Cybersecurity/IT Best Practices/Policies

·        Evaluate current policies and provide input on areas that might be lacking

·        Create new policy templates using best practices

·        Password policies

·        Acceptable user policies

·        Software/Operating System Update policies/tracking

·        Business Continuity Planning

·        Cybersecurity Response Plans

·        Backup policies

Cyber Awareness Training

·        Fake phishing email tests

·        Fake texting tests

·        Fake call tests

·        Training packages for staff

Email Security

·        IP Geo-blocking

·        Known Spam subnets blocking

·        Prevent spoofing with SPF, DKIM, DMARC

·        Virus/Spam filtering

Getting your business ready for Certification with CyberSecure Canada

National Standard CAN/CIOSC 104:2021 Baseline cyber security controls for small and medium organizations.

·        https://ised-isde.canada.ca/site/cybersecure-canada/en

The National Standard includes the 13 cybersecurity controls areas outlined in the Canadian Centre for Cyber Security baseline cybersecurity controls. It also introduces 3 new organizational controls and 2 new baseline controls.  

Organizational controls

• Leadership (new)
• Accountability (new)
• Cybersecurity risk assessment (new)
• Cybersecurity / employee awareness training

Baseline controls

• Develop an incident response plan
• Automatically patch operating systems and applications
• Enable security software
• Securely configure devices
• Use strong user authentication
• Back up and encrypt data
• Establish basic parameter defenses
• Implement access control and authorization
• Secure mobility
• Secure cloud and outsourced IT services
• Secure websites
• Secure portable media
• Point of sale and financial systems (new)
• Computer security log management (new)

Risk Management

·        Review current controls and provide suggestions for improvement

·        Identifying the risks to your organization

·        Assessing the level of each risk and how likely they are to impact your organization

·        Provide you with recommendations on how to mitigate or control the risks

Zero Trust Endpoint Detection (HIPS) and Incident Response (IR)

·        Evaluate current End point products

·        If new deployments are needed evaluate both closed and open-source options and provide report with pro’s and con’s and recommendations based on industry best practices

·        Integrate with Security Operations Centre

·        Incident Response Processes

Security Operations Centre

·        Evaluate setting up in house SOC or outsourcing to another company

·        Evaluate both closed and open-source options

·        SIEM/SOAR functionality – Focusing on Automation

·        Log monitoring

·        Log reporting

·        Security Reports

·        Compliance Reports

·        Incident Response          

Multi Factor Authentication

·        Do your users login to a VPN with only a username and password?

·        Does your MFA rely on SMS?

·        Do you have Offce365 authentication and have not enabled MFA?

·        If you answered yes to any of the above questions, then we can look at making your business more secure with MFA

Firewall evaluation

·        Students are trained on Palo Alto Next-Gen Firewalls

·        Can investigate if your current firewall meets your needs and provide options both closed and open source options

Penetration Testing and Vulnerability Scanning

·        Tenable Nessus Scanning – Using Education Edition

·        Scope of testing will be well defined and no vulnerabilities would be exploited

·        Can involve both internal and external testing to find vulnerable services

Past CSEC Capstone projects that Cambrian students have completed

·        Students testing SentinelOne Antivirus and writing custom ransomware that evaded detection on a fully updated host running the software.

·        Creating Cybersecurity Educational Materials for a First Nations community to try to educate their community about phishing attacks, MFA, using secure passwords online etc.. There was a measurable impact on the community and it started some very good conversations around Cybersecurity.

·        Cyber Awareness and sending fake emails using systems like Phish line and KnownBe4.

·        Exploring Splunk as a SEIM/SOAR and deploying it, connecting to cloud resources, and pulling down logging information from different systems.

·        Risk Management and Business Continuity planning.

·        Gap Analysis and aligning a security posture to CyberSecure Canada.

·        Gap Analysis and aligning a security posture to NIST.

·        Evaluating different SOC systems and implementing a test SOC at an agency. (had a focus on some open source SOC’s like Wazuh)

·        Network Segmentation and Zero Trust policies.

·        Creating a DevSecOps Jenkins pipeline using OWASP and open-source toolsets. They undertook the deployment, integration, and configuration of these tools with the Jenkins pipeline.