IT Services Plan and Resource Overview Last Modified September 13, 2023

The following is an overview of The Purple Guys Security Services provided in the applicable managed IT & security services plan.

The Purple Guys are responsible for deploying, maintaining, and reporting on an agent-based security solution for our clients. This system is specifically designed to prevent the execution of malicious software on client devices. It also offers disk encryption and generates alerts for any conditions identified as suspicious by the endpoint protection tool.

A. Change Management: The Purple Guys will implement, sustain, and provide reporting through sophisticated, agent-based change management software for our clients. This solution is meticulously designed to track alterations within your infrastructure and promptly report these notifications for your awareness and control.

B. User and Licensing Audits: The Purple Guys will implement, sustain, and provide comprehensive reporting on Active Directory or Azure AD for our clients utilizing these services. Our approach not only ensures robust reporting on potential risk areas within your Active Directory/Azure AD installations but also facilitates meticulous user and license auditing for hosted email and internal solution stacks.

C. Security Alert Response and Reporting: The Purple Guys will meticulously examine security events as part of our network security monitoring service. We will assess alerts and, when necessary, escalate them to our IT support team for immediate action. This includes remediation of vulnerabilities, countering potential exploits, and addressing any other events that pose a significant risk within the client’s environment.

D. Managed Detection & Response: The Purple Guys will deploy, maintain, and report on an agent-based solution for our clients. This solution is designed to alert on suspicious activities observed by the agent-based solution and allow for further investigation of suspicious activity on hosts with the agent installed. The Purple Guys will leverage this agent where it is necessary to have a closer look at suspicious activity that may indicate an intrusion.

E. Security Operations Center (SOC) 24×7 Alert Monitoring and Analysis: The Purple Guys collaborates with a third-party organization that employs a collection of proprietary detection tools. These tools gather data and generate alerts based on activity within our clients’ networks. The third-party team assesses the output from these tools and categorizes security alerts using a combination of custom, predefined alert rules, abnormal activity detection, machine learning, and curated threat intelligence. This multifaceted approach enhances security event detection, uncovers harmful automation, identifies vulnerability exploits, and monitors potential attacker activity and data exfiltration. Upon detecting a critical breach, immediate action is taken to neutralize the risk and isolate the threat, preventing it from causing further harm.

F. Email Security Solution: The Purple Guys provide a comprehensive, cloud-based AntiSpam service that filters out inbound Spam, ensuring your server receives only clean emails. This solution not only scrubs your email for Spam and viruses but also proactively scans attachments for potential threats in a secure sandbox environment and offers URL link protections. Each user is given a web-based dashboard to manage their individual allowed and disallowed lists and to review quarantined emails. In the event of an Internet or email service outage, our service prevents email loss by automatically queuing inbound emails for up to 48 hours. Furthermore, depending on your plan, we include seamless and behind-the-scenes email archiving, encryption, and Microsoft 365 backup features. As part of our extensive security coverage, we incorporate an advanced system utilizing AI and deep learning to identify and neutralize threats such as phishing, ransomware, and business email compromise before they reach your network. These added layers of security ensure the integrity and availability of your email data, providing an all-encompassing email security solution.

G. Web Browsing Security Services: The Purple Guys enhance your internet browsing security by implementing advanced DNS services. This approach offers a more secure, speedy, and reliable internet access. Furthermore, we can assist in controlling what content can be accessed within your business network. Using content categorization and domain tagging services, we can block specific categories of online content, thereby ensuring a safer and more productive browsing environment for your team.

H. Network Monitoring Services: The Purple Guys employ a cloud-based network monitoring and management tool that will allow for proactive monitoring alerts, discovery of distributed IT assets, configuration change management, and automated security and performance updates.

I. Vulnerability Assessments: The Purple Guys conduct thorough vulnerability assessments on all managed devices connected to our clients’ networks. We continuously scrutinize the security landscape of your infrastructure via regular network scans. To stay current with emerging threats, we extract data daily from national databases. This strategy enables us to swiftly spot new vulnerabilities and assess their potential to impact your network, ensuring our readiness to counter evolving cybersecurity challenges. Up to four times a year, we compile a comprehensive vulnerability report. In this document, we rank the identified vulnerabilities using the industry-standard Common Vulnerability Scoring System (CVSS). This system helps us prioritize remediation strategies based on each vulnerability’s potential impact and severity, focusing first on those that pose the most significant threat to your network’s security.

J. Proactive Vulnerability Remediation of Critical Findings: The Purple Guys are dedicated to the robust security of your IT environment. We perform exhaustive internal vulnerability assessments to pinpoint any potential weaknesses that could be exploited. Upon discovering critical vulnerabilities that could substantially compromise your systems, we prioritize their immediate remediation. Our proactive stance ensures that these high-risk vulnerabilities are swiftly addressed to mitigate potential cyber threats. We provide remediation of critical findings from auditors or third-party vendors for up to 20 hours per contract year, underscoring our commitment to your security. For vulnerabilities classified as high, medium, or low, we adopt a needs-based approach to remediation. This involves assessing the potential risk and impact associated with each vulnerability, considering the involved systems and data at risk, before deciding on the necessary course of action. If remediation for these vulnerabilities or any remediation that exceeds the allocated 20 hours per contract year is required, we will provide a separate quote outside of this agreement. For informational findings, we evaluate each issue in detail and provide the required guidance or remediation based on the specifics of the situation and in alignment with best practice guidelines. Upholding the security of your systems and data is our primary goal, and we apply our expertise to ensure all vulnerabilities are suitably managed and resolved.

K. Security Framework Assessment: The Purple Guys offer an annual comprehensive Security Framework Assessment to assess your organization’s information security practices. Our expert security analysts evaluate your security controls and procedures against CIS Critical Security Controls. We identify any gaps or weaknesses, provide recommendations for improvement, and deliver a detailed report to enhance your overall security posture. Our Assessments help ensure regulatory compliance, mitigate risks, and instill confidence in your customers and partners by demonstrating your commitment to robust information security practices.

L. Security Framework Remediation: Following our comprehensive Security Framework Assessment, we provide tailored Security Framework Remediation services to align your organization’s information security practices with industry-recognized frameworks. Based on the assessment findings, we address areas of non-compliance or weaknesses by developing customized remediation strategies. Our aim is to enhance your overall security posture, ensure regulatory compliance, and mitigate the risk of security incidents. By partnering with us, you can establish robust security measures that align with recognized standards, instilling trust and confidence in your customers and partners.

M. Log Aggregation and Storage: The Purple Guys will set up and oversee a log forwarding agent for all servers and workstations within our clients’ monitored networks, provided services have been ordered for these devices. Logs, including those from the Server Operating System, applications, security, among others, will be directed to The Purple Guys’ log aggregation and storage solution. This platform allows our Security Operations Center (SOC) personnel to perform targeted searches. Logs will be kept in a readily searchable format for up to 31 days, with an additional 12-month cold storage provision. For any further storage requirements, we can make accommodations and will provide a separate quote.

N. Network Intrusion Detection: The Purple Guys will install, manage, and generate reports on an appliance-based Network Intrusion Detection System (NIDS). This system will be routinely updated with the most recent threat intelligence rule sets provided by commercial vendors and information sharing organizations. Alerts will undergo an assessment by Security Operations Center analysts, utilizing the Security Orchestration and Automated Response (SOAR) system for automated classification and processing of alert data.

O. Active Directory and Azure Active Directory Management: Our comprehensive services include robust monitoring of both on-premises Active Directory and Azure Active Directory, as well as vigilant surveillance of Microsoft 365 accounts. We are dedicated to actively tracking and analyzing account activities, including the creation, alteration, or deletion of accounts. We pay special attention to anomalies and unusual activity patterns, swiftly responding to any potential threats. In addition, we ensure that privileged access is strictly controlled, allowing only verified users to gain elevated permissions. This service is integral to maintaining the security and integrity of your user management system across all platforms, both locally and in the cloud.

P. Security Awareness Training: We provide dynamic cybersecurity awareness training that employs captivating micro-learning modules, each spanning 3-4 minutes. These modules use the power of “Hollywood-style storytelling” to educate and equip employees, executives, entire organizations, and even their families, turning them into effective defenders against cybersecurity threats.

Q. Phishing Defense Training: The Purple Guys will periodically assess your users’ vulnerability to phishing through carefully crafted campaigns that mimic actual threats. In the event users are deceived during these test scenarios, we will promptly provide them with targeted online training to enhance their awareness and defense strategies.