Advisory Services

Boundary protection

You have heard it and our print media is flooded with news about Ransomware, data, financial information stolen from Marriott, Target, OPM and other big companies and government.
To reduce these types of attacks, NSG can help you with Defense-in-Depth and Defense-in-Breadth solutions. Our experienced Security Engineers can provide comprehensive awareness of how you can improve your security. One of the most important solution is to deploy a Next Generation Firewall solution and configure with access rules. Combining with the power of the new generation firewall and using Intrusion detection, GEO-IP blocking as well as adding Real-time threat monitoring and protection to enhance the protection of your network.
We can help you to implement very cost-effective yet a powerful Firewall/IDS solution.

Secure Baseline Configuration

Research shows that most of the attacks seen is US is because of old unpatched hardened servers.
NSG has years of experience with the federal government customers in hardening the operating system from configuration point of view. NSG have used CIS-CAT secure configuration as well as DISA's secure configuration guidelines by using Windows policy editor and other tools for Linux operating systems.
Call or email us today to implement very cost-effective solution to securing your server infrastructure!

Assets Management

You should have full control and visibility of what software and hardware are connected to your environment all the time. Most hackers harvest on this weakness. Most organizations do not have policy, tools to have whitelisted applications and also workstations that are connected on the network. Hackers are able blend in your network with a connected but unknown to administrator that workstation that was connected in computer closet running windows 95/98, or server 2003 providing specific function long time back but now not required due to new solution but administrator never shut that virtual server down.
NSG can assist in both hardware and software asset management with many viable solutions including Microsoft 365, Comodo One Managed services, or many open source or commercial solutions. We will analyze your requirements, your budget and will deploy the best of the breed solution.

Privilege Access Management

It is vital that you have complete visibility of all privilege activities performed by administrators to critical assets.
To achieve privilege access management, NSG can deploy a solution that typically take the credentials of privileged accounts and put them inside a secure repository (a vault) isolating the use of privileged accounts to reduce the risk of those credentials being stolen. Once inside the repository, system administrators need to go through the PAM system to access their credentials, at which point they are authenticated and their access is logged. When a credential is checked back in, it is reset to ensure administrators have to go through the PAM system next time they want to use the credential. Turning on audit policy for objects that you are interested in protecting, you can monitor all the accesses and comparing with PAM logs, you can achieve compete transparency of who accessed what and at what time.

Identity And Access Management

Managing and controlling information of your user base and your IT assets is a very important function to reduce cyber risk. Having consistent and known configuration information of devices that connect to your network as well as of controlling information about users. Identity and access management is about controlling such information that includes information about who and how a user gets authenticated as a user, and information that describes actions they are permitted on your network. It also includes the management of descriptive information about the user and how and by whom that information can be accessed and modified. Managed entities typically include users, hardware and network resources and even applications.
NSG can deploy a solution that can provide following functionality -

• Creation, management and deletion of identity of objects connected on your network.
• User’s login management to include password complexity, location restriction, unsuccessful login attempts control, environment of what they can see and access and level of access to local, network and cloud resources.
• User role and group management. Similar types of needs and access requirement using groups and roles for access.

Two-Factor Authentication

You have heard it! Cyberattacks are rampant, your IT infrastructure is most vulnerable due to exploits lie the Heartbleed that left everyone's login information potentially up for grabs. Techniques like trojan horse, key stroke recordings make your user login vulnerable. You can not afford to ignore this and with an effort to single sign on, one password stolen gives bad actors potentially the key to your finances, your privacy, health, and your precious customer and business data.
NSG recommends that you really need is a second way to verify yourself, known as two-factor authentication. Using free radius, Google or Microsoft Authenticator, we can deploy and secure your data very cost effectively.