You’ve partnered with a mature managed services provider (MSP), and they’ve implemented various cybersecurity solutions to help keep you safe from modern threats. You should feel good about your cybersecurity posture, but you still feel uneasy about it. Why?
Sight Unseen
Except for a few user-facing cybersecurity technologies such as multi-factor authentication, most cybersecurity systems are completely hidden from the user experience. So, aside from an agreement with your MSP stating that they will provide you with a specific cybersecurity service, there’s little additional evidence to give you the confidence to know you are protected.
Fast forward to that time each year when you must renew your cyber liability insurance and check “Yes” or “No” on countless cybersecurity solutions you’re supposed to have in place. You ask your MSP for help and check the boxes based on their word. But where’s the proof? Shouldn’t you have something to back up your answers in case you have a future insurance claim?
This is why most business owners still feel uneasy about their cybersecurity posture, despite partnering with a qualified and capable MSP. What they’re missing is evidence, available automatically without having to ask the MSP to compile a formal report. The solution: EnsureDetect™.
EnsureDetect™ Attack Surface Management
With EnsureDetect™, an independent audit of your various technology and cybersecurity systems is conducted every 8 hours and then compiled into a comprehensive monthly report. But the audit doesn’t just check to see whether or not a certain protection is in place. It checks to see if the system is currently protected down to the specific configuration that’s required.
Example: Many regulations require businesses to protect information at rest using encryption. For Microsoft Windows, this means using BitLocker. What you may not realize is that enabling BitLocker doesn’t necessarily mean your information is encrypted. It is possible for BitLocker to be enabled but the device to be in a decrypted state. Therefore, when auditing and attesting the status of your BitLocker encryption, it is important that the encryption state is reported, not whether BitLocker is turned on or off. That’s exactly what EnsureDetect™ does. It audits down to the specific configurations that matter for your security and compliance.
In your monthly report, you receive an attestation for many critical cybersecurity services and configurations, including:
Domains & Email
- Email Threat Protection
- Sender Policy Framework (SPF)
- Domain-based Message Authentication, Reporting, and Conformance (DMARC)
- DomainKeys Identified Email (DKIM)
- Domain Expiration
Multi-Factor Authentication (MFA)
- Microsoft 365 built-in MFA (active and inactive users)
- Entra ID Conditional Access MFA (active and inactive users)
- Duo MFA (active and bypass users)
Computers & Servers
- Endpoint Detection and Response (EDR)
- Domain Name System (DNS) Security
- Guest Account Status
- Remote Desktop Protocol (RDP) Status
- BitLocker Encryption Status
- Firewall Status
Identity & Access Management
- Microsoft 365 Privileged Users
- Microsoft Active Directory Privileged Users
- Users with Credentials Exposed on The Dark Web
Microsoft 365 License Management
- Available (Unassigned) Committed Licenses
- Licensed Users per License Type
Lifecycle Management
- Microsoft Windows end-of-life
- Microsoft Windows Server end-of-life
- Apple macOS end-of-life
- Computer/Server hardware end-of-life
Miscellaneous
- Non-commercial Use Software
- Server Warranty Expiration
Armed with this automatic monthly attestation, business owners can truly trust that their MSP has them adequately protected. Additionally, when attesting to others your cybersecurity posture, you have all the evidence you need to back up your claims.
Managed Change Detection
Mature MSPs work exceptionally hard at implementing effective cybersecurity controls across your various technology systems. Implementing these controls is only half of the battle, though. A third-party provider, such as a website developer, could easily change a setting that inadvertently turns off your email security. Left unchecked, this could pose a significant risk.
However, with EnsureDetect™, we monitor and routinely log changes across all your technology. If one of those changes is unapproved or deviates from our established standards, a ticket is automatically generated for our Cybersecurity & Compliance team to investigate. In the example of a website developer inadvertently disabling your email security, we could detect and proactively fix that change within a matter of hours.
Detecting Dormant Threats
Finally, EnsureDetect™ can help alert on potential threats that are sitting dormant in your systems. In many modern cyber-attacks, subtle changes are made in your technology that aren’t necessarily detected as malicious on their own. By alerting on unexpected changes, we can review a timeline of every change that has taken place in your technology and analyze the behavior for threat characteristics. This allows us to detect and eliminate many threats before they have a chance to execute their attack and cause damage.
Conclusion
Protecting businesses from modern cyber threats requires far more than monitoring computers and networks. With technology spanning from office networks to the cloud, dozens of platforms must be configured and properly maintained for cybersecurity to be effective. EnsureDetect™ allows us to proactively monitor all your technology, alert when something isn’t configured properly or has been changed unexpectedly, and provide real-time evidence that your business is secure and compliant. Contact us to learn more about EnsureDetect™ and how it can benefit your business.