IT Security
Proactive maintenance of your IT
ten cybersecurity statistics that will surprise you:
IT Security Management
Are all your firewalls up to date? Do you regularly audit your workstations and servers? Is all of your organisation’s data – including your customers’ data – adequately protected in full compliance with GDPR standards?
It needs to be. 2019 data reveals that UK businesses are hit by cyberattacks every 50 seconds – an increase of 179% over 2018 – with average losses from breaches soaring from £176,000 to £285,000. These rising expenses are largely due to the fact that the financial impact of a cybersecurity attack can last for multiple years, with cost factors ranging from the legal and regulatory, to the loss of brand equity, customers, and employee productivity.
Securing your organisation’s network, data and infrastructure takes a lot of time and resources – and time and resources cost.
As part of your fully-managed IT services agreement with Quayside, you can be sure that we will diligently keep all of your IT systems secure from the ever-looming threat of cyberattacks. Software, system and patch management is included in our standard fully-managed agreement.
However, many customers are looking to us to provide them with the next level of cyber-security. to vulnerability scanning, risk assessments, software and system updates, disaster recovery and data backup, we provide you with round-the-clock industry-best security practices to protect your organisation.
To find out more about our dedicated security management package, click here.
Network auditing
We make it easy for you to understand your systems
Our network auditing service will give you an invaluable insight into your assets. A full audit will cover all IT infrastructure, and provides a valuable insight into your network.
Using a combination of our expertise and the industry leader in network auditing software, we will audit all machines within your organisation and compile all of this information into a series of reports that we can present to you.
Our reports will give you easily understandable statistics around a multitude of areas, such as device age, operating system distribution, and resource usage. These can be used to help plan hardware and software upgrades, and optimise hardware usage.
To demonstrate the power of our systems, we are offering a FREE basic level audit to businesses. Just fill out the form below, and we will get in touch to arrange your free audit. An audit will provide you with everything you need to make strategic decisions around your network. Knowing the specifications of equipment and how old it is, is vital for your company stakeholders to make informed decisions and formulate an effective equipment renewal plan.
SPECIFICATIONS
Knowing the specifications of your hardware will allow you to optimise the usage of your equipment, allowing you to redistribute conmputing loads.
LONGEVITY
Do you know how old your hardware is? Have you budgeted for replacing it? Our audits will help you build a replacement plan, to help reduce the risk of sudden kit failure.
SECURITY
Are your systems configured in line with industry best practice? Our audits will help reduce security risks.
KNOWLEDGE
Our audits will provide you with incredibly in-depth documentation.
Anti-spam
Our email archiving product will store copies of all inbound and outbound emails – ideal for disaster recovery and compliance purposes.
Our email archiving product will store copies of all inbound and outbound emails – ideal for disaster recovery and compliance purposes.
Firewalls and unified threat management
Malware, spyware, ransomware. Phishing, DDoS, brute force attacks. The list of cyberthreats to your business network grows with each passing day as cybercriminals become increasingly cunning and sophisticated with their attack methods.
Perhaps even more worrying is the fact that any maliciously-minded individual – even those with only basic computer skills – can quickly mount a cyberattack against your business, thanks to the multitude of free tools and cheap online services available on the black market today.
No wonder, then, that cyberattacks are on the rise. More than half (55%) of UK businesses suffered at least one attack in 2019[1] – up from 40% in 2018 – resulting in losses averaging between £176,000 and £285,000[2]. In a world where almost anyone – from organised crime groups to business competitors to disgruntled employees – can make a serious attempt at hacking your network and stealing your valuable data, cybersecurity needs to be the topmost priority.
Quayside Technical Service’s firewall and network security solutions bring your business’s exposure to cyberthreats down to an absolute minimum. With our Unified Threat Management (UTM) systems, we deliver robust protection from a wide range of security threats around both the clock and the calendar – and all from one single appliance to minimise complexity. We provide solutions from multiple vendors, and will install the correct device for your network after consultation with you.
Our UTM’s consolidate essential security functions – including network firewalling, intrusion detection and prevention, antivirus, content filtering, and malware protection – into a single device to ensure complete protection from all threats. In addition, our UTM solutions help you enforce your IT security policies with full PCI DSS compliance, and give you comprehensive control over internet access – for example, allowing employees to update the company Facebook page, but restricting access to their own profiles.
Adding these security devices – or replacing your existing device – is easy. We handle all aspects of implementation and setup, leaving you with a network that is more secure than ever.
%
Percentage of UK businesses that suffered at least one attack in 2019
- 2018 average financial losses from cybercrime (£176,000)
- 2019 average financial losses from cybercrime (£285,000)
Sources:
Anti-virus
Our cloud antivirus platform will protect you from threats, no matter where your users are.
Your remote users will be protected, even though they might not be making a VPN connection to your office. This is a superior solution to traditional managed platforms that need a server at your offices.
As the system is controlled through the cloud, making changes to the protection policies are easy. Similarly, as soon as any infections are detected on the machines, this is reported to the cloud immediately, triggering alerts for us, or an on-site system administrator.
How does it work?
The way that the software works on your computers is also superior. The client software is tiny and installs in seconds. it is always up to date, and scans take a matter of seconds. These faster scans, with lower CPU usage, will help minimise the drain on your laptop’s battery.
The software uses a layered approach to protect your systems. It does not need to download bulky definition files to keep your system protected. As a result, users that often find themselves using 3G/4G to access the Internet will find that they have less issues with the anti-virus software staying up to date.
Installation of our anti-virus product is easy. We will handle all of the installation work for you, including deinstallation of any other anti-virus products that might exist on your devices.
Web filtering
Why use our cloud based web filtering?
These days, it’s easy to take the security of an Internet connection for granted. But that’s a big problem. Most ISP connections are neither secure, nor safe. The ISP’s domain name system (DNS) servers simply take each URL request, look it up, and make the connection. They don’t check where the request is being routed. Even worse, the ISP’s DNS servers themselves may not be hardened or secured. If they are attacked, they and all of their customers could lose all internet connectivity. There’s a smarter solution to these problems.
Our next-generation DNS-level protection product is a straightforward and highly effective way to secure networks, control internet usage, and prevent everyday browsing from becoming a major security risk.
Connectivity, reliability and scalability.
Our DNS Protection resolver servers have multiple points of presence around the globe, with automatic load balancing and automatic failover. No matter where a request originates, it is handled instantaneously at the nearest datacentre, or, if there is an issue, the nearest global point of presence. Our DNS resolver servers use the latest hardware and are fully hardened against DNS cache poisoning, DDoS, and other attacks that target DNS servers. Finally, they have massive processing capacity and headroom to handle internet requests; each cluster can process 30 billion requests per second. Our DNS Protection is a very secure and reliable way for businesses to ensure an always-on connection to the internet.
Stops 88% of Internet-borne malware.
As an example of the kind of access control and security DNS Protection provides, consider cryptojacking, a threat which has recently become very prevalent. With DNS Protection, users can still navigate to a website hijacked with cryptojacking scripts and consume their content, but the connection requests from the cryptojacking addresses are automatically rejected, thereby neutralizing the threat. More dangerous requests—including those to command and control servers, spam relays, botnets, phishing sites, and malware sites — are also automatically blocked. With DNS Protection, businesses can stop up to 88% of malicious inbound network traffic.
At a glance:
- Secure and reliable internet connectivity – Our worldwide network of hardened DNS resolver servers ensures availability.
- No on-site hardware to install – This cloud-based network security layer takes just a few minutes to set up.
- IPv4, IPV6, HTTP, and HTTPS filtering – Advanced traffic filtering covers all devices and users requesting an internet connection.
- 80 web categories – Our extensive web categorization options enable granular user access controls.
- Roaming and mobile user protection – An agent is installed on mobile devices to protect them when they are out of the office.
- WiFi and guest network protection – DNS Protection secures all device types, including Windows®, Linux, Apple® and Android® devices, across guest, WiFi, and corporate LAN connections.
- Policy control by user, group, or IP address – We offer flexible deployment options and policy controls for any connection situation.
- On-demand drill-down reporting – DNS Protection administrators gain full visibility into their network and connections.
- SMB-friendly integrated security – an intuitive online console for a single-pane-of-glass experience.
- Regulatory compliance – Achieve compliance with US and EU privacy laws.
PCI DSS
PCI DSS stands for “Payment Card Industry Device Security Standards”. Essentially it’s an IT security standard for companies that handle credit or debit card transactions, and aims to reduce card fraud. This is done through enforcing controls around the storage, transmission and processing of cardholder data.
PCI DSS compliance is split into six categories, which can be briefly described below:
BUILD AND MAINTAIN A SECURE NETWORK
Install and maintain a firewall configuration to protect data.
Do not use the manufacturer’s default password and other parameters.
PROTECT CARDHOLDER DATA
1. Protect stored data by the use of encryption.
2. Encrypt cardholder data and other secure information during transmission across the Internet.
MANAGEMENT PROGRAMME
1. Use and regularly update anti-virus software.
2. Develop and maintain secure systems and applications.
3. Ensure security updates are applied.
MAINTAIN AN INFO SECURITY POLICY
1. Maintain a policy that addresses information security.
2. Ensure that all staff are aware of their obligations under this policy.
MONITOR YOUR NETWORKS REGULARLY
1. Track and monitor all access to network resources and cardholder data.
2. Regularly test the security systems, and also the processes.
IMPLEMENT STRONG ACCESS CONTROL
1. Restrict data access on a need-to-know basis.
2. Make sure that everyone uses their own logins.
3. Restrict physical access to card data.
How can we help?
As a company that processes credit cards, you will receive letters from your PSP (payment services provider) stating that you need to answer questionnaires and attest to things that you might not really understand, in order to maintain compliance.
Quite often the card processing environment will have been incorrectly profiled and as a result, the questionnaires that need to be submitted will be far more complex than are necessary for the environment.
We are able to assist with this. First of all we will ensure that your environment is profiled correctly.
Next we will interpret these questionnaires in plain English for you and explain how they relate to your business. Lastly, we will ensure that the responses that we submit are correct.
Similarly, your network may require segmentation in order to ensure that the cardholder data environment is compliant. We are able to assist you with this, ensuring that cardholder data is processed using infrastructure that is compliant.
All you need to do is give us a call on 01392 412151 or fill in the form below, and we can take these headaches away from you.
Cyber Essentials
We make the cyber essentials scheme easy! Cyber Essentials is a certification scheme offered by the National Cyber Security Centre. It aims to help protect your organisation against the most common cyber attacks. It encompasses five main technical controls that form the basis of the certification.
How does it help your business?
CREDENCE
Demonstrating that you are making a conscious effort to monitor and improve your cyber security reassures customers and suppliers.
BUSINESS
Certification might even help you gain new business.
KNOWLEDGE
The certification will help you have a clear view of the security levels within your business.
PUBLIC SECTOR
Some Government contracts require the successful tenderer to have Cyber Essentials certification.
Making Cyber Essentials easy
Gaining Cyber Essentials certification in your company is easy. We use a state of the art system that will audit all machines within your organisation and ensure that all of the required technical measures are in place.
Unlike most other offerings, our system will continuously monitor your systems. This ensures that should any of the relevant settings be changed by users or software updates, we are alerted to this, and can take immediate remedial action.
Time is money, and as our system incorporates lots of automation, there is a low cost associated with becoming certified.
We will work with you and complete the required questionnaire. This not only helps assess your current security levels, but also provides insight into areas that you might not have considered as being lacking.
Let's talk
A fully managed agreement gives you predictable spending, SLA backed support and an overall increase in efficiency. Call us on 01392 412151 today for a quote.
Tel:
01392 41 21 51
Email:
hello@qts-ltd.com
Fully managed IT
IT Security
Networking
Disaster Recovery
