Cyber Security

no compromise.

Our ‘Cyber Security as a Service’ (CSaaS) solution delivers a comprehensive, enterprise-level approach for mid-sized businesses. Focused on Process, People and Technology we’ve combined the best tools, training and accreditations the industry has to offer into one all-encompassing service. Backed by the flexible expertise of an experienced, straight talking team we’ll provide you with the exact level of detail that you require in one of our three reporting levels; all for one affordable, fixed monthly payment.

Board Report a succinct one page overview that slots straight into your monthly board pack.

Management Report a more detailed report providing management with the metrics they need to evaluate performance.

Dashboard a near real-time visualiser that brings together all the details and metrics to give you full control and visibility.

*CSaaS is basically having your cake and eating it...if said cake were made of Cyber Security

The dull stuff in detail

We really know our stuff

It’s the holistic trinity of cyber security...

Process

It may be dull, but process makes any organisation tick along efficiently. It’s also a necessary evil if you want to achieve industry recognised accreditations and demonstrate to your shareholders, customers and trading partners that their data is in safe hands.

Our CSaaS offering incorporates the Cyber Essentials and Cyber Essentials PLUS certifications to help you nail your processes.

Whether you opt for obtaining Cyber Essentials PLUS or the wider reaching ISO27001, our team will help ensure you’re doing the basics; putting in place policies, procedures and measures to protect the confidentiality, integrity and availability of your confidential information assets.

*Like toast, getting the basics right really matters. It especially matters to our cyber security engineers who live on it on a busy day.

People

Over the past 12 months less than 10% of cyber-attacks observed globally made use of a system weakness. The vast majority exploited “the human factor”: the instincts of curiosity and trust that lead well-intentioned people to click, download, install, open and send money or data.

Our CSaaS solution incorporates award winning industry accredited workforce training backed up by simulated phishing events to test ongoing awareness and compliance.

The results are tracked and summarised in simple to understand reports, so you can see how your workforce are improving and becoming less susceptible to “opening the door” over time.

Technology

Every organisation needs to employ appropriate technical controls across its infrastructure. Basic hygiene factors, such as a modern firewall and the deployment of an antivirus solution, provide a starting point for a broader cyber security framework.

*Unlike this ball of paper we won’t throw away what you already have in place; we'll make it stronger.

Your technology

At norm we understand that all businesses will be at different phases of their cyber security maturity; with some legacy investment in security technology and products so our CSaaS solution works with – and builds on – what you already have to make it stronger.

We think you’d rather know about your weaknesses before you get an incident alarm so our Penetration Test, or Red Team Assessment, actively tries to breach your business’s perimeter through 3 routes: externally through your internet facing endpoints; internally via technology related measures or physical security breaches, or by exploiting the vulnerabilities within your employees to try to compromise your business.

Although a single Penetration Test can give you a “snapshot-in-time” threat assessment, your business is constantly evolving; adding more connected devices and cloud-based applications to your network; meaning your attack surface continues to expand. That’s where the ongoing support of the norm CSaaS solution is invaluable…

Our Technology

Put simply, our CSaaS solution delivers best of breed technology (usually reserved for Enterprise level businesses) to Detect and automatically Respond to an event.

Threat Detection and Response

By bringing together some of the most advanced tools in the market under a single platform, norm’s Threat Detection and Response service is second to none.

Through a combination of Network Intrusion Detection and Endpoint detection, we can protect your technology assets with a multi-layer defence that includes signature and behavioural based engines plus intelligence-based indicators of compromise. Our ability to conduct complex searches of all endpoints to find known and unknown threats and isolate devices either through our UK based security operations center, or through automated playbooks allow us to react and respond at scale to protect your business 24*7.

Vulnerability Management

Our CSaaS includes a vulnerability management solution that continuously monitors your network and end-user devices for known vulnerabilities. You will be alerted should a new vulnerability be discovered anywhere in the world, if there is a device, be that physical or virtual, in your technology estate that could be susceptible.

We do this by deploying a Network based scanner either on your premises, or within your public or private cloud environments, to monitor devices connected to your network; together with an installed Device Agent that keeps the device monitored anytime, anywhere.

UK Based 24*7 Security Operations Centre (SOC)

To fully harness and leverage the technology platforms; norm’s CSaaS team of experts make sense of the noise. And only if there is a problem, will they inform you or act upon a pre-agreed response strategy

Best of breed

The Premier-league partners we brought together to create our brilliant, no-compromise technology solution.

Get personal

As a tech solution individually tailored to your business needs we could go on and on about CSaaS all day. To understand what it can do for your business, call one of the team today on +44 (0) 333 101 4399, or click on the button below, and we’ll be in touch.

The dull stuff in detail

I’m thrilled to have signed off on the CSaaS offering. I’m looking forward to having the most complete cyber security package for the mid-market and continuing our successful working relationship with norm.

Richard Taylor, CIO
Summit Therapeutics

CSaaS allows me to step away from multi-vendor management as the Security Operations Centre coordinates all of the technology for me.

David Vincent, CTO
Perpetuum

The biggest factor was that they had a data protection lawyer in-house who worked for them, which meant there was someone we could directly go to with specific questions about the (GDPR) regulation.

Phil Everitt, Management Information Systems Manager
Leicester Tigers

We were in the market for an independent Data Protection Officer service that was well versed with both UK and EU regulators. We’re thrilled to have acquired this service knowing that an expert is available 24/7.

Suzanne McCabe, Head of Project Management
James Hambro & Partners

Norm’s penetration testing layer, along with the suite of CSaaS modules has enabled MA to exceed all its audit requirements for its major clients.

Rob Elisha, ICT and CRM Manager
Montreal Associates

The speed of your Data Protection Officer’s response was very impressive – it was far quicker than I would have expected even from an in-house DPO

Will Blake, Director of Technology and Analytics
CRU Group

no compromise.

We really know our stuff

It’s the holistic trinity of cyber security...

Process

People

Technology

Your technology

Our Technology

Threat Detection and Response

Vulnerability Management

UK Based 24*7 Security Operations Centre (SOC)

Best of breed

Get personal

Case Studies

Perpetuum

Montreal Associates

Chambers and Partners

Get in touch.

info@normcyber.com

+44 (0) 333 101 4399