For more than 10 years we've done projects from Security Processes assessment to Card Readers and Payment Applications security
For more than 10 years we've done projects from Security Processes assessment to Card Readers and Payment Applications security
In today's landscape, merely relying on sophisticated security systems is no longer sufficient to combat cyber threats effectively. Firstly, modern attacks can only be detected through constant monitoring and the correlation of information. Often, every second counts, as the extent of damage directly depends on the speed of detection, the accurate interpretation of events, and the promptness of response. Therefore, proactive protection is essential.
CYBER0 SOC offers a comprehensive service to tackle contemporary cyber threats. The cornerstone of our commitment to customer peace of mind lies in our tailored detection rules and incident response strategies, which are finely tuned to your specific information systems. Our team of experts stands ready to oversee the process of identifying and responding to incidents.
The objectives of the information security monitoring service are:
• Guarantee the timely detection and response to information security incidents;
• Reduction of potential financial and/or reputational damages associated with the realization of threats to information security;
• Cost optimization by outsourcing the information security incident monitoring function.
The tasks of the information security monitoring service include:
• Development and/or adaptation to the Customer's infrastructure of information security incident detection scenarios;
• Automatically detect, record, process and respond to information security incidents;
• Provide advice to the Customer on the location of the incident and the counteracting of its consequences.
of threats
detection
service 8/5
service team
- Monitoring and correlating user reports and data feeds to identify cybersecurity incidents;
- Incident response coordination;
- Security records management - collection, normalization, and storage of log data of security events;
- Information about threats and vulnerabilities;
- Threat assessment;
- Vulnerability management;
- Forensic analysis.
• Continuous and centralized control of information security risks;
• Reduction of damage caused by information security incidents due to their timely detection and rapid response.
- Allocate and share resources between CYBER0 and partners.
- Size SIEM for ArcSight ESM, determine load (SEPS or GB per day), and secure hardware and software.
- Implement SIEM and SOAR in the data center, establish a monitoring room.
- Set up correlation rules, multi-tenancy architecture, basic SOC processes, and train 3 CSOC and CSIRT employees.
- Connect initial customers and ITA infrastructure, perform SOC tests, optimize correlation rules and processes, deploy SOAR as IRP.
- Expand user base, optimize further, and integrate IT feeds.
- Fine-tune SOAR, complete SOC processes implementation.
• Multi-tenancy support (for correlation, dashboards and SOAR)
• Flexible event correlation and alerting configuration
• Capabilities for quick and easy scalability
• Built-in SOAR platform
• The supplier's representative is located in the Republic of Angola
• Free courses from SIEM vendor engineers and analysts
• All technical support will be provided in Kwanzas.
Cyber Quotes
- Mario OliveiraSecretary of State for Telecommunications and Information Technologies"The Vulnerability of Angolan companies is critical, as many of them do not have trained employees and technicians to identify, classify, analyze and avoid the risks of cyber-attacks"
- Manuel Nunes JúniorMinister of State for Economic Coordination"Cybersecurity should not be seen as an issue that can be resolved only by the executive, it is everyone's responsibility as citizens and users of the cyber world and only together can the best solutions be found to foster a culture of cybersecurity in institutions and companies, adopting the best practices by investing in issues relating to digital and physical security, among other actions"
- Hediantro Wilson MenaNational Director of Cybersecurity at the Ministry of Telecommunications, Information Technologies and Social Communication (MINTTICS)"Public and private companies in Angola registered in the first half of this year (2020) more than a thousand cyber-attacks"
- Access Control
- Data Encryption
- Secure Communication
- Secure Storage
- Data Masking and Anonymization
- Incident Reporting and Handling
- Non-Disclosure Agreements (NDAs)
- Security Awareness and Training
- Physical Security
- Regular Audits and Assessments
