cybersecurity
Cybersecurity
We check how well your infrastructure is protected, deploy endpoint and perimeter protection, and set up privileged access management and SIEM. The security team receives a configured monitoring system and incident response instructions.
what we deliver
Scope of work
- Security audits: maturity assessment, asset inventory, documentation
- Perimeter protection: Next-Gen Firewall, IPS, anti-spam
- Endpoint protection: antivirus, EDR, device control
- SIEM and monitoring: log source onboarding, event correlation, on-call shifts
- Privileged access management: Indeed PAM, access on request, session recording
- Requirements defined together with your security team: National Bank of Kazakhstan, Kazakhstan informatization law, ISO 27001, 152-FZ for Russian companies
architecture
Solution outline
SOC pipeline
Event sources -> SIEM aggregation -> SOAR automation -> SOC analyst. Feedback loop into policy.
case studies
Related projects
Each card states our role. Some details are withheld under NDA.
Kaspersky endpoint and server protection for Ekibastuz GRES-1
We supplied and rolled out Kaspersky EDR on 900 workstations and 120 servers in Ekibastuz GRES-1's corporate network. The plant's control network was left untouched.
- beforeMixed antivirus
- howKaspersky EDR, 3 waves
- afterOne threat console
- workstations protected
- 900
- corporate segment servers
- 120
- of rollout in agreed windows
- 3 waves
Privileged access management for ForteBank JSC
As part of an integrator team we deployed Indeed PAM in ForteBank's server segment. Administrators and contractors now log in only through a request, and every session is recorded.
- beforeShared admin accounts
- howIndeed PAM
- afterAccess on request
- servers and devices connected
- 400+
- of PAM sessions recorded
- 100%
- from design to acceptance
- 4 months
R-Vision SIEM deployment for a financial institution
For a financial institution we deployed R-Vision SIEM and SOAR, connected more than 40 event sources and handed monitoring over to the client's SOC shift. We worked as a subcontractor.
- beforeScattered logs
- howR-Vision SIEM
- afterResponse playbook
- event sources
- 40+
- monitoring by the client team
- 24/7
- to an incident ticket
- ≤ 5 min