications are trusted, and outside that perimeter, they need to be assessed and protected against.  Effectively you have your corporate network, and anything inside the firewalls is to be trusted, and everything outside is to be protected against.

Zero trust is what is says on the tin.

Trust nothing.

No matter where it is on the network or in the cloud.

Everything needs to be validated in the cloud, hybrid, and on-prem world. Every transaction, every login, every activity. Zero Trust provides that continuous validation.



Zero Trust

Knowing the current and potential threats that  present the greatest risk to your orgainisation, and proactively ensuring that the right people, process and technology solutions are in place to mitigate against them.

Threat intelligence is information on specific cyber threats to your organisation.  

Threat intelligence moves the goal posts: rather than responding to an attack, threat intelligence enables an attack to be prevented.  This can be anything from breaking up and arresting a cyber criminal group, to identifying the attack vectors and profiles in advance of attack,  then ensuring sufficient protections and mitigations are in place.  

Threat intelligence is gained from large data sources shared between cyber security companies, on global network and dark web activity, and also from honey pots, which are simulations of an actual company network, that then attract the attacks of criminal groups targeting the specific company.

Threat intelligence enables the delivery of ATP / Advanced Threat Protection.

Threat Intelligence

The service of providing continuous monitoring and control for your entire IT network: a SOC (or CSOC - Cyber Security Operations Centre) includes a team managing automated monitoring services that plug into most or all of your cyber security defence technology, and flags  vulnerabilities and attacks as they occur.  

Also includes the tech platforms and service providers that enable and support efficient resilient security operations. 

The SOC team works with the broader IT team to implement protective and remediator steps when and as required,

Security Operations Centre: SOC Services

Firstly email security is about protecting your organisation from cyber attacks delivered by incoming malicious or spam emails.

Secondly email security is about enabling your organisation to send emails that cannot be spoofed, and have a profile that will be trusted, so that they get delivered to the in-box, rather than get shunted to spam, or blocked as unsafe.  In order to achieve this your SPF, DKIM, DMARC, and BIMI should be configured correctly.

SPF, or Sender Policy Framework, is essential.  If it is not in place, then a cyber attacker can set up a mail server, and start sending spoof emails that look exactly as if they have come from your domain name.

DKIM, or Domain Keys Identified Mail,  is a further protection against the spoofing of your email.  With DKIM setup, your emails will have a "key" that means the recipient can trust them.

DMARC stands for Domain-based Message Authentication, Reporting & Conformance. DMARC is a record on a domain that provides instruction to an incoming mail server, should any emails come in, using that domain, that fail to meet SPF or DKIM standards, how to treat that email (either reject, or send to quarantine).

BIMI or Brand Indicators for Message Identification is a standard that attaches your brand's logo to your authenticated email messages. With this visual verification, recipients can recognize and trust the messages you send.

Email security

A platform, technology and service that monitors network and application activity, and immediately reports events that could be representative of a cyber security attack on your company, either from within or from outside your network.

SIEM - Security Information and Event Management

Services and solutions enabling detection of and response to cyber security breaches.   

Services include those delivered from a Cyber Security Operations Centre (SOC or CSOC) where a 24/7 team monitors for cyber breaches, and responds in real time when breaches are identified.

Solutions include technologies that firstly monitor for breaches, secondly flag when the occur, and thirdly facilitate remediation or best available response to a breach.

Managed Detection and Response (MDR) is generally the term used for the service, and Extended Detection and Response (XDR) is the term used for products or solutions used in MDR.

XDR is broken down into Network Detection and Response (NDR) - which deals with identifying threats at the network level, along with providing the appropriate response, and Endpoint Detection and Response (EDR), which deals with identifying threats at the endpoint, along with providing the appropriate response.

Managed Detection and Response  - MDR - and Extended Detection and Response - XDR

Providing a platform or a service that enables the safeguarding of sensitive data from unauthorized access, disclosure, alteration, or destruction. 

Data Security Posture Management platform will support data classification, data identification, data location, data encryption, access control management, data flow oversight, and data loss prevention (DLP). 

Security policies and controls for DPSM are managed from the platform.



DSPM enables privacy and security regulations to be complied with,  prevents data breaches, and protects brand reputation.

In the event of a data breach, the necessary information to identify the affected data, assess the gravity and scope of the breach, and identify the remediation approach / next steps is facilitated by the DSPM platform.


Data Security Posture Management (DSPM) 

A single platform or set of services that cover all elements of cyber security, provided by a single vendor.

Unified cyber security can include only cyber tools and technologies provided by that vendor, or can include a range of cyber tools and technologies provided by a number of different vendors, but managed within, interfacing to, and overseen by a single platform.

Unified Cyber Security

Understanding network, internet, and systems activity, and being able to flag events that are due to an attack or security breach.