Month: July 2021

VPLS Offers Comprehensive SOC as a service

VPLS Offers Comprehensive SOC-as-a-Service as Part of Expanded Managed Security Services

News / By
Return to the VPLS Blog

For teams with limited cybersecurity resources, VPLS offers a flexible solution that can be scaled and customized for any enterprise.

Published

Written by

Filed under

With cybersecurity threats evolving at an exponential speed and cloud infrastructure and SaaS applications growing, the need for complex security expertise is at an all-time high. To combat these threats, VPLS has dedicated a division of its Managed Security Services team to specialize in providing Security Operations Center as a service (SOC-as-a-Service). The SOC team provides customers with 24x7x365 real-time monitoring, cyber incident notification, and proactive prevention activities.

When a national trucking logistics company lost their Chief Compliance Officer, the company was at risk of being left vulnerable to costly cybersecurity threats. The organization knew they lacked the expertise required to navigate through securing their complex IT environment on their own and needed an outside expert’s services. By partnering with VPLS and implementing SOC-as-a Service, the company is now able to outsource much of their security responsibilities to VPLS, ultimately increasing their overall security posture to one with enhanced capabilities and 24×7 coverage.

VPLS’s SOC-as-a-Service is powered by security information and event management (SIEM) and eXtended Detection & Response (XDR) technology; hard-wired, wireless, and host-based intrusion detection (IDS); and continuous vulnerability monitoring so that organizations can have complete visibility to detect and respond to issues as soon as they arise.

“VPLS’s SOC-as-a-Service will appeal to security and operations teams at organizations of all sizes and stages of cloud adoption,” says John Headley, Senior Security Engineer at VPLS. “This service is especially valuable for those that are dealing with cyber skill shortages, a remote workforce, alert fatigue, and hiring and resource constraints.”

Read More from this Author

If you enjoyed this article, you'll probably like:

Ransomware VPLS Banner 1200x628

11 Basic Steps to Protect Your Network & Company from Ransomware

Blog Post / By
Return to the VPLS Blog

Published

Written by

Filed under

Cybercrime: A Modern Plague

News articles bearing bad news that another high-profile organization is at the mercy of ransomware have proliferated since the start of the pandemic. So much so that ransomware is now considered its own “pandemic.” 

However, the Colonial Pipeline ransomware attack was the tipping point for the US government to act. Since that attack, several critical pieces of literature were published to help government entities and commercial organizations alike:

Basic Preventative Steps

Referencing the NIST Cybersecurity Framework (NISTIR 8374) that we linked above, let us review NIST’s “basic preventative steps” for improving your ransomware resistance and protecting against the constant threat of compromise. Keen readers will notice a considerable overlap from our recent Ransomware Checklist blog and the preventive steps discussed in NISTIR 8374.

1. Use Antivirus Software at All Times

  • Set all software to scan emails and flash drives automatically.

2. Keep Computers Fully Patched

  • Run scheduled checks to keep everything up to date.

3. Block Access to Ransomware Sites

  • Use security products or services that block access to known ransomware sites.

4. Allow Only Authorized Apps

  • Configure operating systems or use third-party software to allow only authorized applications on computers.

5. Restrict Personally Owned Devices

  • On work networks, ensure only company-approved devices are connected and sharing.

6. Use Standard User Accounts

  • Do not use administrative accounts whenever possible.

7. Avoid Using Personal Apps

  • Personal email, chat, and social media should not be used from work computers.

8. Beware of Unknown Sources

  • Do not open files or click on links from unknown sources unless you first run an antivirus scan or look at links carefully.

9. Make an Incident Recovery Plan

  • Develop and implement an incident recovery plan with defined roles and strategies for decision-making. These strategies can be part of a continuity of operations plan.

10. Backup and Restore

  • Carefully plan, implement, and test a data backup and restoration strategy—and secure and isolate backups of essential data.

11. Know Your Contacts

  • Maintain an up-to-date list of internal and external contacts for ransomware attacks, including law enforcement.

Ransomware Protection as a Service

These resources from the government, especially the basic preventative guidance from NISTIR 8374 that we walked through above, provide critical information that organizations should adopt as a foundation for their security program if they want to stand a chance against ransomware. However, VPLS knows that not every organization has the time, skill, or workforce to implement these cybersecurity musts.

For these organizations, VPLS can take the burden off your IT department with convenient monthly or one-time services that check all the boxes above. We have a comprehensive suite of cybersecurity service offerings, such as SOC as a Service, Managed Firewalls, Backup & DR, Managed Servers, and vCISO Services. All these services can have your organization remediating any critical cybersecurity gaps while dramatically increasing your security posture in little to no time.

John Headley

Read More from this Author

If you enjoyed this article, you'll probably like:

Scroll to Top