Foresite Cybersecurity

BACKGROUND

Please describe your company and position.

I am the Manager, Information Security of Sacred Heart University

Describe what your company does in a single sentence.

Higher Education

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Foresite Cybersecurity to accomplish?

• Augment our small IT Security team
• Monitor and fine tune alerts
• Manage our firewalls
• XDR

SOLUTION

How did you find Foresite Cybersecurity?

Online Search

Why did you select Foresite Cybersecurity over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

Describe the scope of work in detail. Please include a summary of key deliverables.

Monitor, alert, and take necessary action on any cyber security incidents that happen on our network. Currently we have our critical infrastratucure, as well as our Azure tenant, being monitored. They also monitor and comanage our firewalls. This includes keeping them up to best business practices.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

There is monthly meetings on tickets opned/closed, they have helped me in the middle of the night with an issue with our palo alto firewalls. They have helped me deliver a setup for our firewalls as well.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They are consistently there for us. We have a dedicated team assigned to us that open/close tickets, If I put in a request or need help ASAP, they are there when needed. 

In terms of project management, it runs smoothly. Everything is done through provision - updates, documents, scheduling, etc all done through this console. 

What was your primary form of communication with Foresite Cybersecurity?

Virtual Meeting

What did you find most impressive or unique about this company?

Their pricing and niche for Higher Education. They have incredibly bright engineers that are able to assist when needed. Their engineers are knowledgable in many facets of IT. 

Are there any areas for improvement or something Foresite Cybersecurity could have done differently?

They are receptive to any requests we have which is nice. One of the best improvements they have made is with their pen testing software. 

BACKGROUND

Please describe your company and position.

I am the IT & Development Manager of Enable Ltd

Describe what your company does in a single sentence.

We are a payroll bureau serving over 10,000 employers annually.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Foresite Cybersecurity to accomplish?

• Get a baseline of our current security posture
• Set out clear goals for us to improve our security
• Have an expert third party support us in achieving this

SOLUTION

How did you find Foresite Cybersecurity?

Referral

Why did you select Foresite Cybersecurity over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from Foresite Cybersecurity were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We commissioned Foresite to complete a penetration test in four parts:

1. External vulnerability scan - assess our exposure to external threats
2. Internal vulnerability scan - assess our exposure to internal threats
3. Assumed breach simulation - assess our exposure in the event of our environment being compromised
4. Web application assessment - assess our exposure via our primary web application used by both staff and customers

The outcome of each was a detailed but clear report with remedial requirements described in plain English along with appropriate further explanation available from the tester when required. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Our testing included both initial testing and re-testing. The outcome of the initial testing was a set of reports which we then acted on internally. Through the use of these well-written reports and direct communications with Foresite staff where required, we managed to get our overall security rating of critical risk down to medium over the span of 3 months. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

It was a clear process to create the initial scope of what we as an organisation required which Foresite clearly understood. From there, we were onboarded onto their ProVision platform which allowed me and my team full visibility over the status of all testing, and allowed for easy communication between us and them where we needed to provide access. At all points in the project, I felt the level of communication was top-tier and appropriate, and all deliverables were completed in good time.

What was your primary form of communication with Foresite Cybersecurity?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Foresite was very approachable for our business where we had never engaged in external security testing before. Expectations were set at an appropriate level and the outcomes from testing were very well communicated so that me and my team understood exactly what was required. Any time we needed further explanation Foresite never hesitated to schedule calls with the relevant people.

Are there any areas for improvement or something Foresite Cybersecurity could have done differently?

Sorry to not be of more help, but I can't think of any improvements to our experience!

BACKGROUND

Introduce your business and what you do there.

I'm a financial consultant at a healthcare company.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Foresite Cybersecurity?

We needed assistance with policies and penetration testing services.

SOLUTION

What was the scope of their involvement?

Foresite Cybersecurity provides penetration testing services for our company. We've provided them with initial documentation, and the team offers cybersecurity support for us. 

How did you come to work with Foresite Cybersecurity?

We contacted Foresite Cybersecurity through a recommendation.

What is the status of this engagement?

We began working with Foresite Cybersecurity in September 2023, and our engagement is ongoing.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We've noticed an improvement in our company's overall privacy and cybersecurity. 

How did Foresite Cybersecurity perform from a project management standpoint?

Foresite Cybersecurity delivers work on time and on budget.

What did you find most impressive about them?

I'm mostly impressed by the team's responsiveness and thoroughness.

Are there any areas they could improve?

I can't think of anything for Foresite Cybersecurity to improve.

Do you have any advice for future clients of theirs?

I recommend working with Foresite Cybersecurity because they're knowledgeable, responsive, and thorough.

BACKGROUND

Please describe your company and position.

I am the IT Director of a business services company 

Describe what your company does in a single sentence.

Business consulting services

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Foresite Cybersecurity to accomplish?

• Complete a NIST assessment
• Perform a penetration test

SOLUTION

How did you find Foresite Cybersecurity?

Referral

Why did you select Foresite Cybersecurity over others?

Referred to me

How many teammates from Foresite Cybersecurity were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Foresite conducted a complete review of our cybersecurity policies, procedures and controls. They also performed a penetration test of the network in our headquarters and a threat and vulnerability assessment of our new website.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We have left the engagement with a detailed NIST assessment of our company, with specific recommendations for remediation activities and a host of ideas and templates for increased security documentation.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Foresite communicated a clear cadence for meetings and communications from the outset and met or beat every target date they set for the project milestones.

What was your primary form of communication with Foresite Cybersecurity?

Virtual Meeting

What did you find most impressive or unique about this company?

NIST assessments tend to be extremely regimented and impersonal, but our Foresite Cybersecurity consultant tailored our assessment to our company's size and needs. They understood and accounted for the unique position our company finds itself in the current moment and offered bespoke, realistic recommendations that we hope to put into practice.

Are there any areas for improvement or something Foresite Cybersecurity could have done differently?

Compared to previous assessments we have had performed, it's tough to find a flaw with how Foresite conducted themselves during this project.

BACKGROUND

Please describe your company and position.

I am the Director of IT of Universal Screen Arts, Inc.

Describe what your company does in a single sentence.

We engage with consumers using several e-commerce sites and via direct mailing.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Foresite to accomplish?

• Meet PCI Requirements
• Firewall Management
• Augment internal staff
• Stay current on emerging security threats

SOLUTION

How did you find Foresite?

Referral

Why did you select Foresite over others?

• High ratings
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Foresite were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We initially worked with Foresite to onboard their Provision platform to meet PCI requirements. We quickly began to rely on the also to co-manage our firewalls. They continued to provide expertise as we expanded our environment and implemented new technologies such as SD-WAN.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The initial requirements related to achieving PCI compliance were realized within 3 months of starting our project. What felt like it was going to be a huge undertaking required relatively few resources from our side. From an ongoing perspective, they have partnered with us as an extension of our team and continue to leverage improvements on their platform that help our changing needs.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

During onboarding, there was a dedicated resource who explained the process well and regularly checked in. There was also a great transition from the onboarding team to the SOC. The knowledge and ownership transfer is often where I see projects breakdown, but in this case, the team just kept adding value.

What was your primary form of communication with Foresite?

Virtual Meeting

What did you find most impressive or unique about this company?

We've had a few Sr Account Managers since starting with Foresite several years ago. In all cases, they have owned our account and taken an active roll in improving our security position. It's evident that the Foresite team collaborates on behalf of their clients and treats all our inquires thoughtfully. They communicate clearly and regularly and won't hesitate to pick up the phone form important discussions.

Are there any areas for improvement or something Foresite could have done differently?

Foresite has been such a good partner that I would like to know more about services they've launch which we are not taking advantage of.

BACKGROUND

Please describe your company and position.

 I am the Network Administrator of an engineering company 

Describe what your company does in a single sentence.

We support improving the risk management, reliability and productivity of assets and operations for the U.S. military and commercial businesses around the world.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Foresite to accomplish?

• Network Security
• 24/7 Monitoring
• Configuration Assistance

SOLUTION

How did you find Foresite?

Referral

Why did you select Foresite over others?

• Referred to me
• Company values aligned

How many teammates from Foresite were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Foresite provides managed security services including network security monitoring, security recommendations, implementation, and alerting for known security vulnerabilities for Fortinet.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We have had continued success with Foresite. They continue to be active participants in this partnership to ensure that we have all of the knowledge and recommendations that we need to actively keep our network secure.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They are extremely reliable. I am able to get answers to my questions and help with any tickets that I open same day and can call in directly and be helped immediately if the situation warrants it. Everyone that I have worked with has been extremely knowledgeable and has been willing and able to address any concerns that I have. They keep open tickets updated in a timely manner and keep working on them until I approve the closing.

What was your primary form of communication with Foresite?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The have described themselves as more of an extension of our team instead of an outside partner or vendor.

Are there any areas for improvement or something Foresite could have done differently?

N/A

BACKGROUND

Please describe your company and position.

I am the Group IS Service Manager of a retail company 

Describe what your company does in a single sentence.

Timber and Building supplies to retail and trade customers

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Foresite to accomplish?

• Provide 24x7 Cyber Security Management
• Deliver a single vision of our security posture

SOLUTION

How did you find Foresite?

Referral

Why did you select Foresite over others?

• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from Foresite were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The purpose of the Service is to provide a focus on “Who, What and When” the business systems are being accessed. This measured approach will:

• Develop an understanding of how the core systems are being accessed 
• Highlight any security vulnerabilities 
• Provide an insight in to how the end users are using IT - “BAU” 
• Support the development of existing IT Security 
• Affect future cyber security developments.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Real-time monitoring and analysis of security events across the network, endpoints, applications, and users 24x7 detection and response to threats, anomalies, and incidents 
• Quarterly compliance reporting, auditing, and review of system operation. 
• Forensic investigation and root cause analysis of security breaches and incidents 
• Dashboard and visualization of key security metrics and trends 
• Streamlining and coordinating security processes and solutions

Describe their project management. Did they deliver items on time? How did they respond to your needs?

A dedicated security engineer from day 1 of the project has ensured services have been onboarded successfully, issues resolved, and ongoing upgrades and service changes has been completed in a timely manner. This same engineer delivers quarterly reviews on service performance, threat analysis and response requirements.

What was your primary form of communication with Foresite?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They deliver a good-quality service; all the engineers we have dealt with have been professional and we have confidence that our systems and services are protected 24x7.

Are there any areas for improvement or something Foresite could have done differently?

NA

BACKGROUND

Please describe your company and position.

I am the Chief Technology Officer of Pool Administrators Inc.

Describe what your company does in a single sentence.

By combining our unique expertise, our team approach and technology systems, PAI has successfully administered various subsidy programs including risk spreading reimbursement and assessment programs.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Foresite to accomplish?

• Information Security Program
• Cyber Security
• NIST 800-53 Rev 5 Compliance

SOLUTION

How did you find Foresite?

Existing Parntership

Why did you select Foresite over others?

• Referred to me
• Company values aligned
• Subject Matter Expertise

How many teammates from Foresite were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

• Perform a NIST 500-83 Rev 5 compliance assessment. 
• Work with the business to establish the policies and procedures necessary to meet the requirements for the NIST family of controls.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Meet, Partially Meet or Do Not Meet the control requirements and thereafter establishing the necessary processes to satisfy compliance.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Tom is knowledgeable, skilled and forward thinking. His ability to advise on how to handle intricate and complicated topics kept this initiative moving forward in a known and measurable manner. The timeliness of deliverables was spot on. There was always an eye kept towards the handling of topic specific particulars and those in general which made managing the tasks at hand easier to understand and keep moving forward.

What was your primary form of communication with Foresite?

In-Person Meeting

What did you find most impressive or unique about this company?

Their level of understanding across the broad range of the security spectrum is impressive

Are there any areas for improvement or something Foresite could have done differently?

Foresite has previously exceeded expectations with how they go about achieving their deliverables and has continued to do so here.

BACKGROUND

Please describe your company and position.

I am the Senior Manager of Information Security

Describe what your company does in a single sentence.

Provides govtech services to federal, state and local governments.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Foresite to accomplish?

• FISMA Moderate audit and attestation
• CJIS audit and attestation
• HIPAA audit and attestation

SOLUTION

How did you find Foresite?

Online Search

Why did you select Foresite over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Foresite were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Foresite provides us annual cyberscecurity audits for FISMA Moderate (NIST 800-53 Rev4/5), CJIS (CJIS Security Policy) and HIPAA. Reports and attestations generated annually for each audit type. Foresite also provides MSSP and annual pen-test services for GovQA.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

1. Succesful complettion of FISMA Moderate, CJIS and HIPAA audits and attestations year after year
2. Provision MSSP monitoring
3.  Annual pen tests

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Foresite has always been professional, flexible and easy to work with. The class, knowledge and experience of their staff is top tier. As a govtech company, we have thousands of clients and security and compliance are of the highest importance to each of them. Foresite has been more than a trusted business partner, they have always delivered for us. We have never experienced a single project where there were any delays or other issues.

What was your primary form of communication with Foresite?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

We were impressed with their knowledge across multiple frameworks and disciplines.

Are there any areas for improvement or something Foresite could have done differently?

I wouldn't change a thing. I sincerely hope I can count on Foresite for many years to come.

BACKGROUND

Please describe your company and position.

I am an executive of Katalyst

Describe what your company does in a single sentence.

We help our clients go further, faster and safer with cybersecurity solutions.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Foresite to accomplish?

• Open XDR Platform

SOLUTION

How did you find Foresite?

Referral

Why did you select Foresite over others?

• Good value for cost
• Company values aligned
• Agnostic in support and not product focused

How many teammates from Foresite were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Foresite provided us with a co-managed cybersecurity solution including SOC / SIEM services across our 3 locations in the Carolinas.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Foresite was able to help us clean up our perimeter prior to starting the service which was a big relief. We reduced our unused / rarely used rules by over 21%. Foresite also helped me keep my company's technical team and associated burn out very low. Having them support our environment 24X7X365 is a huge relief for us.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Their onboarding was solid. Essentially, at any given point throughout the onboarding process, I knew exactly what stage our project was in. Communication was solid, but not annoying. I don't have that much time as my schedule is always full. They were accommodating in my requests for the meetings.

What was your primary form of communication with Foresite?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Mostly, that we aren't locked into a single solution. If we want to change our EDR down the road, or any of the technology they are protecting for us, we can. We aren't locked into a specific piece of HW or SW as they can ingest anything that we want to throw at them. So many of these services force you to use their client and I'm convinced that isn't what's best for our company.

Are there any areas for improvement or something Foresite could have done differently?

With any project of this scope, there are always going to be at least one or two things you didn't think of. Not here... Their onboarding was proof that they have done this hundreds of times and have continued to improve their process.