External Assessment

  • Al-assisted open-source intelligence gathering
  • DNS misconfiguration review
  • Publicly leaked credentials search
  • Anonymous extemal vulnerability scanning
  • Website security testing (OWASP Top 10)

Wireless Assessment

  • Facility walkthrough for rogue wireless networks
  • Wireless security settings & Pre-Shared Key strength analysis

CloudFirst Assessment

CIS Benchmark Assessment

CIS AWS Assessment

  • Secure AWS environment with CIS Benchmarks & Shared Responsibility Model.
  • Covers AWS Foundations, Amazon Linux 2, and EKS.
  • Provides prescriptive configuration best practices.
  • Assess your organization’s cloud readiness and plan for effective adoption.

Phases

CIS OCI Assessment

  • Enforce MFA for all console users.
  • Restrict remote admin ports to within the enterprise network.
  • Enable logging and notifications to detect anomalies and investigate incidents.
  • CIS OCI Foundations Benchmark offers step-by-step secure configuration guidance for Identity, Networking, and Logging.
  • Establishes a secure baseline configuration for OCI environments.
  • Recommended for all OCI users to meet Level 1 CIS Benchmark compliance.
  • Benchmark Report includes compliance status for each Level 1 control.

CIS Azure Assessment

  • Links to CIS Azure Security Benchmark v2
  • Advanced Data Security updated to Azure Defender
  • New Azure Defender bundle recommendations
  • Updated activity log alert remediation
  • Deprecated feature recommendations removed
Azure Virtual VM Assessment

Evaluate readiness and cost for Azure migration:

  • Azure Readiness: Suitability of servers for migration
  • Monthly Cost Estimation: Compute & storage costs
  • Monthly Storage Cost Estimation: Disk storage costs post-migration

CIS M365 Foundations Benchmark Assessment

  • Establishes foundational security for Microsoft 365 adoption
  • Not a complete list of all security configurations
  • ecfirst reviews and reports compliance with CIS M365 secure baseline
  • Focuses on Microsoft 365 infrastructure security