SOC & CERT

Cybersecurity has become a part of the overall strategy of large companies and is also evolving with our medium and smaller customers. Similarly, government leaders in all countries have put or are putting in place regulations and an organization that meets this need, to ensure social and economic peace as much as possible. Whether for Governments, for companies individually or grouped by sector of activity, we can intervene on behalf of our clients from the very beginning of the reflection on the security of Cyberspace or information systems. In other cases, our clients call upon our services for specific, specialized needs, to complement the services already in place or to audit their global or more specialized approach to their security system.

In all of these areas, we have an organization and experts with the necessary experience and competence to accompany business and government leaders and cybersecurity professionals to effectively enhance cyberspace security.

SOC & CSIRT/CERT

Our services are focused on creating and developing our clients’ capabilities to effectively secure their cyber environment by quickly detecting and mitigating existing threats and incidents as they occur. We build, develop and optimize our clients’ Security Operations Centers (SOC) and Computer Emergency Response Team/Computer Security Incidents Response Teams (CERT/CSIRT) services and provide them with the latest Threat Intelligence data, focusing on our clients’ local content.In all of these areas, we have an organization and experts with the necessary experience and competence to accompany business and government leaders and cybersecurity professionals to effectively enhance cyberspace security.

With respect to CERT/CSIRT & SOC our core activities, in the service of our customers, include:
  • Extensive monitoring of the Internet, including underground activities (forums, etc.), to detect symptoms of planned or executed attacks,
  • Detection of cybersecurity threats and incidents (phishing, botnets, APT) endangering the activities of the client organization,
  • Provision of cybersecurity information to security teams,
  • Immediate actions following information about a security incident and until the end of the incident is detected, including supporting the crisis management process in the event of a major impact incident, mitigating its impact, and analyzing the execution of the process implemented to improve its future effectiveness,
  • Immediate actions following the detection of vulnerabilities in information systems, contributing to their effective elimination,
  • Improving our Client's competences in the face of these threats, by developing the competencies (both organizational and technical) of the IT security teams through trainings and exercises,
  • Assisting our Client in the design, implementation, and audit of its internal CSIRT (Computer Security Incident Response Teams) and/or its internal SOC (Security Operations Center).

We offer a strengthening of the client’s skills in the avoidance, identification and mitigation of IT threats and incidents, as well as support to the client in the management of IT threats and incidents. Our services are mainly aimed at the IT security teams of large entities, their SOC (Security Operations Centers) and their CERT/CSIRT (Computer Emergency Response Teams/Computer Security Incident Response Teams).

This complete service includes services:​
  • Creation and development of a SOC and/or CERT/CSIRT internally
  • Security Incident Management Maturity Audits
  • Trainings, workshops and exercises for the SOC and CERT/CSIRT teams
  • Supply of Cyber Threat Intelligence feeds
  • Outsourcing of SOC (each of or all three lines) and CERT/CSIRT operations