Keeping Your Data Secure

24/7 Endpoint Protection

Our endpoint protection platform has 24/7 monitoring to detect anomalous actions in real time, including fileless attacks, exploits, bad macros, evil scripts, cryptominers, ransomware and other attacks.

Benefits: 

• 24/7 threat management and response to all alerts 
• Advanced EDR solution to handle sophisticated threats 
• More robust protection vs. traditional antivirus protection 
• Ability to roll back infections on workstations to a clean state 

Darkweb Monitoring

We monitor the darkweb for stolen or leaked information. The most common discoveries on the darkweb are credentials for things like web accounts, email, and corporate networks.  

Benefits: 

• Monitors for possible user credentials due to data breaches, hacking, or malicious intent 
• Warns of duplicate passwords and helps prevents password reuse from causing compromise to other accounts 
• Automatically protects all email addresses on our domain
• Ability to add executive personal email addresses for monitoring  

Website Protection

Our website protection platform provides a way to back up our website and all of its data. It also monitors if our website is down and unavailable to the public. Lastly, it monitors our website for malware infections. If ever our site is compromised, the backup provides a simple one-step restore process. 

Benefits: 

• Ensures our ability to restore our website if compromised 
• Monitors for outages and possible blacklisting 
• Keeps our website from being blocked in search engine results 

Security Awareness Training

Every team member completes extensive training modules that simulate phishing attacks to help users identify and avoid potential threats. Each user receives scores to help ensure additional training is available when needed. 

Benefits:

• Provides training upon onboarding and throughout the year
• Provides ongoing phishing simulations to identify possible risks and initiate remedial training

Microsoft365 Security

We monitor Microsoft365 for security events. We can report on numerous changes and alert administrations of suspicious activity.  

Benefits: 

• Monitors all accounts for logins outside of the US
• Monitors for forwarding rules outside of the organization
• Monitors for mailbox permission changes
• Monitors for creation of new administration accounts
• Monitors for access from new device or IP address

Backup and Data Protection

All of our data in Microsoft365 is backed up three times daily. We are also provided flexible restore options to recover data quickly if necessary.

Benefits:

• Provides the ability to easily and quickly restore items
• Provides protection against ransomware
• Provides ability to restore single items that were accidentally deleted.

Advanced Threat Hunting

We utilize a system to detect threats that have made it past traditional defenses. This system is designed to discover hacker footholds that are on your network. 

Benefits: 

• Provides automated remediation of advances threat if possible, or provides step-by-step actions to take
• Ability to see possible vulnerable ports that could compromise our devices

Remote Monitoring & Management

Our RMM plugin allows us the ability to manage computer in a workgroup environment. Its policies provide essential protection, locking down vulnerable protocols, limiting end user access to dangerous function, preventing data theft and phishing, and watching for ransomware attacks.

Email Security

Our email security system provides spam filtering, malware protection, and phishing protection. It also provides email encryption to allow our team to communicate with clients securely. 

Benefits: 

• More robust spam filter and phishing protection than the built-in option through Microsoft 365
• Provides a higher level or protection by looking for advanced threats
• Opens attachments in a sandbox environment to look for malicious actions
• Provides email encryption to easily and safely send confidential information

Applications Management

All computer applications on our teams' devices have been through an approval process and are always kept up to date to ensure the highest level of security and protection. We are also able to remove unapproved applications should the need arise.

Vendor Due Diligence

Vendor due diligence at Plancorp involves a comprehensive process to assess and mitigate risks associated with third-party vendors.

We conduct thorough assessments to evaluate vendor reliability and ethical standards.  Including financial stability, business practices, compliance with relevant laws and regulations, and cybersecurity measures.

We regularly update and refine these processes to adapt to changing regulations and industry best practices.

Multi-Factor Authentication

We utilize two-factor or multi-factor authentication (2FA/MFA) for cloud-based applications to further enhance security.

It adds an extra layer of protection beyond just a password, requiring users to provide two or more verification factors to gain access to cloud resources.