External Penetration Testing

An external network penetration test assesses perimeter security by identifying weaknesses in internet-facing systems. It involves a vulnerability assessment followed by targeted exploitation attempts. Like checking a building for security gaps, the pen tester seeks digital vulnerabilities like unlocked doors or missing locks. Upon finding weaknesses, they attempt to gain network access, simulating hacker actions from the internet.

Internal Penetration Testing

An internal network penetration test evaluates security controls on devices within the client’s network, focusing on internal vulnerabilities rather than perimeter security. It involves a vulnerability assessment and targeted exploitation attempts. Similar to inspecting a building for internal security flaws, the pen tester seeks digital vulnerabilities like unlocked safes or exposed sensitive data. Upon finding weaknesses, they attempt to access sensitive data or systems, simulating the actions of both an external hacker and a malicious insider with physical network access.

Vulnerability Assessment

A Vulnerability Assessment is a service designed to identify security gaps and weaknesses and determine the effect that these cyber threats could have on a network. It is a simulation of the initial steps of a real-world attack on targeted assets using the same tools and techniques that modern hackers and cybercriminals use.  Unlike Penetration Testing, a Vulnerability Assessment does not include manual testing and attempts to exploit identified security weaknesses. 

Risk Assessment

JLS Technology conducts risk assessments to evaluate cybersecurity controls within organizations according to industry standards. These assessments appraise administrative, technical, and physical safeguards related to IT security. We employ a qualitative approach, determining risks through stakeholder interviews with management and IT/security personnel. Our assessments are based on industry frameworks like NIST, COBIT, and ISO.

VCISO

The Virtual Chief Information Security Officer (VCISO) service helps businesses take control of information security by providing outsourced cybersecurity leadership on an as-needed basis.  This service offers customized information security planning, expert information, security compliance management, security policies & procedure development, steering committee leadership participation and security plan presentation to corporate stakeholders.

Incident Response

JLS Technology’s incident response (IR) services provide containment and management of a cyber incident once it has been detected. A business’s IR procedures and plan combined with SANS best practices are utilized in the guidance provided by JLS Technology during the management and response. Incident Response retainer agreements ensure your company has access to qualified experts during a cybersecurity incident.

Digital Forensics

JLS Technology provides advanced digital forensics investigation tools and techniques for diverse clients and business environments. Digital forensics services are utilized for various situations including employee misconduct, embezzlement, sexual harassment cases, proprietary information theft and other incidents.

Social Engineering

Social engineering and human vulnerability testing help ensure employees adhere to policies and best practices to avoid common security lapses.

Policy Development

JLS Technology will review and evaluate an organization’s current IT policy and other related policies. The policy and procedures governing the use and administration of information technology assets will be compared to industry standards for cybersecurity. Failures or omissions will be identified along with recommended remediation steps.

Policies and procedures reviewed include Cybersecurity Policy, Enterprise Risk Management (ERM) Strategy, Incident Response and Disaster Recovery.