After making an investment in security technologies, it is important to put human intelligence and analysis behind your security systems. ForceOne's Security Analysis Services (SAS) are an easy and powerful way to get the real return on investment of your security technologies.

Benefits of SAS

• Save Money:
  ForceOne’s SAS costs half to a quarter the cost of hiring an full-time security analyst.
• Satisfy Auditors:
  Outsourcing security analysis to an unbiased, independent third party demonstrates diligence and responsible IT governance.
• Meet Compliance Requirements:  
  Many regulations and standards such as SAS-70, PCI/DSS, GLBA, HIPAA, NERC, FFIEC and the NCUA standards require event and security monitoring. ForceOne’s SAS helps ensure compliance with these requirements.
• Data Never Leaves Your Network: 
  Unlike most managed security providers, ForceOne’s SAS does not transmit your data to a distant data center to commingle with other companies. All data remains within your network. This reduces liability and ensures complete confidentiality.
• Proactively Delegate IT Resources: 
  SAS helps you proactively identify and respond to events before they harm security or uptime.
• Manage Risk:
  SAS helps quantify and qualify the true risks in your environment, giving you greater control and insight into security and network operations.

What Does SAS Look For?

ForceOne’s Security Analysis Services looks for many risks to your environment and its reliable operation. Some of the common events we identify and report:

• Worm, virus, malware, chat or peer-to-peer network activity.
• Buffer overflows or injection attacks.
• Numerous failed logons or brute-force attacks.
• Suspicious installations or configuration changes.
• Confidential data leakage (social security numbers, credit card numbers, etc.)
• Sudden rise in traffic from a specific system.
• Misconfigured or vulnerable systems.
• Suspicious clearing or deleting of audit logs.
• Attacks on critical systems such as mainframes, databases, or storage servers.
• Suspicious file uploads.
• Unusual VPN activity or proxy avoidance.
• Suspicious failure of devices.