Ensure. It’s how you know.

How do you know that your network hasn’t been compromised? Previously, being unable answer to this question might result in loss of network availability or an embarrassing web site defacement. Today, a myriad of state, federal and industry regulations have thrust ‘How do you know?’ into the realm of legal liability. More than half of the states in the US have enacted computer breach disclosure laws. In the event a client claimed your organization disclosed their personal financial information in violation of a state law, could your firm prove it wasn’t the source of the breach? How will you know?

How will you know? Ensure

Now you can answer the question ‘How do you know?’ via an effective and affordable Network Security Service from BearHill. Ensure is a comprehensive service that provides your organization with the ability to detect and prevent computer security incidents and document compliance with key regulations and standards. Ensure includes the tools, expertise, and reporting necessary to effectively mitigate threats to your computer network resources. What’s more, because Ensure is so affordable a vastly larger cross section of organizations are now able to access essential network security services that were previously only available world’s largest corporations. Ensure. It’s how you know.

What’s a “Network Security Service?”

The best analogy is “an alarm company” for your computer network. The goal of a physical security system is to protect your physical office space and physical assets from intruders.

The goal of Network Security Service provider is to protect your computer network and its information assets from intruders. While the technology required to protect your network and information assets is significantly more complex than that of a traditional alarm system, the principles remain the same. As a network security service provider BearHill provides our clients with a sensor appliance, the BearTrap, which monitors your network for anomalous behavior such as intrusion attempts or computer virus/worm outbreaks. The BearTrap communicates with sophisticated systems in our secure operations center (SOC) that streamline event correlation and threat detection. BearHill has security experts on staff 24 x 7 x 365 to monitor your network, validate alerts, and contact you with suggestions on how to eliminate the threat. Management is simplified via a web-based portal that provides an intuitive graphical representation of your security posture. Weekly, monthly, and quarterly reports document compliance and enable effective governance of networked systems.

Ensure Network Security Service

BearHill’s Ensure network security service provides a network intrusion detection and protection solution that identifies and blocks internal and external threats to your computer network and the information assets that it houses. With Ensure there are no sizeable capital expenditures, maintenance fees, or worrying that the latest whiz-bang information security product you just purchased will be obsolete in 18 months. You won’t have to allot additional headcount to manage a new technology because BearHill’s Ensure service includes access to our team of information security specialists. BearHill’s team of GIAC certified intrusion analysts are available to assist your team 24 hours a day seven days a week.

Key features and benefits of the Ensure Network Security Service include (click to view details):

BearTrap Intrusion Sensor

A key component of BearHill’s Ensure network security service offering is the BearTrap Intrusion sensor. Depending on how the BearTrap is deployed it can provide either intrusion detection or intrusion detection and protection capabilities. The BearTrap sensor is a rack mounted, hardened appliance that has been optimized for intrusion detection and prevention functionality. The BearTrap sensor, its maintenance and signature updates are all included as part of the Ensure service.

Network Security Specialists

BearHill’s strengths are derived from the expertise of an exceptional technical team that has a singular focus: information security. Our team members have diverse backgrounds that range from designing and implementing critical government communications systems, such as the White House Situation Room, to securing the assets of multinational financial investment banking and securities firms. While many companies claim their team is technically competent our team demonstrates it as each member of the Ensure team is a GIAC certified intrusion analyst (GCIA) or a GIAC certified intrusion handler (GCIH).

Design, Implementation and BearTrap Sensor Tuning

As part of the initial implementation of the Ensure service, BearHill security architects will work with your team to determine appropriate placement of the BearTrap sensor(s). BearHill’s team will then implement the BearTrap sensor with a baseline security policy and perform fine tuning of the BearTrap sensor.

24 x 7 Monitoring and Reporting

The BearTrap sensor communicates via a secure channel with BearHill’s Secure Operation Center (SOC) which enables our team to perform 24 x 7 event monitoring and reporting as well as continuous system uptime monitoring. BearHill’s event correlation systems and certified intrusion analysts process event data from the BearTrap and alert you to events that require further investigation. Weekly, monthly and quarterly reports assist your information technology team in managing your network and document compliance with applicable regulations.

Updates and Patches

There is no need to worry about technology obsolescence as baseline policy (signature), operating system, and application updates to the BearTrap are all included in the Ensure service offering. As new threats evolve signature and policy updates to the BearTrap are performed by BearHill’s engineering team. Similarly, new features and updates can be remotely updated to the BearTrap sensor.

Threat Intelligence

Threat Intelligence from our existing client base, relationships with federal authorities and industry organizations enable us to stay ahead of new threats and tag suspicious traffic sources. This results in new methods of attack recognition being incorporated into our systems more rapidly while alerts whose sources are known internet predators being acted on upon swiftly.

Distributed Architecture

Each BearTrap sensor is a self contained unit that can continuously collect alert data and log valuable forensic information even in the event of a carrier outage at your facility. Additionally, BearHill’s SOC is a hardened facility that is connected to the Internet through multiple redundant secure paths and features; tiered physical access controls, multiple fire suppression systems, and both UPS and generator power backup.

Event Log Retention

Raw event log data is compressed and forward to BearHill’s Secure Operations Center (SOC) and each month is encrypted and stored on read-only media. This data can be made available on disk or via secure download to aid in forensic investigations or meet regulatory requirements.

Incident Response Support

Once an event is determined to be an incident your information technology team can call on our team of information security specialists for assistance. BearHill’s team of GIAC certified intrusion analysts and incident handlers are available to provide both phone based and onsite incident response assistance to Ensure network security service clientele.

Cost Effective

There is a reason most organizations choose remotely monitored alarm systems in lieu of armed guards to provide physical security for their organizations, its cost! By utilizing an alarm system you can effectively reduce the risk of a loss due to break in without the expense of having to hire guards. The Ensure Network Security Service provides a complete solution for less than the price of a commercial IDS/IDP product.

A Key to Regulatory Compliance

Being able to answer the question “How do you know?” is an importance piece to the regulatory puzzle. Ensure can assist your firm in complying with important provisions of FFIEC requirements Sarbanes-Oxley, Gramm-Leach-Bliley, HIPAA, and Payment Card Industry guidelines.

Third Party Validation

Documenting ‘how you know’ can be vital to acquiring new client or partner relationships. Through Ensure BearHill can assist you by providing third party validation of your organization’s ongoing information security efforts

Ensure - Quality protection at a value.

Protecting your network shouldn’t cost more than the network. That’s why, with Ensure, BearHill’s goal is to offer exceptional network security services without the exorbitant price tag. Quality protection, at a value, that frees your information technology team to focus on technologies that will create efficiencies to grow your business and profitability.

To Ensure regulatory compliance and network availability, contact BearHill today at 800-618-4487 or info@bearhill.com.