Cyber Security Consultant
Budget: ₹1,250 – ₹2,500 INR
Need an expert who can support in
MDR / EDR: Endpoint detection and response (EDR) - Protecting an endpoint against cyber threats
Managed detection and response (MDR) - MDR includes everything that it needs to protect itself against the evolving cyber threat landscape.
MFA: Multifactor Authentication & required tools like Authenticator, VIP Access etc
Active Directory Hardening and LAPS
Active Directory Security Hardening to mitigate various attack techniques within privilege escalation, obtaining remote access, lateral movement and data exfiltration
Local Administrator Password Solution (LAPS) provides management of local account passwords of domain joined computers. Passwords are stored in Active Directory (AD) and protected by ACL, so only eligible users can read it or request its reset.
Quarterly Vulnerability Scanning:Good understaning of VA scans & various tools related to VA
Privileged Access management:Privileged access management (PAM) consists of the cybersecurity strategies and technologies for exerting control over the elevated (“privileged”) access and permissions for users, accounts, processes, and systems across an IT environment.
Risk Assessment (NIST /ISO etc)
The National Institute of Standards and Technology (NIST) and the International Organization for Standardization (ISO) are the leading standards bodies in cybersecurity
Person needs to have SME level knowledge on these frameworks
Security Assessment Training
Security Policy Review and Development
- Process
- Assessment & Recommendations
Penetration Test Penetration Test
-Process
-Tools
- Assessment & Recommendations
Additional Logging and Monitoring (SIEM) Additional Logging and Monitoring (SIEM)
-Process
-Tools (SolarWinds Papertrail, LogDNA, Graylog, ManageEngine EventLog Analyzer, LogFusion, Netwrix Event Log Manager, XpoLog, Sumo Logic)
- Assessment & Reccomendations
DLP Data Loss Prevention (DLP) is the practice of detecting and preventing data breaches, exfiltration, or unwanted destruction of sensitive data . Organizations use DLP to protect and secure their data and comply with regulations.
MDR / EDR: Endpoint detection and response (EDR) - Protecting an endpoint against cyber threats
Managed detection and response (MDR) - MDR includes everything that it needs to protect itself against the evolving cyber threat landscape.
MFA: Multifactor Authentication & required tools like Authenticator, VIP Access etc
Active Directory Hardening and LAPS
Active Directory Security Hardening to mitigate various attack techniques within privilege escalation, obtaining remote access, lateral movement and data exfiltration
Local Administrator Password Solution (LAPS) provides management of local account passwords of domain joined computers. Passwords are stored in Active Directory (AD) and protected by ACL, so only eligible users can read it or request its reset.
Quarterly Vulnerability Scanning:Good understaning of VA scans & various tools related to VA
Privileged Access management:Privileged access management (PAM) consists of the cybersecurity strategies and technologies for exerting control over the elevated (“privileged”) access and permissions for users, accounts, processes, and systems across an IT environment.
Risk Assessment (NIST /ISO etc)
The National Institute of Standards and Technology (NIST) and the International Organization for Standardization (ISO) are the leading standards bodies in cybersecurity
Person needs to have SME level knowledge on these frameworks
Security Assessment Training
Security Policy Review and Development
- Process
- Assessment & Recommendations
Penetration Test Penetration Test
-Process
-Tools
- Assessment & Recommendations
Additional Logging and Monitoring (SIEM) Additional Logging and Monitoring (SIEM)
-Process
-Tools (SolarWinds Papertrail, LogDNA, Graylog, ManageEngine EventLog Analyzer, LogFusion, Netwrix Event Log Manager, XpoLog, Sumo Logic)
- Assessment & Reccomendations
DLP Data Loss Prevention (DLP) is the practice of detecting and preventing data breaches, exfiltration, or unwanted destruction of sensitive data . Organizations use DLP to protect and secure their data and comply with regulations.