Fishtech Group

With offerings spanning Managed Security Services, Identity & Access Management, and wide-ranging Professional Advisory Services, we have solutions to meet the needs of any enterprise worldwide

• Enterprise Managed Detection & Response (EMDR)
• Cloud Security Operations Center (CSOC)
• Cloud Native Analytics Platform (CNAP) With our Co-Managed Splunk offering, one of our flexible service delivery models, we utilize your licenses and implement a shared resource model to bolster your security program

Our flagship EMDR service provides centralized 24×7 detection and response capabilities This comprehensive, human-led and machine-driven security-as-a-service operation supplies the people, process, and technology needed to manage cybersecurity risks, detect threats and respond to incidents in real-time

Our cloud-native security service provides complete protection for an organization’s infrastructure, applications and data running in the cloud – whether it uses AWS, GCP, Azure or a combination of those environments CSOC offers end-to-end security, from 24×7 threat monitoring and incident response to visibility and compliance reporting

CNAP is a cloud native cybersecurity platform specifically designed to overcome long-standing SIEM hurdles in meeting SOC goals and operational metrics CNAP provides comprehensive threat detection, investigation, and workflow along with rich reporting for compliance use cases CNAP is powered by and built entirely on GCP and Chronicle, Google’s security analytics offering

With our SOC-as-a-Service offering, one of our flexible service delivery models, licenses and resources are all maintained by our team SOC-as-a-Service is a complete service solution

With our Hybrid Delivery offering, one of our flexible service delivery models, our resources are confirmed on-site or off-site Our Hybrid Delivery model acts as a dedicated extension of your team

• Digital Forensics & Incident Response
• Security Operations – SIEM & SOAR
• Endpoint Security & Network Security Security Strategy helps clients develop successful security programs across the entire cybersecurity lifecycle by first understanding their current security posture, then seeing how they can mature to a desired target resiliency across people, processes and technology

Proactive incident response (IR) services and immediate deployment of trained investigators under our retainer and rapid/emergency response services for IR investigation, containment and resolution of threats

Our Cloud Security practice helps clients assess their cloud security maturity and develop a strategy for closing the gaps between their current state and their desired target state, as well as developing and deploying secure cloud architectures

Cyderes’ SIEM & SOAR practice takes a tailored, collaborative approach to laying out and executing a plan for moving client SIEM and SOAR environments towards a gapless, highly mature security footprint

We provide clients with services around endpoint protection, offering program maturity assessments, architecture development and implementation We help clients along their hybrid infrastructure journey by providing advice and expertise with assessing, architecting, designing, integrating and mitigating risks around digital and hybrid cloud infrastructures

Helps clients with testing their ICT landscape across people, processes and technology through penetration testing, red-team exercises, social engineering, vulnerability assessments and configuration reviews

• Privileged Access Management (PAM)
• Authentication & Access Management IAM assessment, strategy, roadmap, and program strategy alignment; IAM steering committee design; metrics and KPIs; solution optimization (on-prem, cloud, hybrid); technology selection

Risk-based certifications and access reviews; role- and attribute-based access controls (RBAC/ABAC); segregation of duties policy and protocols

Directory services (AD/Azure AD, LDAP, database); authoritative sources (analysis, sanitization and standardization); groups, profiles, roles, attributes (centralized, decentralized)

Privileged account identification and dispositioning; account vaulting and credential rotation; privileged session management and monitoring; secrets management, DevOps and DevSecOps; third-party privileged account access

Single sign-on; multi-factor authentication; situationally and contextually based access control; enterprise access policy; customer IAM

Joiner/mover/leaver policy and procedure; automated provisioning and deprovisioning; access request and approval policy and workflow; third-party user lifecycle

Data collection infrastructure; case management (open, assign, remediate, close); decision processing (normal vs anomalies, policy-driven, AI/ML); alert management

“Make cybersecurity your competitive advantage”