Knowledge from our cybersecurity and risk management experts

What is a SIEM Engineer?

Posted by ProCircular Team on Oct 15, 2020 10:03:08 AM

In 1974, the great Mohammed Ali said of his opponent, George Foreman, “His hands can’t hit what his eyes can’t see.” The same principle rings true in the cybersecurity world; we can't stop an attack until we know it is happening. That is why SIEM experts, like ProCircular’s Josh Resch, dedicate themselves to monitoring our clients’ networks for suspicious activity. Although each SIEM product works a little differently, they are all designed to help identify and track early signs of malicious activity on your network. A well-maintained SIEM can drastically reduce recovery time from a security incident by showing exactly where the attacker has been.

0 Comments Click here to read/write comments

Topics: Cybersecurity, Network Security, security incident handling, SIEM, Monitoring

Do we need a SIEM if we already have an IT Solution?

Posted by ProCircular Team on Sep 30, 2020 8:34:50 AM

Yes! SIEM (Security Information and Event Manangement) helps with compliance reporting and real-time incident response by centralizing, analyzing, and reporting data about your organization's security events. Other security software has a narrow scope of detection and remediation. SIEM is the most comprehensive type of defense for your network.

0 Comments Click here to read/write comments

Topics: Network Security, SIEM

Remote administration for the security minded

Posted by ProCircular Team on Feb 13, 2020 2:44:27 PM

Here’s a quick one for all of the administrators and security practitioners. There’s no shortage of third-party programs designed to do remote desktop management and support. And while sure, many of them are secure, the ones we find in use most often are not. The reason being, they tend to be low or no cost solutions. Now, I’m not one to say that security should always be spendy, but let’s be honest, a lot of the time tools are an investment that management is not always willing to invest in. More often then not when we hit a business that is using VNC as their de facto remote management and support tool, the reason behind it is; “Well, it’s free, and we can shadow and control other machines with it for support calls.”

0 Comments Click here to read/write comments

Topics: Cybersecurity, Network Security, Information Security

External VPN with RDP Access - Should you do it?

Posted by ProCircular Team on Jan 22, 2020 10:30:14 AM

You’re sitting on your couch at home, it’s 8:00 on a Saturday night and one of your interns emails you about a new security vulnerability he just heard about on the latest and greatest podcast. You know that this new vulnerability is going to be the first thing to come up during the morning water cooler talk Monday morning. It’s time for you, the great server admin, to take flight and protect your kin!

0 Comments Click here to read/write comments

Topics: Cybersecurity, Network Security, HIPAA, Information Security, Data Security, cybersecurity plan