Information is one of a financial institution’s most important assets. Protection of that information is necessary to establish and maintain trust between the financial institution and its customers, maintain compliance with the law, and protect the reputation of the institution. The regulatory and compliance requirements for financial institutions continues to rapidly expand and it can be difficult for even the best IT teams to keep up with the latest requirements and solutions for meeting those mandates.

 

FreedomFire Communications is able to offer Managed Security for Financial Services that is designed to help meet the financial services regulations on information security originated under the GLBA and prescribed by the Federal Financial Institutions Examination Council (FFIEC). Additional support is also provided for agency specific requirements such as those from the Federal Deposit Insurance Corporation (FDIC), the National Credit Union Administration (NCUA), as well as the Payment Card Industry Data Security Standard (PCI DSS).

Security Controls Implementation

Security Controls Implementation is one of the key requirements to be met from the FFIEC. Our SaaS offerings incorporate comprehensive Unified Threat Management (UTM) security services to address these needs which include Advanced Firewall, Intrusion Prevention, Antivirus, Web Filtering, Anti-spam, Web Application Control and Data Leak Prevention. All UTM services can be fully implemented in the cloud, on premise, or in a hybrid configuration delivering unprecedented, defense-in-depth security.

Security and Process Monitoring

Financial institutions need to rigorously monitor the security of their networks and host systems from a regulatory perspective, but also from a security best practices perspective. Additionally, they need to continuously gather and assess new threats and vulnerabilities to stay ahead of the game. We offer several managed solutions to support these requirements which include Managed Logging with real-time review, File Integrity Monitoring to keep an eye on servers and other critical endpoints, as well as Vulnerability Scanning Services to evaluate the effectiveness of existing security controls.

Additionally, we offer a portal-based Security Information Management platform which allows organizations to track remediation activities, correlate and report on suspicious activities and produce audit reports to demonstrate due diligence in running an effective information security program.

Managed Security for Financial Services

Our cloud based and premises based managed security services provide a comprehensive, multi-layered approach to security that helps meet the increasing number of regulatory requirements of all sizes of financial institutions. Our SaaS offerings work together as a security best practice to eliminate/reduce the risks associated with blended attacks, and coordinate security alerting, logging, reporting, compliance and response. Our suite of SaaS offerings includes….

Advanced Firewall

Featuring deep packet inspection with up to 500 firewall policies, configurable by the customer via our secure web portal. The service includes periodic and on-demand reporting.

Intrusion Prevention

Features multi-layered and blended attack detection for both known and unknown threats with powerful anomaly detection functions to identify and stop zero-day threats. IPS supports all network types including wireless IPS and rouge wireless detection

Anti-Virus/Anti-Malware

Comprehensive real-time network based anti-virus, anti-malware and anti-crimeware detection with both signature and rules-based blocking of known and zero-day attacks.

Web Filtering

Manage employee Internet access with Whitelist/Blacklist and policy-based content filtering to reduce bandwidth consumption and enforce Internet use policies in real-time.

Anti-Spam

Automatically detects spam and optionally tags or deletes it based upon configurable policy rules before it can consume valuable bandwidth or email storage.

Web Application Control

Provides more granular, precise control of specific applications like IM, chat, voice or video on social media sites such as Facebook, Instagram, or X.

Data Loss Prevention

Real-time detection / prevention of sensitive data being transferred outside of the organization including items such as credit card data, healthcare or financial data.

Vulnerability Scanning

On-demand scanning of internal & external IP addresses to identify and remediate vulnerabilities in real time … with certified quarterly scans for PCI compliance.

Security Information Management

Portal based workflow management and tracking required to demonstrate due diligence in meeting organizational security policies and compliance reporting.

File Integrity Monitoring

Real-time monitoring of critical system or configuration files for unauthorized access or changes.

To find out more about what we can do to support your Financial Services Institution simply ask us at FreedomFire Communications.

Leave a Reply