Professional Services

Cloud Readiness Assessment – Identifies the dependencies and impact on your existing infrastructure and prepares you to begin adopting Cloud-based infrastructure, services and solutions.  

Tagging Strategy – Creates a proper tagging strategy that optimizes cost, policy enforcement, governance and automation. This will provide rich reporting and comprehensive dashboards to bring visibility and communication across the organization.  

Well-Architected Review – Assesses workloads to ensure that you’re following best practices in accordance with Operational Excellence, Security, Reliability Performance Efficiency, and Cost Optimization. The assessment will provide a remediation plan to address gaps and satisfy audit requirements.    

Cloud Security Health Check – Diagnoses your security posture, policies and processes specific to cloud workloads using cloud security tools and cloud security experts.  

Cloud Security or Compromise Assessment – Assess cloud platforms for excessive permissions, vulnerabilities, and other misconfigurations.

Implementation – Servers, storage, and virtualization solutions are designed, deployed and documented with best practices and considerations of reliability and performance.  

Health Check – Understand current health of servers, storage and virtual machine environment in order to optimize performance, maximize resources, roadmap for future improvements and mitigate risk.  

Active Directory Health & Capacity Assessment – Understand both how the Active Directory is configured and possible opportunities for improvement as we review the infrastructure, domain controllers, sites, namespace, authentication, replication, patching and more.   

Disaster Recovery Assessment – Understand the current backup strategy measuring speed, network throughput, client availability, backup server availability, media type and architecture to identify opportunities for improvement such as architecture changes and complementary technologies to support DR objectives.  

Cloud Backup Assessment – As a supplement to the Disaster Recovery Assessment, Bird Rock Systems will analyze the return on investment of moving to cloud backup and disaster recovery versus your current process.  

Vulnerability Assessment and Management – Report of identified vulnerabilities, identified false positives and a prioritized list of recommendations. Accelerate remediation with prioritized guidance via strategic partnership.  

Patch Management  – Manage infrastructure maintenance by gathering asset inventory, gather vulnerability information and relevancy, remediate, and documentation.

Penetration Testing (Network, Wireless, Firewall, Active Directory, Web Application) – Identify areas of security weaknesses against a red team with the objective of circumventing security controls. 

Social Engineering – Create awareness of how users fair against the use of social deception to gain confidential and personal information by means of a phishing attack, phone, physical penetration test or OSINT/Reconnaissance Assessment. 

Ransomware Readiness Assessment – Evaluates your organization’s ability to withstand a ransomware attack, helping security leaders understand any impact or gaps in their cybersecurity defenses.

Security Roadmap – Prioritized security plan based on best practices, current security gaps and compliance regulations.  

Security Assessment* – Have a holistic view of your current security posture and a prioritized list of recommendations to strengthen security as well as prepare for a security audit. Includes Health Checks for all technical solutions and more. 

SOAR Tool Implementation & Tuning – After your SOAR tool is deployed in your environment get expert help needed to effectively utilize the tool including application integrations, workflow deployment, tuning to fit your environment and needs and expert training.

Incident Response – In addition to a response plan, emergency support from an incident response team will assist with containing an attack and stopping further damage. The response team can also assist with recovering encryption keys for ransomware attacks by negotiating bitcoin, gaining proof of life and transferring ransom.  

Security Forensics and Compromise Assessment – Identify how an attacker gained access, what data was accessed and if the intruder is still present. 

Managing Human Risk Program – Get flexible support and optimize your purchased human risk products from KnowBe4 or Mimecast or support the development of your own Human Risk Program. Remain in compliance with regulation and cyber insurance. 

Active Directory Risk review (ADRR) – Provide a risk-based view of the client’s active directory infrastructure, accounts, roles, groups, and privileges. 

Endpoint Security Assessment – Assess endpoint host computers to identify vulnerabilities, missing patches, and weak security settings. 

Endpoint Compromise Assessment – Identify current active, or past, threat activity on endpoint host computers that may be comprising your environment 

Advanced Data Discovery and Data Security Assessment – Comprehensive discovery scan and assessment of sensitive data with recommendations for the handling of personal data, data privacy practices and incident response procedures.  

Sensitive Data Mapping – Determine the extent of sensitive data, where data is located, how data should be handled and secured in relation to your compliance frameworks (ie. HIPAA, CCPA, GDPR, HITRUST, PCI, etc.).  

Compliance and Consumer Request Assessment – Documented process and recommendations that address legal, compliance, operational and technical controls to manage and respond to consumer requests of data, evidence of data or requests to delete data. 

Virtual Data Protection Officer (vDPO) – A dedicated resource that ensures your organization complies with the legislation, acts accordingly regarding data protection practices and has general ownership of data processing activities.  

Security Policy Assessment – A full assessment of your compliance journey that includes where you are currently compliant with regulations, where your compliance gaps exist and expert recommendations on how to achieve full compliance for the regulations.  

Legal Assessment – Documented incident response plan that identifies key team members, communication plan, insurance coverage and law enforcement.  

Managing Human Risk Program – Get flexible support and optimize your purchased human risk products from KnowBe4 or Mimecast or support the development of your own Human Risk Program. Remain in compliance with regulation and cyber insurance.  

Automated Compliance as a Service – Leverage advanced security and automation platforms that help you spend less time on manual compliance activities, audit preparation, and error-prone processes. Get continuous monitoring controls that seamless expand your security efforts as you scale.

Tagging Planning & Strategy – Create a proper tagging strategy that optimizes cost, policy enforcement, governance and automation. This will provide rich reporting and comprehensive dashboards to bring visibility and communication across the organization 

Indian Gaming Casino CIS Compliance Security Policy Assessment – A full assessment of your  journey towards gaming information security standards, “GLI Gaming Security Framework Module 1 (GLI-GSF-1): Gaming Information Security (GIS) Common Controls Audit”.  This assessment includes where you are currently compliant with regulations, where your compliance gaps exist and expert recommendations on how to achieve full compliance for the regulations.