Services
Identify
The Identify phase is the first step of five within the NIST Cybersecurity Framework, aimed at grasping and managing risks to, from, and within an organization’s systems, data, assets, and capabilities. It centers on enhancing awareness of the cybersecurity stance by cataloging and prioritizing assets, identifying key infrastructure, data, and processes, and assessing the potential impact of incidents. SAS’s key offerings include:
- Security Assessment & Consulting (NIST CSF / vCISO)
- Cyber Risk & Attack Surface Report (ASR)
- Identity Governance & Administration (IGA)
- Governance, Regulatory, & Compliance Analysis (GRC)
Protect
The Protect phase is the second step of five within the NIST Cybersecurity Framework, focusing on implementing safeguards and measures to ensure the protection of systems, data, and assets against threats. This phase aims to implement a proactive approach, establishing robust protective measures to mitigate identifiable risks. SAS’s key offerings include:
- Compliance Readiness (CMMC, NIST, UAR, SEC, HIPAA, ISO, CIS, PCI-DSS, COBIT, HITRUST, CLOUD)
- Incident Response & Disaster Recovery Planning (IRP/DRP)
- Crisis Team (legal representation, breach coaching & cyber-insurance & warranties)
- Penetration Testing & Gap Analysis
- Cloud Backup (BaaS) & Cloud Enablement
- Infrastructure as a Service (IaaS)
- Education & Awareness Training (Phishing Simulations)
- Microsoft Licensing
Detect
The Detect phase is the third step of five within the NIST Cybersecurity Framework, focusing on identifying threats and events quickly. This phase involves implementing capabilities to detect and analyze cybersecurity incidents promptly, allowing organizations to execute actions to minimize the impact of potential breaches. SAS’s key offerings include:
- Managed Security Services (MSS, MDR, EDR, XDR, Email)
- SIEM as a Service (24/7 SOC)
- Managed Network Services (SD-WAN, Firewalls, Connectivity, SASE)
- MDR for Microsoft (M365, Entra, Azure, GovCloud)
Respond
The Respond phase is the fourth step of five within the NIST Cybersecurity Framework, focusing on actions in response to detected cybersecurity incidents. It involves developing and implementing an effective incident response plan to contain the impact of incidents, mitigate vulnerabilities, and restore normal operations. SAS’s key offerings include:
- Managed Detection & Response (MDR)
- Disaster Recovery as a Service (DRaaS)
- Incident Response & Remediation (IR)
- Digital Forensics Investigations (DFIR)
Recover
The Recover phase is the fifth and final step within the NIST Cybersecurity Framework and refers to the after actions taken to restore and recover from the impacts of a cybersecurity incident. SAS’s key offerings include:
- Table-Top Exercises (IRP review & evolution)
- Post-Incident Analysis (vCISO)
