Managed IT Support Services

Issues

• High volumes of incidents;

• Data loss incidents;

• Client churn;

• Frequent system downtimes;

• Overall performance degradation of the customer's business systems;

• Absence of lifecycle management for accounts and secrets.

Loss: €98,000

What we did

• Held a full infrastructure and process audit;

• Established account lifecycle management;

• Set up incident and event management;

• Configured the monitoring system;

• Configured the log collection system.

Value added

• Crucial issues were prioritized;

• An issue resolution roadmap was created;

• A centralized system for managing users and their lifecycles was integrated;

• Security measures for critical systems were enhanced;

• Internal systems and servers were removed from the external segment of the Internet;

• Load and system status monitoring was introduced.

Issues

• Absence of patch management and software lifecycle processes;

• No asset management in place;

• Emergence of shadow IT;

• Network-related issues.

Loss: €78,000

What we did

• Integrated an SIEM solution;

• Built a DMZ and configured firewall systems;

• Established patch management and update processes;

• Configured and optimized a monitoring system solution;

• Integrated a complete asset management solution.

Value added

• The roadmap was adjusted to align with existing information security challenges;

• Network and server transparency for both the customer and our team was enhanced;

• The number of incidents was significantly reduced.

Issues

• Massive DDoS attacks on corporate resources;

• A “heisenbug” in the infrastructure affecting productivity;

• Credential brute-force attacks and data leaks;

• VPN services did not cover business and information security tasks.

Loss: €13,700

What we did

• Implemented a CDN;

• Configured a web application firewall (WAF);

• Tightened network policies and enhanced firewall rules;

• Established a new VPN protocol with MFA integration;

• Relocated the majority of systems to the internal network;

• Optimized resource consumption.

Value added

• Public resource security was enhanced;

• Response speed of the company's website reached ~200ms per request;

• SLA of 99.99% for public system operations was met;

• Cloud infrastructure costs (specifically AWS) were optimized;

• Company losses due to security lapses were reduced.

Issues

• Inconsistent authentication methods across systems;

• Undefined or misaligned IT security and management policies;

• Multiple sources for AAA (Authentication, Authorization, and Accounting);

• Absence of security logs;

• Data leakages.

Loss: €3,000

What we did

• Implemented SSO for 90% of the systems;

• Unified access logs across the infrastructure;

• Enhanced IT security event management;

• Integrated an SIEM solution;

• Implemented the ETL process for critical data;

• Introduced advanced encryption settings for data, backups, and storage;

• Defined and implemented IT Security policies.

Value added

• Oversight of employee access to information systems was enhanced;

• Event auditing and access control to information were streamlined;

• User experiences across systems were improved;

• System performance was boosted;

• Process and data classification protocols were established;

• External ISO 27001 and SoC 2 audits were performed successfully.