All of Cyro’s services have been designed to fulfil the control requirements of any compliance regime.

Our Expertise and Experience:

We’ve been delivering cyber security  and data protection services into the military, public sector and commercial sectors for over 30 years . Our experience and expertise are extensive; here are some the areas our consultants have experience in from previous roles. Please get in touch to see how we can help.

thumbnail_cyro cyber.png

cyro cyber.png

Cyro Cyber

Providing the full range of cyber security services, including CISO (Chief Information Security Officer) support,  SOC (Security operations centre), SIEM (Security incident and event management) Anti Virus, and MDR (Managed Detection and Response) using both in house and partner technologies.

IT MSSP - IT Managed Security Services Provider

Providing the intelligence, insights, toolsets, and analytics, alongside best practice response preparedness, so that, in the event of a cyber breach, your company will be able to mitigate exposure, minimise business losses, and fast track recovery to normal operations.

Incident Response

Penetration testing is the ethical testing of a company's cyber security defences.

Penetration testing can be for a company's entire IT cloud and IT infrastructure, a single application, or for an IoT (Internet of Things) device.
 


A penetration test or "pen test" will emulate the full set of actions that are performed by cyber criminals.  These actions are identified in leading cybersecurity frameworks - and most clearly in the MITRE ATTACK framework.

The objective of a pen test is to report on vulnerabilities that could be exploited, and then report them back to the company, so that the vulnerabilities can be addressed before they are exploited by a cyber attacker.

Penetration testing can be restricted to testing the level of cyber resilience from a technology perspective, or can extend to simulated email phishing tests, where employee cyber awareness and resilience is tested.

Beyond Penetration testing, there is Red Teaming, where a team will test all elements of corporate security defences, including physical security, site access, cyber security, and social engineering elements.  Red Teaming is viewed either as additional to penetration testing, or as an advanced, next level form of penetration test.


Penetration testing

Services and solutions enabling detection of and response to cyber security breaches.   

Services include those delivered from a Cyber Security Operations Centre (SOC or CSOC) where a 24/7 team monitors for cyber breaches, and responds in real time when breaches are identified.

Solutions include technologies that firstly monitor for breaches, secondly flag when the occur, and thirdly facilitate remediation or best available response to a breach.

Managed Detection and Response (MDR) is generally the term used for the service, and Extended Detection and Response (XDR) is the term used for products or solutions used in MDR.

XDR is broken down into Network Detection and Response (NDR) - which deals with identifying threats at the network level, along with providing the appropriate response, and Endpoint Detection and Response (EDR), which deals with identifying threats at the endpoint, along with providing the appropriate response.

Managed Detection and Response  - MDR - and Extended Detection and Response - XDR

From a cyber security perspective, more often than not, it is a supplier failing that is at the root cause of a cyber security breach.  Supply Chain or Third Party Cyber Risk Management enables visibility on how cyber resilient your suppliers are, where the risks are, and allows you to identify steps to mitigate those risks. 

Third Party risk management is essential for maintaining cyber security resilience.  

Supply Chain Cyber Risk Management

A platform, technology and service that monitors network and application activity, and immediately reports events that could be representative of a cyber security attack on your company, either from within or from outside your network.

SIEM - Security Information and Event Management

The service of providing continuous monitoring and control for your entire IT network: a SOC (or CSOC - Cyber Security Operations Centre) includes a team managing automated monitoring services that plug into most or all of your cyber security defence technology, and flags  vulnerabilities and attacks as they occur.  

Also includes the tech platforms and service providers that enable and support efficient resilient security operations. 

The SOC team works with the broader IT team to implement protective and remediator steps when and as required,

Security Operations Centre: SOC Services

Vulnerability management starts with detecting vulnerabilities, progresses to assessing the level of threat, the likelihood of exploit, and the priority of remediation.

Easy to understand reports on remediation status, current level of risk, and the overall remediation program are included as part of a typical vulnerability management platform.

Vulnerability management covers all elements of IT including networks, devices, applications, infrastructure, in both private and public cloud and on premise.

When a vulnerability is discovered, it will be identified and given a CVE (Common Vulnerability and Exposure) number and listed on the MITRE vulnerability database.   Each vulnerability is evaluated by the National Vulnerability Database / NVD team (part of NIST, the US National Institute of Standards and Technology), and then, once evaluated, is given a threat level score, using the Common Vulnerability Scoring System (CVSS).



Vulnerability Management

Knowing the current and potential threats that  present the greatest risk to your orgainisation, and proactively ensuring that the right people, process and technology solutions are in place to mitigate against them.

Threat intelligence is information on specific cyber threats to your organisation.  

Threat intelligence moves the goal posts: rather than responding to an attack, threat intelligence enables an attack to be prevented.  This can be anything from breaking up and arresting a cyber criminal group, to identifying the attack vectors and profiles in advance of attack,  then ensuring sufficient protections and mitigations are in place.  

Threat intelligence is gained from large data sources shared between cyber security companies, on global network and dark web activity, and also from honey pots, which are simulations of an actual company network, that then attract the attacks of criminal groups targeting the specific company.

Threat intelligence enables the delivery of ATP / Advanced Threat Protection.

Threat Intelligence

Endpoint security is providing protection against cyber attack for all an organisations' devices that exist on the edge of a corporate network. This can include servers, PCs, Macs, mobile phones, tablets, other user devices, and IoT (Internet of Things) devices. 

Endpoint security includes: 
EDR (endpoint detection and response), 
EPP (endpoint protection platforms), network firewalls 
IDPS, (intrusion detection and prevention systems), 
NDR (network detection and response), IAM (identity and access management), email security, mobile threat detection, 
SSE (security services edge), 
SIEM (Security Incident and Event Management), 
SOAR (security orchestration automation and response) 
...,all of which collectively are now known as XDR (Extended Detection and Response).

VPNs or Virtual Private Networks are an essential part of endpoint security, protecting against phishing or web-based attacks.

Endpoint Security

RMM covers the services and technologies around network endpoint management, including remote monitoring for performance analysis and cyber security vulnerability status.  Endpoints include mobile devices, laptops, servers, and virtual machines, and extend to anything that can be connected to a network, including cameras, TVs, printers, smart watches, appliances and other devices.

RMM technology is now most commonly SAAS; a cloud based platform and single pane of glass, where a full view of endpoint status is provided.  It operates 24/7 and often includes automated patching of Windows, MacOS and Linux operating systems and other vendor applications.  An RMM system can also allow for the automation of endpoint  tasks - including patching, patch management and installation of applications.

All RMM systems allow engineers to be notified of performance issues and cyber security vulnerabilities so that they can be quickly remediated.

Remote Monitoring and Management - RMM

Providing a platform or a service that enables the safeguarding of sensitive data from unauthorized access, disclosure, alteration, or destruction. 

Data Security Posture Management platform will support data classification, data identification, data location, data encryption, access control management, data flow oversight, and data loss prevention (DLP). 

Security policies and controls for DPSM are managed from the platform.



DSPM enables privacy and security regulations to be complied with,  prevents data breaches, and protects brand reputation.

In the event of a data breach, the necessary information to identify the affected data, assess the gravity and scope of the breach, and identify the remediation approach / next steps is facilitated by the DSPM platform.


Data Security Posture Management (DSPM) 

Understanding network, internet, and systems activity, and being able to flag events that are due to an attack or security breach.