Cloud Telework Security: 4-Wk Assessment

Neovera will perform an assessment of the customer's cloud/telework security infrastructure, spanning public/private/on-prem/hybrid environments - including gap analysis and recommendations for a cloud telework security target operating environment (TOE).

Neovera will review existing security controls/tools, security architecture, and the security processes supporting the business and the technical security controls/tools - including alignment with industry best practices and compliance standards, e.g., GDPR, CCPA, HIPPA, FINRA, SEC, CIS, PCI, AICPA, NIST.

Technologies considered under this assessment may include: Endpoint Protection Management & Detection/Response (EPM/EDR - Defender ATP) Identity & Access Mgmt (IAM - Active Directory), Data Governance/Classification, Information Protection & Loss Prevention (IGA/DLP - Azure IP), Security Event/Workflow Orchestration & Automation (SIEM/SOAR - Sentinel), Security Posture Mgmt (Security Center), Incident Response (Advanced Threat Protection), and Telework/VDI (Windows Virtual Desktop).

The output of the strategic security assessment will be the following deliverable: A strategic security roadmap presentation with recommendations and a high-level enterprise security reference architecture.

Neovera will leverage the following resources to complete the activities outlined above over the course of a 3-to-4 period (from kick-off to deliverable presentation):

• Sr Security Partner
• Senior Technical Project Manager
• Enterprise Security Architect
• Sr Security Consultant

Neovera’s Cloud Security practice is led by cyber-identity/data-cryptography innovators who have designed, implemented and managed global cybersecurity programs for enterprises around the world across multiple industries – from fintech startups to the Fortune Global 500 - including Neovera’s own 24x7 JSOC based inside the 'Heart of the Internet' in Ashburn, VA (the largest ISP/Cloud hub in the world by traffic volume).