We work with Managed Service Providers (MSPs) and Software Developers to provide additional support and training. When required, our objective is to seamlessly embed into the team as an additional security consultant. Our intention is to work on behalf of your organisation, as an extension to your team. All of these support services can be white labelled including:
- Tenable Vulnerability Management support
- Our phishing_secure programme
- Phishing Awareness Training
- Secure Coding workshop training
- Training, speaking and workshops for private events
- Security consultancy
Vulnerability Management Support
System Secure is partnered with Tenable; offering both reselling and technical support services for Tenable customers.
For Managed Service Providers (MSPs) and IT departments looking to install and configure Tenable Nessus for the very first time; we offer a configuration and technical support service to help get started. This includes initial training for analysts, hands on support with initial configuration, and on-going technical support, such as debugging configuration and integrations issues.
We also provide for smaller MSPs and IT departments who only require vulnerability management for a small number of services. We can provide a Tenable vulnerability monitoring agent for any number of individual services. This can be an affordable solution for smaller MSPs to begin offering robust cybersecurity solutions.
The Phishing Secure programme
Our phishing_secure programme helps Managed Service Providers (MSPs) and IT departments to combat social engineering based attacks. Both you and your customers organisations can be better protected through a combination of training, simulation and regular updates on the most current trends and attacks.
Compare options included in our Phishing Secure programmeThe programme is a partnership; anyone can sign up as a silver partner for free, to access monthly updates and alerts.
The gold partnership programme allows an organisation access to all our training resources, and regular phishing simulation. This allows an organisation to assess and demonstrate their state of readiness to prevent breaches.
Through this combination of awareness updates, training and assessment; we can protect our users both in the workplace and with their own devices.
Phishing Awareness Training
Should your organisation, or your customers require meaningful cybersecurity awareness training, we have the perfect service for you. Our trainers and not just experts in cyber security, they are expert trainers.
We promise to deliver meaningful, impactful and challenging training that actually works. We deliver this training live, either online or in-person, in 90 minute sessions. Phishing Awareness Training can be facilitated in any UK company premises or venue, with up to 4 sessions per day per trainer.
There is no substitute for in-person training; being accountable to a trainer and other colleagues. These live session allow for discussion about current issues, and allowing space to ask difficult questions. Each session include practical activities, examples demonstrating “how to create an effective scam” and exercises to improve an individuals security posture at work and with their personal devices.
“[The training] was very engaging and the information easy to understand, particularly as we work in a very confidential environment and also typically have less ‘techy’ staff. The delivery was fun, with lots of laughter, and [our trainer] was clearly passionate about phishing awareness and protecting individuals/organisations. The real life examples were really helpful, as well as practical tips for improving our security” – Lauren
The key to our success in this training; is to reach each attendee on an emotional affective level, as well as intellectually. In the case of cyber security; ALL scams rely on triggering the affective domain. Intellectually; we can all recognise a scam after the fact, intellect alone is not enough. Emotions are required to make scams successful, therefore recognition and control of the right emotions are the key to make the training successful.
In short – if scams use emotions, scam prevention must include emotions. Our Phishing Awareness Training will impact you both intellectually and emotionally.
Secure Coding workshop training
Anyone familiar with the software development lifecycle will recognise that most bugs are injected at the start of the project, but rarely found until later. The later it takes to detect the bug, the more expensive it is to rectify.
Note: the cost to repair defects increases, the later it is found.
We offer secure coding workshops to help developers to get started on a secure path. This helps them to find and remediate errors and threats early on long before they get picked up by a penetration test. These secure coding workshops ultimately save time and money later on. We highly recommend these sessions for anyone working on projects that are likely to have to comply with frameworks like PCI DSS.
These can be arranged specially for our clients, however we also occasionally open these up for anyone to join. Get in touch to discuss how we can support you with secure coding.
Training, speaking and workshops for private events
We have been working in IT and cyber security for a long time, in a wide range of situations. Also we love to talk and share what we know. We are more than happy to speak to your company, event or group about anything cyber security related. From the technical principles of secure coding, to things the average mobile device user can do to stay safe. Our most common subjects are:
- Secure app/website development
- The difference between vulnerability management and penetration testing
- Live hacking demonstrations
- Trending scams; how to recognise, validate and prevent them
Please get in touch and invite us to speak at your next event.
Security Consultancy
For everything else, there’s security consultancy. Not all client requirements fit into one of the above boxes. This doesn’t mean that we can’t offer a service that is of value and addresses their concerns though.
Typically we can test anything that is network-accessible, either via ethernet, Wi-Fi, other wireless/cellular networks or via the Internet. We can also provide other services that aren’t strictly testing, such as giving advice, reviewing design documentation, pure code review, and so on.
Basically, we will consider any requirement even if it doesn’t fit into one of the traditional testing disciplines.
Enquire about our security consultancy services
Get in touch to find out more about how we can support you.