Cybersecurity
In an environment where security is increasingly important, we must have the most advanced methods to detect and prevent possible attacks against our organisations.
Methods of attack have changed in the last few years, changing from targeted attacks to indiscriminate attacks, where anyone can be the target of cybercriminals. Traditional security methods, on their own, are no longer sufficient, and we must complement them with other more advanced security measures.
The most vulnerable point of all our organisations are the employees themselves and users of the companies, who, with the simple fact of clicking a link in an e-mail, can compromise all of the company’s information.
In addition, new rules, regulations, and laws, as may be the new GDPR (General Data Protection Regulation), of the European Union, that require us to increase the security measures of personal data.
At BeClever, we will help you to complement traditional measures with measures that are more advanced in cybersecurity, so that you can minimise the risks and attack surface.
There are two types of users in any company, users with normal permissions, and users with administrator permissions. Obviously, the risk of the latter is far superior to that of the former, although in a cyberattack, cybercriminals can escalate their privilege level from normal users to administrators, when they will be able to exploit at will all the company’s information.
To protect user permissions at BeClever we focus on identity management solutions (IAM-Identity and Access Management), which will allow companies to effectively manage user permissions, based on roles, by automating provisioning and deprovisioning and user registration/cancellation/modification operations. For access management, we provide Single Sign-on solutions and double Authentication Factor solutions.
Privileged Access Management (PAM) solutions will allow us to securitise access of administrator users with privileged access, preventing these users from having passwords that allow cybercriminals to exploit the most serious vulnerabilities.
We will also cover other security aspects such as auditing of accesses and permissions, vulnerability scanning, delegation of permissions, data masking, etc.
Identity Management
Historically, the IT department has been responsible for creating the accounts required with the corresponding permissions in the systems and applications of the company, of the employees and users of the company. At BeClever we want to shed new light on provisioning of permissions to people, based on assigning minimum permissions by roles. So, after defining all the roles of the company, and the permissions assigned to each role, registering each employee/user will be carried out automatically, without the need for a manual operation by IT, avoiding manual work that provides no added-value, and that can be prone to errors.
In addition, identity management will help us comply with new regulations, where assignment of minimum permissions is indicated, and the online auditing of the permissions of each employee, easily obtained with Identity Management solutions using attestation processes.
Among the manufacturers we work with are the following
3.2. Management of Privileged Accounts
System administrators in the IT departments of companies need privileged access to the different systems. The problem lies in whether they potentially must have such access on a continuous basis. At BeClever we think not. We are committed to a Privileged Accounts Management that allows us to securitise access of administrator users to the different systems susceptible to being administered (from a communications device, to a server, database or even, social networks of company), so that we avoid possible identity theft by a cybercriminal, and we can audit the sessions of our administrators.
Among the manufacturers we work with are the following
Single Sign-On y Federation
To improve the usability of our employees and users, we advocate Single Sign-on or Federation solutions, which will allow our users to login only once, and that the necessary credentials are injected automatically in the applications they use.
Among the manufacturers we work with are the following
2FA - Two Authentication Factor
It is important to ensure that access to the various applications by employees and users is done by whoever he/she claims to be, thus avoiding possible identity theft. To do this, we advocate two authentication factor solutions to ensure that whoever is trying to connect to is who he/she claims to be.
Among the manufacturers we work with are the following
Password Management
The unlocking or resetting of a password of an account of an employee/user is usually one of the most common tasks of an IT department. Therefore, we propose implementing a solution for self-management of passwords for employees/users, to eliminate these tasks with very little added-value carried out by their administrators, extending the service offered to employees and users to 24×7.
Among the manufacturers we work with are the following
Data Governance
It is important to know the access permissions of the employees and users to company data. These links are usually governed by security group membership, which often tend to be nested, losing control of such permissions. With a data governance solution, we can have the real vision of the permissions of each person, by granting or denying these permissions quickly and easily, with the included possibility of these permissions being managed by the person in charge of that document in particular.
Among the manufacturers we work with are the following
Audit of Accesses and Permissions
We can audit accesses and operations that our employees perform, so that we can detect unauthorised access attempts, or suspicious operations. As well, we will be able to audit operations on any file server, operations against the Active Directory, databases, etc. in real time, and with immediate notifications if necessary.
Among the manufacturers we work with are the following
Permit Delegation
Active Directory is a critical element in companies, since it has become the centre of the permissions of users. As such, Active Directory administrators have become a critical security point. For this reason, at BeClever we advocate helping administrators to implement a policy of minimum administration permissions via delegation, so that all operations are as secure as possible and are fully audited. This delegation may be on specific operations or on specific parts of the Active Directory.
Among the manufacturers we work with are the following
Data Masking
When we talk about structured data in databases, we should contemplate both the databases of productive environments and non-productive environments (development, pre-production, quality, etc.). The latter consist of copies of productive databases that are made with greater or lesser periodicity. The problem lies in the fact that there is certain data that should be pseudonymised and masked to create these non-productive databases, and this pseudonymisation and masking process is not usually very common in backup processes. At BeClever we want to help you to solve this problem.
Additionally, for productive environments and users with administrator permissions, we can also perform a dynamic masking of data that require it.
Among the manufacturers we work with are the following
Source Code Analysis
We can detect security breaches in custom developed applications, so that we can eliminate many vulnerabilities of our code before it reaches production.
Among the manufacturers we work with are the following
Anti-malware
Antivirus/anti-malware solutions continue to be essential to stop most attacks by cybercriminals, and therefore, at BeClever, we will help you protect in the best possible way both your IT infrastructure of user computers, and servers.
Among the manufacturers we work with are the following
Firewall and Web Application Firewall
As is the case with anti-virus, firewall is one of the most widespread solutions in companies. Again, it is one of the most efficient mechanisms for our protection. At BeClever we also want to promote WAF (Web Application Firewall) solutions, which will allow us to also securitise our applications, in the same way as a firewall securitises our network.
Vulnerability Analysis
We will analyse your systems and applications, looking for potential vulnerabilities in them so that we can arrange for the most secure applications and systems as possible.